Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffb6038f-b139-4708-b914-4c688fc3609a.roa
File:                     ffb6038f-b139-4708-b914-4c688fc3609a.roa (raw, json)
Hash identifier:          BbfHKRoDpoCdySeU2PdTEhcahg+dbXtl2zxTUgnnyGk=
Subject key identifier:   8B:B9:3D:37:AB:97:13:1F:BF:48:C1:E3:54:89:33:20:5E:B9:AE:84
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       02B3175053EE00C6B22039530E438078CF17E8B5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffb6038f-b139-4708-b914-4c688fc3609a.roa
Signing time:             Tue 11 Nov 2025 02:30:43 +0000
ROA not before:           Tue 11 Nov 2025 02:30:43 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        160.214.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:b3:17:50:53:ee:00:c6:b2:20:39:53:0e:43:80:78:cf:17:e8:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 02:30:43 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=2465f02faa2fa88c5732db4b777f51ebb457a7bf7cf746bd51a8d1f5c5cf0f37, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:77:c7:14:2c:b8:cb:0f:8c:86:73:f0:ce:51:
                    03:1d:12:74:1b:79:74:8a:53:e0:45:c2:1b:86:bd:
                    78:0d:7b:b8:42:b5:b6:a6:d2:1f:3f:32:a6:61:d7:
                    61:d3:a3:76:16:9c:3a:d8:fb:43:8f:63:e0:87:13:
                    1c:69:1b:08:b8:8c:df:e5:bd:38:ab:8b:a7:13:1c:
                    c9:8d:a8:18:8c:89:9f:a1:68:ed:c7:fa:eb:c0:c7:
                    87:00:50:e9:78:99:ff:cf:b8:0c:ee:06:9f:db:57:
                    6f:0e:67:b0:18:04:e0:98:f9:ed:94:9f:16:f4:fe:
                    85:58:7b:08:72:13:98:58:e8:c7:27:2d:1a:de:db:
                    b8:ec:e9:4b:b7:d8:79:40:1d:0a:8e:49:f9:f7:7e:
                    26:3c:24:35:93:f5:a9:38:b5:2f:35:cd:16:99:ca:
                    0f:9b:29:31:27:d3:f9:34:da:bd:29:08:93:9d:d4:
                    89:60:50:30:b5:b7:bb:b5:58:1e:5c:2f:f8:2e:33:
                    0b:9b:c6:65:57:ab:6f:d7:96:d6:66:45:e4:fa:8b:
                    9a:90:ee:f3:62:c1:fe:b1:75:67:ae:f9:01:a9:fb:
                    32:d5:35:8e:f4:2a:92:0c:c6:8d:43:02:88:35:19:
                    5a:8e:8d:f6:01:dd:58:48:cc:bb:ba:35:93:3f:fa:
                    32:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B9:3D:37:AB:97:13:1F:BF:48:C1:E3:54:89:33:20:5E:B9:AE:84
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffb6038f-b139-4708-b914-4c688fc3609a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.214.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5c:9c:7d:a3:1c:9e:1c:f1:9a:d0:a6:0f:dc:de:ce:2a:17:3e:
         f6:ce:0d:ad:21:40:42:e7:91:75:88:52:bf:27:e1:20:31:5c:
         a6:9d:66:f2:aa:4e:09:a9:78:ed:02:c3:82:87:02:19:fa:e5:
         b2:88:05:00:46:5a:97:1b:98:48:5e:d9:fe:90:59:17:c6:8e:
         04:41:07:79:92:ec:a3:d5:29:5b:0b:0e:af:14:aa:fe:da:52:
         32:bf:48:57:fc:8e:ee:cf:a1:24:39:6c:17:40:02:3e:ff:88:
         a0:f2:7c:8b:75:fb:e3:f9:3f:f8:89:93:e1:2d:60:ba:c4:97:
         f3:2b:8c:56:56:81:8f:fd:3c:bd:4a:36:60:2e:ef:81:b5:6e:
         ab:12:00:5b:69:ee:c5:56:2f:ae:cc:40:a0:25:95:72:a0:4d:
         bb:ff:cb:fc:9f:62:03:3b:61:59:9d:49:75:55:c5:17:c2:eb:
         76:49:8c:70:9e:2a:ef:4a:a1:bf:51:66:40:7a:49:07:9c:33:
         23:b3:1d:6a:5a:0b:21:ca:de:52:9a:c3:c7:d0:06:1e:44:ae:
         9f:51:f4:16:e6:a0:f7:7f:4c:1a:35:66:6c:f6:67:35:58:7c:
         06:67:5b:d8:0a:39:ef:31:10:3e:5c:3f:6c:45:4d:03:c8:27:
         a0:44:44:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----