Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1bc806e-2572-403e-b1e0-48367c6289fe.roa
File:                     e1bc806e-2572-403e-b1e0-48367c6289fe.roa (raw, json)
Hash identifier:          ljdH+jJAeTmuqbTeDfydEn4t6FfHRuY0sIagCAQyg+A=
Subject key identifier:   06:5F:28:CA:C4:44:A1:22:F4:DD:3A:C5:3E:77:46:50:F2:E5:9D:3F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3BDD437D7D042E423E69C6CD8B5CD09D6D08BA71
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1bc806e-2572-403e-b1e0-48367c6289fe.roa
Signing time:             Tue 18 Nov 2025 00:00:14 +0000
ROA not before:           Tue 18 Nov 2025 00:00:14 +0000
ROA not after:            Mon 16 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        134.43.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:dd:43:7d:7d:04:2e:42:3e:69:c6:cd:8b:5c:d0:9d:6d:08:ba:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 18 00:00:14 2025 GMT
            Not After : Feb 16 23:59:59 2026 GMT
        Subject: serialNumber=8809c12d23477e9736652d9435f06d78071db3d01e17c68dbb104cb801cf3815, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f0:9e:77:d6:e6:0f:b1:37:66:cf:73:9f:94:
                    49:fc:e0:dc:ec:7a:6a:75:aa:db:7a:26:82:66:b2:
                    dd:fc:76:98:1e:6f:4c:f4:98:ae:3f:93:e2:41:ab:
                    69:0b:1d:d7:c7:a5:02:7b:5e:28:20:2d:5c:7b:89:
                    0d:76:5a:bd:38:38:ae:eb:13:6f:7f:9e:ba:09:8d:
                    90:06:05:db:8d:74:53:e1:53:1c:e6:7c:79:81:40:
                    85:34:ba:22:ca:24:9d:ef:06:e9:cc:d5:47:d5:7b:
                    ac:da:9e:8e:0d:43:1f:a5:fe:f2:fb:ad:dc:e4:8c:
                    65:6c:55:05:fc:5b:ca:2b:fc:7d:b9:05:cd:fd:6b:
                    71:91:f5:f5:cd:18:cd:b8:82:18:b1:f5:98:a9:e2:
                    6a:3f:14:ff:74:fa:9d:bf:94:36:4f:50:02:d6:4a:
                    d4:c9:e9:ea:ee:52:e4:d6:64:87:91:fb:d5:72:70:
                    36:54:26:50:88:7c:72:59:13:1e:64:d1:d4:47:a3:
                    9a:9b:14:3b:59:d3:f3:33:d6:e0:b2:2c:e7:84:94:
                    a8:e5:ee:a0:6c:63:82:6b:53:b0:c0:c4:47:33:9d:
                    25:8d:d8:e4:2d:ef:c0:b1:74:f4:f4:27:f3:e7:7d:
                    ee:35:ee:64:c0:10:23:4a:60:5e:74:da:e6:89:0b:
                    67:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:5F:28:CA:C4:44:A1:22:F4:DD:3A:C5:3E:77:46:50:F2:E5:9D:3F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1bc806e-2572-403e-b1e0-48367c6289fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.43.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         18:dc:5e:aa:c9:16:32:9d:6d:b5:f4:7b:1f:6c:29:78:67:1a:
         b3:e1:2d:54:35:de:02:d5:28:0f:ef:08:26:ef:ae:65:e0:d7:
         4c:6e:f5:c6:2f:18:25:2b:a8:fa:82:03:fa:ed:14:62:25:fa:
         6c:1d:24:fc:be:2f:8f:b1:0a:1b:df:ba:6b:13:e0:96:59:7d:
         12:cd:83:b2:12:92:de:08:55:b8:01:1a:87:9b:7e:9c:cb:b6:
         30:31:d0:a0:3b:98:e2:c0:10:52:c6:83:07:71:51:09:9e:a1:
         cb:27:ff:91:2b:b9:62:23:04:32:ce:e6:5e:be:41:be:66:67:
         c9:75:88:2b:4d:2d:d7:ce:76:3c:c2:68:e5:56:bc:34:c5:af:
         80:2d:78:3c:d9:0a:b0:2e:96:61:c6:81:77:d5:f9:8b:aa:a9:
         5d:0a:30:f2:ce:57:32:5a:b9:1f:be:b1:3a:14:e5:32:8a:56:
         9b:12:96:78:2f:fb:8d:46:0c:1d:98:53:85:b3:b9:e6:c7:f6:
         c2:38:1d:4a:20:5b:4b:d6:dd:33:5d:75:a1:be:74:34:39:9f:
         ed:90:a3:25:64:83:a4:fa:79:f8:64:95:94:87:22:20:39:ec:
         d6:bf:47:4c:86:14:58:2b:5c:74:29:45:9a:4b:fb:a2:cd:d8:
         bd:d9:ba:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----