Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef59c634-b428-4d89-99f2-8f22503d93d7.roa
File:                     ef59c634-b428-4d89-99f2-8f22503d93d7.roa (raw, json)
Hash identifier:          AzTH2w6W4uzqmD65vIS6gAZRbXlMGdP9uyu2n/k8wkg=
Subject key identifier:   3A:DB:C9:0F:5B:31:A5:74:89:64:BF:44:3A:55:72:56:A7:94:74:62
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0127E5E21D9BB26428AABABBE1E031C74140742F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef59c634-b428-4d89-99f2-8f22503d93d7.roa
Signing time:             Tue 11 Nov 2025 00:41:20 +0000
ROA not before:           Tue 11 Nov 2025 00:41:20 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        161.193.128.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:27:e5:e2:1d:9b:b2:64:28:aa:ba:bb:e1:e0:31:c7:41:40:74:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 00:41:20 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=d302195d35d911f8be27b41a431bdf1a94e92091ae370d30a4572d4c9277c753, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:80:a4:61:28:ef:9a:db:a2:ea:27:f0:07:4f:
                    82:1a:f1:5f:0b:c1:f3:f1:f2:50:d7:41:00:49:79:
                    93:67:13:d1:a1:f4:4d:7b:ae:d0:44:f9:af:3b:97:
                    97:e7:c3:7b:4e:bb:41:26:ec:24:86:37:48:8c:22:
                    93:16:52:76:f8:67:4d:31:fc:70:d3:ba:69:a5:f0:
                    a3:de:29:2c:3b:6d:e4:6c:9c:ab:4a:16:f7:3a:9f:
                    94:b3:10:8d:c6:a5:1e:cc:0e:37:31:bb:60:c6:87:
                    fd:ba:ea:ec:5d:45:30:cd:90:4c:1e:09:15:05:e9:
                    9e:7b:2e:38:9d:91:ec:68:aa:59:de:37:af:9b:86:
                    3f:6a:13:69:dd:6a:2d:7d:95:96:bc:4b:1c:45:36:
                    3f:d8:b3:70:00:a2:a6:27:12:5d:7b:10:45:8c:d9:
                    e9:78:1c:14:0b:82:38:b0:71:f0:85:37:8a:00:10:
                    05:b6:ae:c6:6a:1b:04:9a:70:fa:1f:67:64:82:b1:
                    08:ae:b0:1d:8e:5a:fe:21:21:11:c5:ba:96:30:48:
                    38:e5:ce:d0:66:e3:30:7a:22:ba:85:15:fb:68:1a:
                    a8:e9:08:4c:8f:15:f1:e8:e0:31:02:eb:97:71:c3:
                    b8:eb:5d:e6:99:5e:a1:46:eb:5c:97:cb:0d:ac:ca:
                    a0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DB:C9:0F:5B:31:A5:74:89:64:BF:44:3A:55:72:56:A7:94:74:62
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef59c634-b428-4d89-99f2-8f22503d93d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.193.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3b:75:29:78:42:46:b5:a6:88:c0:8f:25:bd:21:a6:0a:b5:12:
         69:c1:83:84:ad:a5:3b:3f:4c:bd:78:58:70:92:ee:cf:f5:4e:
         aa:f8:fb:58:59:9e:15:33:d9:a5:b0:bb:9e:c4:28:a3:ee:98:
         e0:c4:5c:01:b8:96:eb:81:73:b9:a7:c1:b1:5c:8b:ae:ce:dc:
         8b:80:a6:00:3a:f8:10:26:23:5e:a1:b7:b2:fa:80:8a:3b:d5:
         29:f2:0c:90:7e:e6:43:ba:f5:0c:f2:cb:fc:e9:96:62:5f:33:
         00:86:6c:48:cc:bb:05:85:f8:41:06:40:57:5c:ee:77:d9:56:
         60:27:0d:de:77:cb:ca:b2:20:7f:e5:9f:80:ed:2f:c6:65:35:
         d8:ee:cf:49:08:85:85:db:24:9d:16:1d:36:5d:85:e1:00:ae:
         11:f2:03:b4:2f:1d:c5:37:50:7e:d8:79:4b:87:8e:91:4e:51:
         a7:19:b2:68:dc:79:22:3f:28:52:ea:94:ac:9f:b7:f7:be:fa:
         88:9c:ab:94:54:a5:bc:73:59:5f:4f:77:d6:9d:9b:b4:a9:81:
         49:f8:28:08:ac:50:d7:27:cb:bb:b5:4c:5c:b8:cd:3d:44:ea:
         49:c1:f3:8e:e3:01:d1:2f:fd:57:0f:c2:b4:e4:f2:11:b7:ab:
         c6:e3:57:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----