Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5209f90d-f864-4360-9098-1efc9882f862.roa
File:                     5209f90d-f864-4360-9098-1efc9882f862.roa (raw, json)
Hash identifier:          E8gzBdnou5pJZgtZR+GTYhLs7VD1G7yPexQybyRUz6E=
Subject key identifier:   CE:E6:2A:70:08:AA:87:72:C7:89:B7:35:38:95:59:DB:57:1B:64:41
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       731A29B1514124EDBFE2B03B3744D635019D1A58
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5209f90d-f864-4360-9098-1efc9882f862.roa
Signing time:             Wed 12 Nov 2025 02:31:24 +0000
ROA not before:           Wed 12 Nov 2025 02:31:24 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        161.178.32.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:1a:29:b1:51:41:24:ed:bf:e2:b0:3b:37:44:d6:35:01:9d:1a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 02:31:24 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=47e41b54758ff7261d106b87453ac9290e17e11551da2af50cfdcd5bb7e241ca, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2b:e7:40:dd:d1:06:fe:3e:62:a9:e2:21:af:
                    2b:e7:d4:06:86:4d:38:7f:c2:02:b5:0a:1b:52:04:
                    45:52:3e:66:1e:ae:c2:6c:9d:b1:92:c6:66:7d:db:
                    7a:a3:6a:22:99:7e:58:64:60:2d:40:85:f4:54:24:
                    44:c7:c7:e0:9c:ef:2a:e2:b4:43:f6:ee:96:28:3e:
                    03:41:47:ee:84:09:13:1b:dd:5a:66:b8:00:10:a2:
                    1c:19:c0:ed:8a:e0:fd:9d:b9:16:1d:08:51:4f:8c:
                    9e:30:cc:ef:4d:16:0a:46:d9:0a:f3:e3:f5:98:79:
                    dc:6f:ec:d3:56:93:e6:1e:75:19:c7:db:0e:82:8c:
                    d5:fb:3f:8f:da:6b:31:67:c5:81:49:3b:34:f4:33:
                    f6:48:f8:73:db:9b:43:94:08:c9:4c:3f:6c:75:e3:
                    ff:d6:4f:75:e5:3f:2d:09:7b:56:82:62:4a:1a:97:
                    46:3a:53:a2:44:52:1f:55:c6:c8:6a:48:05:7f:41:
                    ea:58:ac:60:e0:70:66:a4:39:30:42:92:91:c0:0c:
                    6c:ce:4f:b2:19:f0:12:a6:6e:ff:e7:54:40:d4:ea:
                    f9:7f:af:e4:29:7f:ff:6f:c8:2f:37:fb:b9:c4:2a:
                    e0:da:4c:ab:7c:79:13:35:d6:75:55:e8:66:29:c9:
                    8c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E6:2A:70:08:AA:87:72:C7:89:B7:35:38:95:59:DB:57:1B:64:41
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5209f90d-f864-4360-9098-1efc9882f862.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.178.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9e:50:e8:83:05:4a:f2:40:1d:90:c2:16:b9:19:52:63:b8:c0:
         e6:e4:8d:9f:c8:41:5b:45:a1:af:3f:8e:fe:a9:47:9f:0a:1d:
         77:90:3e:98:b6:73:82:4b:e8:aa:54:81:97:7e:a9:17:93:ec:
         7b:43:3b:8a:dd:6b:f5:01:79:cb:ef:e6:0d:9b:0d:b5:75:3e:
         c4:d9:48:66:0e:58:f5:fd:40:52:5f:ba:49:74:85:52:6f:18:
         f3:b2:f0:98:a6:7f:55:50:8d:9f:e0:ca:27:22:b6:a4:f3:1a:
         a3:5e:12:48:83:bc:91:25:85:68:10:02:26:95:98:8f:aa:35:
         9e:ca:77:74:12:72:8d:74:44:48:36:0e:4e:6a:0c:00:6c:bb:
         70:7d:b0:00:97:3d:b7:09:be:ce:83:b0:d4:3b:d1:0c:ff:ca:
         85:5f:fd:80:e5:8a:02:f4:61:fb:93:3c:b3:ee:a4:75:46:69:
         de:4f:1e:f7:b9:f4:4f:4b:ba:67:08:94:ce:80:c3:10:f3:6d:
         cd:75:da:1b:cd:4a:62:6f:fd:32:64:7f:19:ac:5f:b6:86:c7:
         55:ac:03:ab:7a:e9:8f:21:9a:c7:e2:70:fa:ca:dd:e8:0a:21:
         c5:4b:7e:ad:e0:8e:95:53:c8:ca:84:44:8a:2d:76:5b:e5:fc:
         b7:f7:62:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----