Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e77088b-94f8-432b-9c1b-c0ec5a7ed02a.roa
File:                     6e77088b-94f8-432b-9c1b-c0ec5a7ed02a.roa (raw, json)
Hash identifier:          hp7Q6E6vuPBd0tZH+v4Y8WVSq8qxdJMf20/e/EvYQyU=
Subject key identifier:   96:11:37:2D:99:2B:14:81:DA:76:9B:C6:C1:47:C8:B2:88:75:8E:9F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       38B68CDF7E5F486E39F6A165D20BDF580243EEF8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e77088b-94f8-432b-9c1b-c0ec5a7ed02a.roa
Signing time:             Tue 30 Sep 2025 00:01:14 +0000
ROA not before:           Tue 30 Sep 2025 00:01:14 +0000
ROA not after:            Tue 04 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        141.230.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b6:8c:df:7e:5f:48:6e:39:f6:a1:65:d2:0b:df:58:02:43:ee:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 30 00:01:14 2025 GMT
            Not After : Nov  4 23:59:59 2025 GMT
        Subject: serialNumber=1a3c6063944644b65e5fd9bc5df67bf4ae3ce95877425de44b4e62f5f5654efe, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2f:e8:94:70:6f:79:b7:98:5e:da:f6:34:25:
                    bb:35:ba:ff:16:90:e6:60:c1:5e:49:30:50:2d:95:
                    98:45:6c:b2:71:8b:4d:21:12:be:d0:b4:34:12:2f:
                    1b:4a:51:e4:69:2d:bd:de:7f:71:96:48:ce:3e:6f:
                    f5:b8:ab:88:b0:15:6c:75:8b:37:56:df:13:5a:c4:
                    13:28:6a:e3:c5:6a:63:9a:8f:10:04:58:29:b2:71:
                    b8:ff:c2:d0:01:55:77:28:a4:9d:5f:c6:bb:0b:e1:
                    89:a8:f2:6f:fc:17:f9:e1:87:b4:9d:40:f8:2d:9c:
                    e8:e7:11:74:70:43:4a:8c:99:fc:1b:b9:98:6f:4a:
                    01:07:ed:d8:66:08:32:82:4b:53:3a:f7:ba:02:17:
                    08:a6:36:f7:44:e3:99:c1:a3:68:5e:a8:86:17:fa:
                    e5:3a:12:ca:6c:99:07:68:7b:3c:09:ff:e6:61:4b:
                    3e:71:b9:73:90:30:a7:57:12:d6:73:2d:d1:2c:69:
                    8e:35:7a:29:69:d1:da:dc:31:ee:a9:b7:26:26:57:
                    ca:30:97:d7:45:a6:97:58:aa:70:8c:1b:d0:89:64:
                    8f:5d:1e:31:f6:92:21:c7:db:bf:2c:fe:2f:01:9f:
                    6b:09:06:47:ac:81:c1:8c:a1:27:26:ef:1a:78:d6:
                    46:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:11:37:2D:99:2B:14:81:DA:76:9B:C6:C1:47:C8:B2:88:75:8E:9F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e77088b-94f8-432b-9c1b-c0ec5a7ed02a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.230.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         30:8e:c3:63:ce:7f:9c:04:3b:48:ee:64:a0:e4:99:23:c4:86:
         14:67:ec:93:f2:ba:8f:5f:de:53:4e:49:86:6c:de:ca:68:51:
         7b:cc:4c:c9:b9:8c:a2:c2:b8:16:9c:91:37:e5:90:82:05:7c:
         04:cf:18:a7:80:58:5e:79:56:95:9b:58:f8:3b:31:8e:87:03:
         3b:41:b8:f6:08:46:2d:14:ef:97:0c:45:4f:39:87:4b:2f:e7:
         8a:7c:d1:62:d1:86:cf:40:cc:4e:35:b8:33:4e:41:48:54:68:
         15:f3:86:72:7f:a2:e6:28:74:7d:0a:6a:b9:cb:88:76:d0:46:
         86:55:4c:90:95:5a:7e:4c:61:2b:53:c6:41:9e:cf:a7:6c:cf:
         fe:05:13:81:6b:f8:64:43:a8:b3:20:9e:d6:4d:74:26:81:e8:
         2c:0c:36:cf:44:5a:a4:77:9c:af:84:9b:72:ae:74:f3:ad:3c:
         fe:04:b5:07:7f:ca:d5:e9:7d:60:35:f0:5e:eb:a1:58:5f:f9:
         ce:d0:38:85:e6:71:0c:cb:8f:07:4b:59:87:55:45:43:01:35:
         cb:00:fa:73:66:64:58:66:91:29:bd:54:86:f8:a3:81:e9:7a:
         33:fa:be:60:76:26:32:51:5f:97:8e:d1:c3:4c:7c:d1:d0:b4:
         64:5e:cc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----