Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92877fb1-c4c2-4c32-9a42-12120e6ac015.roa
File:                     92877fb1-c4c2-4c32-9a42-12120e6ac015.roa (raw, json)
Hash identifier:          BCoACj1EOUIo1KV1M7CkSstP5XPqKsBTZl+r+myOUJc=
Subject key identifier:   8B:06:A5:B0:85:24:68:55:65:10:62:0A:DB:CB:05:73:5B:87:89:86
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       476693DFE1D4987F546DD81FABD25A7F3AC7AEAC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92877fb1-c4c2-4c32-9a42-12120e6ac015.roa
Signing time:             Tue 11 Nov 2025 01:11:30 +0000
ROA not before:           Tue 11 Nov 2025 01:11:30 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        161.193.0.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:66:93:df:e1:d4:98:7f:54:6d:d8:1f:ab:d2:5a:7f:3a:c7:ae:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 01:11:30 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=cda59b7adcf5bda8dc3de5598e736e9cd875266099eb4c9bba894440c739ce76, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:58:7d:54:cd:35:86:d2:e5:98:b7:6f:9b:23:
                    08:c5:85:e0:e7:20:39:05:b8:58:53:af:2b:bd:cc:
                    e9:d5:58:a5:06:9e:f4:e1:80:20:d3:80:68:ec:61:
                    0d:5c:e3:5e:5b:b7:2a:eb:16:00:c8:2a:81:ab:02:
                    42:c0:84:c0:f3:31:46:61:84:16:09:83:b7:ed:f9:
                    3e:8a:e4:20:91:9f:a1:2e:2d:79:a6:92:d5:5c:c9:
                    c7:08:d9:7c:9f:3d:00:3c:32:c5:f6:c1:d6:c4:e6:
                    18:a8:30:82:62:e7:94:f2:11:71:a1:dc:54:f3:39:
                    99:d4:6e:70:1c:ae:79:19:80:92:ca:89:6e:44:d1:
                    dd:7a:e2:60:c6:f8:43:5f:9d:e6:b9:6e:6e:dc:32:
                    23:da:b3:2f:40:c0:a8:f3:97:9c:37:26:28:9d:bd:
                    16:bd:89:f8:86:9f:6e:23:72:5a:46:08:1d:50:f8:
                    a2:6d:96:61:6c:eb:4e:a9:b8:21:60:2d:23:64:d1:
                    d7:4f:cc:e7:65:06:ac:94:52:48:50:1b:7e:6d:85:
                    32:14:30:11:6b:44:59:57:b9:0c:38:c5:fb:59:4e:
                    18:07:1b:c6:9e:07:75:be:fd:53:da:97:e4:88:d4:
                    b5:14:f8:42:03:30:47:b2:3c:be:19:15:6f:84:3d:
                    e8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:06:A5:B0:85:24:68:55:65:10:62:0A:DB:CB:05:73:5B:87:89:86
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92877fb1-c4c2-4c32-9a42-12120e6ac015.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.193.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c8:6b:c2:30:5f:b9:51:40:54:ae:e1:e6:6e:59:c4:41:3c:4d:
         ab:14:33:91:aa:c1:ca:cc:d4:8c:69:7e:22:46:07:04:1c:da:
         14:ba:f7:76:8c:84:06:96:7e:25:79:2b:5e:19:0f:34:2d:09:
         18:78:01:37:af:51:a7:74:76:e7:4b:aa:c6:60:c1:26:fa:a1:
         dd:db:a9:92:63:08:85:3b:20:18:4c:02:8d:eb:f9:b7:a6:19:
         c7:42:4e:7c:9a:a3:85:75:98:b6:1f:ac:e5:3b:49:6e:bc:32:
         45:32:8b:ec:8a:1d:b7:9d:86:95:db:4b:9c:61:0a:94:95:b3:
         cb:48:5f:eb:f3:24:71:84:91:41:73:d5:24:3a:ca:7d:46:92:
         e7:4e:d7:68:7f:32:34:72:31:09:3a:76:4b:1f:32:db:b4:b8:
         05:2f:b5:79:44:69:65:de:79:5b:a0:e8:0d:70:0b:75:da:7c:
         ff:37:f2:b6:32:3f:13:69:2d:5c:c0:e3:92:52:12:4d:c9:28:
         8a:5c:eb:b6:c1:27:24:9a:f1:1a:e1:bc:f0:82:f1:fa:d0:cc:
         16:ad:3a:ec:cd:c0:e3:52:48:84:ce:34:b6:40:3f:e3:a9:23:
         26:95:a9:2e:e7:87:e0:cb:3b:2b:1f:69:75:b1:7d:c0:d2:fd:
         1f:ea:7d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----