Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/818f4858-4e48-41f0-bc9f-7b3a5299bb7b.roa
File:                     818f4858-4e48-41f0-bc9f-7b3a5299bb7b.roa (raw, json)
Hash identifier:          xRvobUEt6J4tCwT6JFIg8Mz/ay/vlfmOJcWQcYRDGWc=
Subject key identifier:   54:6D:71:68:62:CB:39:01:3F:5B:FF:AB:91:63:8C:91:B2:E8:81:8C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1DFBB9AEE072BECC9A8D69111A62F1DF13E735FD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/818f4858-4e48-41f0-bc9f-7b3a5299bb7b.roa
Signing time:             Wed 12 Nov 2025 02:30:59 +0000
ROA not before:           Wed 12 Nov 2025 02:30:59 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        1.178.144.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:fb:b9:ae:e0:72:be:cc:9a:8d:69:11:1a:62:f1:df:13:e7:35:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 02:30:59 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=193a9fc56ed8ec9ba6f9ca2ba256eb77f038536785febbbbcee82da1e0d5e5f9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:74:9c:cd:98:a3:df:bb:75:e2:d0:31:a2:a4:
                    d8:12:d9:69:52:78:62:b1:62:3c:26:9e:fe:87:b5:
                    56:23:54:ea:9b:c4:e3:f4:fd:47:ec:3c:30:96:cd:
                    37:25:dc:1a:f8:ff:73:be:df:d6:87:d9:e2:a4:73:
                    ab:c0:5f:61:ae:fe:81:6c:df:83:40:f8:4c:a3:75:
                    6c:41:c0:fd:69:37:6b:be:68:c3:0b:a3:9c:9f:eb:
                    82:8d:4f:74:b8:46:93:bd:22:ff:0d:43:7d:0d:a6:
                    8a:16:f0:01:38:19:d7:36:b6:13:3e:40:c9:02:88:
                    56:ea:68:a8:5d:2c:d0:be:99:67:b4:da:55:fc:8f:
                    a6:d8:55:ea:90:fa:b2:d0:ca:88:10:1f:5b:99:92:
                    17:2f:6a:be:11:6a:df:0a:44:41:5a:74:f9:3e:0b:
                    eb:7a:28:90:72:30:ab:bf:1d:f2:9e:d7:3b:77:52:
                    be:b0:b1:bf:ac:cc:8f:c6:4c:f8:22:4d:ee:96:47:
                    9d:47:5f:16:82:13:bb:d4:c8:c9:2a:3e:88:cd:fc:
                    e2:15:67:9b:2b:15:3f:e3:f9:03:f6:ea:55:32:32:
                    7f:de:c6:a1:35:2c:d5:40:bd:ac:b7:03:02:50:73:
                    0a:f1:52:27:f9:66:59:0a:95:3e:e8:ae:b4:ea:d4:
                    d4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:6D:71:68:62:CB:39:01:3F:5B:FF:AB:91:63:8C:91:B2:E8:81:8C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/818f4858-4e48-41f0-bc9f-7b3a5299bb7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.178.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         46:25:97:3f:2b:3a:74:40:ed:56:ff:21:c6:a9:ca:e9:72:c3:
         cf:0f:f9:10:97:eb:02:26:86:57:27:f0:5a:00:95:78:e8:8d:
         8c:0f:b7:7d:97:50:44:d2:11:96:a6:96:27:4d:18:8f:f2:00:
         59:ca:13:be:2c:e4:3d:15:69:35:55:4c:30:c2:a8:29:0d:8d:
         da:8a:99:b1:95:a6:ea:15:a1:4a:cb:40:42:77:5a:c3:e9:af:
         56:30:6e:46:d6:3c:6f:b7:d4:c5:f7:bd:93:7a:64:e5:0c:13:
         3d:21:2c:a1:9d:e8:d3:88:fe:94:35:83:eb:1f:c2:51:86:80:
         9c:34:d3:bc:2d:cc:bf:bd:c0:fe:4c:f6:63:ff:d3:92:01:5c:
         35:3b:64:22:82:a3:f7:46:a5:14:08:5c:3c:a0:4e:37:dc:46:
         77:01:ff:ea:75:e1:ef:43:49:d8:a6:18:db:00:c3:8e:e1:05:
         e6:94:63:50:ae:58:56:21:f3:92:f1:a2:74:ae:26:1c:3b:e3:
         39:49:90:b3:4d:4d:c6:13:fe:82:e6:d0:a9:04:1d:36:16:72:
         64:dc:88:d4:3c:6b:5f:25:05:a6:c1:20:3d:8d:9f:e8:9c:84:
         33:82:26:ee:12:d8:f7:df:a0:61:da:56:87:25:ed:94:a4:ea:
         fc:59:d3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----