Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d02200a5-babe-4deb-9116-f1e308942b64.roa
File:                     d02200a5-babe-4deb-9116-f1e308942b64.roa (raw, json)
Hash identifier:          /JYX5KxL6C1+TlmlCs7kHjrLxBBZhXCCdJbhnt9AGu0=
Subject key identifier:   62:1A:66:B3:04:F4:50:A8:49:15:F3:28:39:C4:DA:26:9E:49:C1:ED
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5F14E91C8B9DA9854E737801C32A4E1B4BB9E129
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d02200a5-babe-4deb-9116-f1e308942b64.roa
Signing time:             Tue 11 Nov 2025 01:20:49 +0000
ROA not before:           Tue 11 Nov 2025 01:20:49 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        1.178.72.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:14:e9:1c:8b:9d:a9:85:4e:73:78:01:c3:2a:4e:1b:4b:b9:e1:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 01:20:49 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=4980587d25fefc10aaf63d572fd6c576f69a8d69b91a58063c7f11bce6fb8c90, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:92:d3:b0:be:9f:fc:bf:2f:66:7b:99:eb:84:
                    8d:d5:79:ce:29:dc:50:3e:7f:b1:fb:a3:b5:91:94:
                    c7:9a:2a:4b:74:61:d5:0e:70:af:65:3e:9d:ca:c4:
                    8f:4d:1c:54:c5:4d:16:bc:9e:0f:18:26:7c:1f:49:
                    69:2d:f8:b1:5a:30:65:46:f0:82:60:4d:a0:47:23:
                    e9:c3:5c:b1:48:75:9c:26:c0:fb:01:11:60:b9:d9:
                    54:0f:16:76:81:4c:ee:cc:90:66:9a:1a:a7:2e:e5:
                    72:08:94:42:8b:7c:6e:a3:1a:81:13:6f:af:51:02:
                    49:be:19:86:f0:2c:b9:12:96:73:d0:bd:2e:41:58:
                    f6:8f:2f:19:74:d0:28:11:e0:43:f6:5e:e9:f3:4a:
                    19:c8:28:f4:ca:5c:6b:a2:2e:47:e1:74:5a:04:aa:
                    07:0d:6d:72:19:90:4f:97:28:a4:39:83:0d:a0:a8:
                    f7:9e:06:78:e0:95:b5:44:95:ce:5b:3e:1a:fc:2a:
                    d5:43:b7:a0:2d:83:c9:f4:4b:63:aa:fe:03:d0:3c:
                    27:fa:ed:4e:80:10:0a:41:e7:ff:1c:4f:b6:f6:e2:
                    70:f8:1b:b1:ba:16:6d:88:93:7c:68:37:69:10:23:
                    55:5e:0e:67:37:b6:fd:fa:20:c1:50:1c:16:56:47:
                    3f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:1A:66:B3:04:F4:50:A8:49:15:F3:28:39:C4:DA:26:9E:49:C1:ED
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d02200a5-babe-4deb-9116-f1e308942b64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.178.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a8:b7:6b:f0:2f:e1:b3:ed:fe:4d:b7:38:e1:35:a0:b5:26:99:
         66:29:30:c5:b6:98:1d:3b:1f:fc:f8:8d:d7:d5:70:ba:df:97:
         bb:28:a8:24:e8:da:f3:e6:50:47:ed:92:6f:07:48:fa:9b:15:
         0c:59:1c:ed:e1:24:1a:9b:a7:bd:e2:c2:a9:d1:12:be:06:b5:
         8d:16:00:f8:55:ed:ea:80:95:63:eb:ee:b7:cd:ed:5b:04:ee:
         02:81:72:e6:3c:cc:8f:5e:8b:25:53:9e:33:e7:63:6e:27:f5:
         21:a6:cc:5e:c7:3b:a9:cc:08:f4:7e:77:b7:3b:86:a9:78:11:
         f7:c2:52:9c:43:01:6e:cc:e4:c6:47:5c:bc:c5:00:e3:44:38:
         9f:83:94:f0:ce:94:78:b1:6a:a4:03:f8:e2:2e:cc:24:6f:58:
         46:1c:99:ac:e4:db:61:f0:96:6f:0c:b8:1e:0d:bd:31:09:ca:
         fb:7f:a1:bb:3e:6f:d6:33:24:66:d8:b6:21:d1:a3:ee:c4:d0:
         ac:0a:40:18:6a:89:ef:fd:4a:7a:4f:0d:5e:87:01:d8:0a:37:
         5d:9c:3b:6b:70:49:46:f5:33:93:bc:33:2f:4e:cc:77:94:a0:
         34:a8:cf:e3:2b:dc:49:41:f0:ba:c6:de:7f:72:fa:fa:56:1b:
         cb:b4:13:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----