Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a7e4e4c8-325e-4c4d-8dfa-29db72c04b6e.roa
File:                     a7e4e4c8-325e-4c4d-8dfa-29db72c04b6e.roa (raw, json)
Hash identifier:          t1YahOS73ynrD7sU+wWymp4aBCY56YR/ynixSiEQQiA=
Subject key identifier:   DC:34:03:1E:2D:79:7D:89:30:8C:B1:57:A6:79:2B:C8:9F:0C:1D:A2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0B7C7A01ABCE99CD5CDE83A1B84920DC8143640E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a7e4e4c8-325e-4c4d-8dfa-29db72c04b6e.roa
Signing time:             Sun 16 Nov 2025 00:30:16 +0000
ROA not before:           Sun 16 Nov 2025 00:30:16 +0000
ROA not after:            Sun 21 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        210.89.64.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:7c:7a:01:ab:ce:99:cd:5c:de:83:a1:b8:49:20:dc:81:43:64:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 16 00:30:16 2025 GMT
            Not After : Dec 21 23:59:59 2025 GMT
        Subject: serialNumber=afd717dd9c15276801ccf36dd9029788785a66e4d6a4534638af1f6416649ca2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4f:75:3c:24:75:4c:10:15:c8:7e:60:ad:d9:
                    18:ca:aa:dc:b6:75:e5:f3:38:73:68:ce:54:2a:4c:
                    13:48:81:eb:59:f8:35:01:5b:5b:a4:2b:87:8b:2c:
                    fc:2a:95:87:47:2f:56:94:70:c2:90:2d:41:74:0c:
                    5c:ab:0b:95:d5:4b:26:f8:a4:68:14:fe:1b:76:87:
                    f2:6e:12:30:6b:df:2d:e0:bb:4b:5d:ef:70:be:39:
                    ac:49:bd:84:fe:87:8a:9d:a9:0d:db:8b:5f:a4:35:
                    5a:f4:75:50:e6:f4:87:09:d7:ef:56:d0:c1:aa:c2:
                    d9:98:c6:86:0c:1f:db:a0:63:5f:6e:1b:87:73:ff:
                    80:91:34:97:01:de:54:1f:c0:0d:fa:79:44:f4:5e:
                    5e:e1:f6:29:8c:4d:04:08:00:60:65:82:e7:12:fa:
                    57:7c:b9:df:3a:73:e5:b0:c9:c9:e3:aa:9b:1d:f1:
                    4c:43:1c:6f:b6:06:71:5a:b6:66:40:f7:20:9c:f0:
                    39:f1:6c:d8:00:79:b2:c6:15:ff:e1:5c:37:55:ef:
                    cc:78:cb:e4:5c:07:7f:c7:a9:4f:1f:fa:1d:a0:8e:
                    11:2a:6a:45:58:08:08:df:91:a6:b9:de:1e:b2:e7:
                    90:fe:9b:5c:b8:8b:45:d6:6d:9a:87:3b:e1:5d:77:
                    a8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:34:03:1E:2D:79:7D:89:30:8C:B1:57:A6:79:2B:C8:9F:0C:1D:A2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a7e4e4c8-325e-4c4d-8dfa-29db72c04b6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.89.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         50:1c:40:85:89:9f:93:60:0a:ce:02:bc:fb:66:1f:d7:ce:72:
         d1:18:66:49:2c:d2:0b:49:74:7d:cd:b1:b8:a5:dd:3b:97:dd:
         fe:d4:cb:ca:05:04:e2:4d:84:5e:ab:e7:b6:a9:31:f0:93:57:
         dc:e8:eb:04:ee:14:33:eb:72:a5:70:30:a1:78:80:5a:e4:96:
         0e:7b:4b:de:91:ee:3e:df:61:78:00:e3:cb:73:92:dd:1b:85:
         fc:4f:13:96:d3:1a:34:39:76:72:75:a6:f0:0b:75:83:a3:5b:
         75:ef:7d:7f:46:26:fa:74:3e:8d:1f:02:f3:e9:1c:cd:55:01:
         1f:e1:9f:7f:75:0e:77:54:aa:41:73:e9:4a:bf:97:74:b5:07:
         ce:4d:99:ce:75:07:51:19:02:35:a3:a6:78:f0:57:08:46:85:
         e2:54:88:95:04:ed:45:7d:6a:d7:45:c6:ec:ff:fe:ae:63:a5:
         10:96:e3:f5:0f:d6:4c:39:23:f0:75:f8:a9:20:8d:cc:2d:d0:
         53:61:6f:52:25:ed:4e:01:d7:dd:a1:e7:09:3b:66:25:41:4f:
         56:0e:63:e3:85:86:86:ab:fc:bb:d0:48:2b:77:7a:5b:37:42:
         df:8f:30:d0:34:dc:ac:87:59:71:3c:8f:65:b4:1e:38:69:64:
         8e:a0:44:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----