Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9016d464-470c-4275-ad72-fec6b76b99c4.roa
File:                     9016d464-470c-4275-ad72-fec6b76b99c4.roa (raw, json)
Hash identifier:          k6FFaPD1vpwcQi9LGHCRt+iiOny+NObOQm7dGESNDbE=
Subject key identifier:   E4:EE:92:2B:21:2D:D5:42:CC:9F:99:08:08:F7:E7:51:25:72:A2:27
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7F1FF95EBE3FEDAA43859004797E9AD72981382C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9016d464-470c-4275-ad72-fec6b76b99c4.roa
Signing time:             Thu 13 Nov 2025 00:11:12 +0000
ROA not before:           Thu 13 Nov 2025 00:11:12 +0000
ROA not after:            Thu 18 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        143.227.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:1f:f9:5e:be:3f:ed:aa:43:85:90:04:79:7e:9a:d7:29:81:38:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 13 00:11:12 2025 GMT
            Not After : Dec 18 23:59:59 2025 GMT
        Subject: serialNumber=de5b1a1c56dfe41c150fcd6b76c096def23a57f9c9152a4bab83ef5620869de1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:16:a2:39:4b:ec:04:0d:dd:d0:ab:15:42:16:
                    72:c6:53:c0:6f:24:c4:d3:08:aa:dc:d1:e9:30:8f:
                    42:c0:0a:bf:63:cd:2d:97:f3:3e:94:68:83:5f:f6:
                    18:9a:bf:6b:20:86:f6:57:c3:39:11:de:55:93:4a:
                    bd:48:15:18:a9:6e:ac:03:43:59:24:80:f7:ff:d3:
                    1a:02:04:35:b5:40:ef:4c:d2:9a:42:96:53:72:f6:
                    69:ed:82:f6:ac:b6:fc:63:3c:09:e9:cd:32:7d:a5:
                    3f:77:37:d1:77:90:94:8c:f1:a7:a6:f9:fb:0a:9a:
                    7e:9b:27:69:77:58:eb:f5:e4:67:65:31:34:95:27:
                    39:77:d0:c8:a2:e7:dc:91:03:14:03:6b:1f:d3:5d:
                    06:1d:b4:5c:03:51:c8:7b:90:ba:5a:6d:f4:f7:f0:
                    c3:67:92:f4:1a:68:e6:b3:3c:91:bb:d8:87:85:f4:
                    4d:ea:e4:6b:9d:9b:77:9e:c6:a9:d3:18:43:b4:61:
                    10:8f:f9:62:43:22:b4:ea:4b:30:c6:8a:22:a8:db:
                    1d:7c:25:f9:64:93:07:10:80:86:43:0c:c0:f5:23:
                    4b:02:45:d4:8a:24:e6:b9:3e:8e:21:f6:66:30:b1:
                    8f:45:18:06:b5:b7:c4:31:5d:08:a7:66:6f:13:ca:
                    68:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EE:92:2B:21:2D:D5:42:CC:9F:99:08:08:F7:E7:51:25:72:A2:27
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9016d464-470c-4275-ad72-fec6b76b99c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.227.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d4:bc:93:78:ac:18:92:15:c7:3d:81:96:0d:af:aa:80:b8:32:
         da:fa:7a:a2:19:bc:99:be:e8:d1:4a:17:f6:31:1c:06:f8:99:
         18:65:e4:33:84:e6:ea:e2:ae:65:65:20:57:5c:8f:6b:12:21:
         8d:9f:6b:3e:0e:a3:fe:63:67:d9:dc:46:0e:16:bf:4e:3b:1e:
         03:3a:0e:55:4a:74:c8:55:67:38:53:08:c7:2d:91:d0:5e:57:
         0c:a1:e4:8e:e7:15:dd:e9:0f:a7:e2:ad:9a:a4:41:ff:70:99:
         77:15:07:d7:c6:3c:bc:69:03:86:e0:f9:83:3f:f2:72:1c:4f:
         e8:cf:a0:08:c3:a2:c0:90:19:d2:4a:76:38:9f:d5:3b:c3:27:
         87:56:e5:ed:4f:09:97:6e:27:f1:6f:f6:e5:c7:90:e9:fa:3a:
         0f:df:74:8e:7f:37:09:47:3c:b9:9a:28:22:83:5a:3b:3a:20:
         ec:29:4b:78:54:1f:2c:c9:c1:97:b0:b8:79:6c:c2:23:b0:ed:
         0a:1d:d3:d5:1b:46:27:ad:a1:28:af:91:1c:33:f8:4c:bc:40:
         b8:70:65:20:f9:65:77:02:95:65:22:51:05:a2:d4:85:ae:c6:
         db:b6:fe:4e:6c:e7:9e:6b:9e:5a:f6:a5:9f:5a:b4:d5:10:b0:
         93:73:bf:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----