Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3245ac3-fa7b-4fd7-a5ab-5d110acbb03f.roa
File:                     f3245ac3-fa7b-4fd7-a5ab-5d110acbb03f.roa (raw, json)
Hash identifier:          e9eTJhdkowy1CAWlZcoD1P8VI3hGnb09mLXb1TUaiFg=
Subject key identifier:   51:B7:BF:F5:A4:45:A5:01:53:79:AD:43:C3:02:00:38:C4:70:1F:53
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       24973C37AFE8A9709111B3AD2E36B053069D4790
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3245ac3-fa7b-4fd7-a5ab-5d110acbb03f.roa
Signing time:             Wed 12 Nov 2025 02:21:19 +0000
ROA not before:           Wed 12 Nov 2025 02:21:19 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        1.179.32.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:97:3c:37:af:e8:a9:70:91:11:b3:ad:2e:36:b0:53:06:9d:47:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 02:21:19 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=d316fc9daddced86d4189e5fbfb28d3bc3c00b325104aa428137aa68d5966c22, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:14:3e:a5:c3:e7:d4:02:8d:57:91:bc:fa:05:
                    bf:64:ac:d4:40:6c:0a:89:ce:d3:56:91:b4:48:db:
                    28:6a:b8:c1:04:72:fa:36:86:79:43:cf:1e:83:48:
                    32:a0:77:c5:ce:a3:48:77:d8:a3:37:9d:30:bd:b9:
                    4b:20:d2:97:ee:b1:06:5e:25:48:25:bc:4a:13:72:
                    5f:86:c9:d6:e1:5a:29:b8:b6:ee:37:8f:82:11:eb:
                    2d:f0:b0:49:2f:f7:80:5d:1b:87:88:e0:48:bd:06:
                    0f:8b:e5:45:b8:d8:fb:fe:84:c1:3c:4d:e0:ba:41:
                    58:09:57:7d:dc:98:bb:49:45:ce:d4:bd:8c:8f:f3:
                    f4:2e:24:7e:95:1c:af:01:9a:3f:fc:7a:ea:a5:49:
                    68:dd:1a:6c:de:bc:a4:2e:63:75:e0:2e:e8:c3:26:
                    2a:cd:35:ff:44:0e:b9:3c:98:2c:c8:a2:11:9a:92:
                    17:07:77:0a:8e:ee:ee:41:24:23:dd:73:b7:93:12:
                    f8:33:f4:69:90:33:9c:f2:85:33:02:36:ca:10:52:
                    34:33:d8:ac:35:c4:92:7b:69:88:33:97:ba:e7:a0:
                    17:bf:17:de:a3:32:bb:67:32:45:8e:3a:2b:dd:39:
                    98:55:4f:42:cc:1e:a2:18:bc:38:04:3f:93:29:68:
                    b2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B7:BF:F5:A4:45:A5:01:53:79:AD:43:C3:02:00:38:C4:70:1F:53
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3245ac3-fa7b-4fd7-a5ab-5d110acbb03f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.179.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0d:a1:86:77:94:65:b2:e9:2e:db:00:de:db:48:5c:20:d7:f7:
         7a:bd:d3:be:5d:31:14:96:dc:f1:df:c5:3d:23:70:2f:98:ed:
         d3:51:89:32:13:45:46:96:b1:2c:72:5d:99:95:f4:f8:ac:4f:
         ca:fe:37:63:be:7d:35:ea:d1:9a:f1:ab:ac:2b:ab:1d:18:fb:
         f4:07:c9:16:4d:37:98:1f:6f:ed:b2:79:31:d1:d9:cc:cb:a4:
         20:98:06:16:16:9a:a6:ae:22:02:7f:c5:f6:07:ef:a2:3f:9f:
         66:88:2f:0b:b5:7c:4e:1d:36:d3:d0:28:0c:3c:92:3c:ed:2e:
         63:79:ec:b9:2a:5a:ee:78:03:1b:67:8a:8d:ae:18:7b:70:6a:
         0a:28:f9:6e:dc:e2:59:28:d7:df:a4:79:ff:86:2e:87:4e:d9:
         eb:70:11:02:fa:be:25:32:95:39:52:62:4b:9b:58:0c:58:20:
         e7:93:fc:56:3a:88:97:0b:56:ba:a9:68:66:32:ad:ee:76:4c:
         f9:9a:2d:13:e1:0e:3f:f2:c2:28:1a:42:bf:c3:01:90:62:a3:
         1b:66:c7:85:12:82:6a:d6:25:aa:a1:46:77:85:43:22:09:06:
         30:a9:e6:20:7b:8c:99:0d:9f:e8:18:e8:f9:10:9e:3f:8d:3b:
         88:82:f9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----