Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3b37376-bf16-4f7e-b9b5-c70c5f517ac5.roa
File:                     c3b37376-bf16-4f7e-b9b5-c70c5f517ac5.roa (raw, json)
Hash identifier:          Od6r+i2WZbeu4mlD/urKPDNukOfF4hpqzaKUGnOTuWw=
Subject key identifier:   60:18:D6:7F:E3:D5:20:48:AE:AD:B0:29:83:95:D7:AA:E7:21:20:4F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       76E5CC787DC0D90A92E7665EEAB90F00851C5D18
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3b37376-bf16-4f7e-b9b5-c70c5f517ac5.roa
Signing time:             Tue 11 Nov 2025 20:06:51 +0000
ROA not before:           Tue 11 Nov 2025 20:06:51 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        149.128.64.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e5:cc:78:7d:c0:d9:0a:92:e7:66:5e:ea:b9:0f:00:85:1c:5d:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 20:06:51 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=19b18f429afc9738f59f7084d676fd3e1024949a6672c7c5bbff798d966d7a39, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fc:2a:a8:be:9d:62:9c:bd:ad:8f:4e:81:8a:
                    f3:8a:dd:52:4c:87:87:b1:13:80:99:e8:51:37:65:
                    05:2a:61:44:de:5f:6c:9e:f2:4b:8f:88:fb:a0:b1:
                    99:21:13:1e:5e:cb:53:45:3a:2d:64:95:67:da:39:
                    3f:8a:9b:cc:16:21:f4:36:e6:ad:65:11:52:a3:e5:
                    e1:42:0c:86:8d:d0:f1:4d:7b:ce:42:fd:6f:e3:8a:
                    b5:23:8c:88:a0:b5:ae:53:89:4b:4c:44:c3:92:2d:
                    66:4e:cd:bb:61:67:d9:75:3d:09:69:fd:62:5a:dd:
                    67:e9:8d:52:75:64:79:a8:fb:8d:19:3f:79:2a:7d:
                    9d:52:6e:f2:d6:de:88:63:a1:c0:dc:91:3b:bb:a1:
                    c0:0a:30:0c:8c:be:b1:42:ed:ec:5e:28:06:44:31:
                    bd:f2:45:42:b5:e6:5c:5f:22:6c:59:59:00:19:7e:
                    18:dd:9f:e7:76:b7:73:07:4f:e3:7a:39:11:ae:2e:
                    e0:85:cd:8c:41:44:83:d2:de:0a:00:ce:d7:71:fb:
                    b8:57:68:9f:43:56:e0:0e:0e:b6:0d:c4:eb:2f:2c:
                    e3:6d:4a:81:df:2b:76:b0:6d:9d:e3:92:7b:7c:e1:
                    21:2f:a4:08:ed:ff:99:c0:0a:56:f6:cc:e5:9d:9c:
                    a3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:18:D6:7F:E3:D5:20:48:AE:AD:B0:29:83:95:D7:AA:E7:21:20:4F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3b37376-bf16-4f7e-b9b5-c70c5f517ac5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.128.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         18:e2:14:70:4d:42:90:95:21:38:37:6e:de:97:cb:b1:84:ce:
         fc:28:5a:ca:0d:f7:5f:c5:42:e4:c1:a0:5f:2c:a8:2f:01:d0:
         62:fb:8d:77:bd:f8:04:11:6d:0c:0e:56:48:2e:5e:aa:74:f6:
         83:89:8a:bb:63:c1:45:28:a8:12:02:21:75:6b:cf:00:1b:bd:
         d5:77:d7:09:ce:36:da:94:69:98:13:ba:29:6e:55:7d:94:06:
         7c:b4:74:67:28:9f:76:33:81:34:dd:03:31:12:b2:61:8f:21:
         e1:af:c0:01:3f:64:f1:bd:80:a1:33:c4:5f:32:69:36:85:88:
         76:a0:06:4f:17:2b:6e:43:fe:66:59:e3:1b:d8:9d:59:47:36:
         9a:83:fb:2f:66:74:3c:21:3e:01:8f:b7:99:b5:47:28:11:a0:
         54:a3:a3:60:aa:97:1c:22:68:fb:58:5e:c2:ef:98:ee:cf:b9:
         70:04:fe:6a:b4:f0:c3:82:0a:07:c8:d0:89:84:4a:97:79:07:
         e6:95:25:c1:aa:dc:9d:ef:db:4b:21:d6:5f:72:38:f3:32:14:
         b4:c1:8f:ae:00:9b:21:d0:60:00:5c:5f:ea:43:1d:17:57:3c:
         01:d5:96:8c:50:09:b7:d9:d1:d2:8c:ed:e1:b8:20:b0:f6:73:
         4d:ce:2d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----