Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/386ccd05-1fa4-42cd-8a87-843146c1c015.roa
File:                     386ccd05-1fa4-42cd-8a87-843146c1c015.roa (raw, json)
Hash identifier:          Cj/Nc3yHCP89wG1fCEatr8JC+lQPvv7EYCpblUMDtQA=
Subject key identifier:   6B:75:F4:0E:1B:8F:B1:47:7C:6E:7B:7C:B5:5F:75:62:5D:89:6A:4C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6C498D685FBE8F6A5F00D69A346AEEE268C0DD26
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/386ccd05-1fa4-42cd-8a87-843146c1c015.roa
Signing time:             Sat 15 Nov 2025 00:41:11 +0000
ROA not before:           Sat 15 Nov 2025 00:41:11 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        83.128.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:49:8d:68:5f:be:8f:6a:5f:00:d6:9a:34:6a:ee:e2:68:c0:dd:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 15 00:41:11 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=25654e316969d1867204704b2fddd6c4de5960c6b23bd00d743e19deb95c4483, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:14:f5:36:fc:3e:bf:b4:7a:8c:b8:68:7d:f7:
                    43:28:6d:7a:37:53:94:36:3e:c0:21:a5:1b:64:9d:
                    b3:a5:d2:64:c8:90:93:2f:90:e4:0e:7e:96:7b:28:
                    58:41:4b:ca:98:a0:0c:b3:1a:1a:f1:0d:b5:a9:9e:
                    0c:b6:cd:6d:7e:44:3b:3b:49:17:f6:63:9a:0f:81:
                    25:e7:03:d6:4a:40:15:61:a3:c0:40:83:d5:cd:ac:
                    f8:fe:88:90:0a:dd:18:82:a7:42:59:20:16:f8:5b:
                    d9:27:36:cf:79:6b:18:6b:1b:94:47:e0:35:24:92:
                    13:8b:1d:9e:f7:1b:3f:61:61:84:3a:28:6a:f2:10:
                    e1:da:b2:59:c1:0a:7a:71:06:74:67:28:fc:07:ae:
                    26:5c:76:99:94:c4:c3:4a:1b:8e:45:2b:6f:38:cb:
                    1a:ff:37:b3:fb:72:1a:41:a4:54:50:e6:78:a0:7a:
                    52:cf:52:28:7e:4e:c1:a5:3e:f4:02:d3:b3:1a:60:
                    7a:b4:6b:30:5c:79:3f:e1:2c:20:aa:b5:45:8f:1e:
                    df:c9:fb:62:fc:97:99:3b:3b:1e:20:22:30:13:d0:
                    04:a3:5c:3e:79:6d:11:60:c5:5a:12:74:70:54:6a:
                    54:17:7a:e9:51:1d:c7:82:18:12:57:d7:8f:2c:03:
                    4a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:75:F4:0E:1B:8F:B1:47:7C:6E:7B:7C:B5:5F:75:62:5D:89:6A:4C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/386ccd05-1fa4-42cd-8a87-843146c1c015.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.128.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3a:6f:d1:4b:5f:00:81:de:b3:7b:ad:5a:df:b7:cd:1f:5d:fe:
         9e:7c:68:06:93:1f:d1:e4:f1:64:a9:78:06:b2:b7:a3:2c:51:
         e7:62:f4:b5:d1:e9:23:37:5a:a4:76:2c:bb:1c:d1:cf:f6:27:
         08:07:53:19:14:a0:a2:2f:b6:48:4c:9c:3f:20:10:c4:00:bf:
         ad:20:08:a5:fc:9a:39:21:57:67:9a:19:70:b1:b7:6d:97:b9:
         15:3c:b2:ee:c9:9b:4a:df:15:18:5b:71:b6:02:f2:8d:34:62:
         35:aa:71:0d:5c:6a:64:8e:38:78:ec:fb:16:7d:9e:3f:1b:f8:
         57:db:26:1f:06:c1:fc:12:f4:4c:27:6c:90:fe:b4:ac:ad:c6:
         28:1b:6f:e6:5b:11:68:5d:b4:04:2c:c2:7f:d4:cb:14:66:b3:
         d4:cb:c2:39:cc:a8:57:07:2c:5d:7e:44:1d:d7:12:85:26:1d:
         eb:3a:b6:bf:29:3e:b8:ef:91:c8:75:12:18:04:fc:bf:09:e6:
         fd:d7:c8:d3:06:1a:6d:40:d4:af:f1:7b:7c:4f:fa:10:97:13:
         0c:8e:d4:96:3b:a6:c2:7d:17:e8:0e:04:41:03:cb:b0:17:91:
         bc:06:40:20:88:6f:d4:f9:89:ad:44:a9:a5:01:bd:44:4e:86:
         6a:2e:6d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----