Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/579713b0-f99f-4653-8f39-039a43f1fb58.roa
File:                     579713b0-f99f-4653-8f39-039a43f1fb58.roa (raw, json)
Hash identifier:          9+yVyoy3qrwnUjI5KSMQwCFquLGJI0NnL1Nzds2AkfE=
Subject key identifier:   47:B9:95:E2:B8:2E:3A:39:58:3F:C2:F1:33:47:8E:E4:19:41:BB:ED
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4900E8FA7ADB8AC7A41CDF0DB53564AC983E4101
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/579713b0-f99f-4653-8f39-039a43f1fb58.roa
Signing time:             Thu 13 Nov 2025 00:40:08 +0000
ROA not before:           Thu 13 Nov 2025 00:40:08 +0000
ROA not after:            Thu 18 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        135.133.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:00:e8:fa:7a:db:8a:c7:a4:1c:df:0d:b5:35:64:ac:98:3e:41:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 13 00:40:08 2025 GMT
            Not After : Dec 18 23:59:59 2025 GMT
        Subject: serialNumber=d0ea983dc9b2e7b3ef6b70e4911a4702b93ef5d56127dec33558ced5f817f5fc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:73:11:5f:73:63:07:84:17:94:5b:b3:45:14:
                    28:99:10:0c:ce:af:db:13:97:e7:a2:9c:0d:c4:cd:
                    3c:b0:a4:5f:e2:5c:70:64:93:57:02:2f:f2:ae:fc:
                    06:7b:f0:74:31:d2:47:ca:21:38:a4:78:b3:71:a0:
                    a1:ae:a1:39:b5:c2:05:eb:ac:c5:76:9b:95:02:1e:
                    e5:2e:c1:eb:6a:63:9f:ea:b7:5c:44:8d:99:20:05:
                    9d:c1:63:1c:1b:4c:32:d6:01:d2:fe:4d:5d:de:22:
                    44:b5:c2:6d:b9:12:c1:13:ea:e6:64:00:e0:ec:42:
                    eb:6e:c0:d2:d0:40:37:a0:1d:5f:dd:48:76:ed:c2:
                    2d:e5:c3:76:30:0d:3e:27:aa:b1:c0:fe:6f:fe:47:
                    60:0f:a1:c9:f1:68:62:7d:ec:70:3b:41:57:32:f5:
                    80:e3:e5:c7:c8:ca:14:91:4e:56:ae:2f:d7:b8:18:
                    73:b7:72:01:20:84:af:3b:86:fa:c0:81:91:dc:34:
                    d8:c2:44:0c:88:51:91:a0:e1:2e:33:df:b5:0c:69:
                    25:5b:e4:ba:b6:da:52:b8:b3:2c:85:2f:ac:51:54:
                    13:2f:3d:8e:87:cc:61:c1:88:49:26:ad:42:f9:e6:
                    85:69:1a:4a:6c:87:91:7a:55:a2:86:ca:a2:d4:68:
                    93:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B9:95:E2:B8:2E:3A:39:58:3F:C2:F1:33:47:8E:E4:19:41:BB:ED
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/579713b0-f99f-4653-8f39-039a43f1fb58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.133.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5d:27:a8:68:ac:8a:60:9c:e0:d4:82:d0:73:d5:4d:d3:3e:33:
         ca:1a:f9:6f:c4:cc:18:25:ae:df:19:0f:fd:3c:66:4d:fc:0f:
         86:33:0c:63:18:b1:3d:6a:7e:3d:38:06:a8:6b:8f:ac:ec:e1:
         21:82:2a:b0:c0:a2:35:4a:36:3a:9b:d2:b4:36:8d:93:66:0f:
         01:c4:b2:e2:f9:d5:06:95:59:d5:98:45:e3:fe:1c:a8:da:99:
         bc:bf:8e:bd:f0:be:dd:db:69:3b:39:d2:3d:26:54:4e:f7:14:
         26:b3:74:c8:ee:98:ce:0b:b2:24:41:2e:28:2e:fc:dd:d0:d6:
         1b:b2:b4:ad:dc:e8:d4:14:66:a0:56:7e:2e:98:1d:eb:e7:1a:
         86:0b:0f:7d:30:e2:20:de:b4:6a:6a:15:1b:20:63:1f:86:39:
         d6:ed:41:5e:96:e7:4e:0e:fd:f1:b9:ab:2a:37:87:39:3b:6f:
         c3:7e:dc:ed:6c:bf:04:79:38:90:8d:12:3c:4c:75:80:0d:4a:
         f9:0d:5e:ae:20:94:f3:86:6f:4f:43:51:3a:27:c2:b3:fb:6d:
         cb:8b:ba:4d:50:35:9a:43:7c:78:87:0c:8b:2f:11:69:82:5a:
         41:30:f1:82:1a:f8:26:46:45:94:4e:5c:74:e4:e5:ca:18:fe:
         3a:76:82:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----