Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1849f94f-427d-42b2-9481-ebb397a6c8ba.roa
File:                     1849f94f-427d-42b2-9481-ebb397a6c8ba.roa (raw, json)
Hash identifier:          u7LJ+OPS/SJMdDaP8kYhOByHEy6gqHayddeuz1T7DFA=
Subject key identifier:   6E:1E:62:AF:13:F7:8F:C9:2A:36:2C:EB:68:C2:0B:AA:CB:C8:A2:7C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       02A2DB8245D84A7491B66A2D77BB94F048A18945
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1849f94f-427d-42b2-9481-ebb397a6c8ba.roa
Signing time:             Fri 17 Oct 2025 20:20:05 +0000
ROA not before:           Fri 17 Oct 2025 20:20:05 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        161.178.160.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a2:db:82:45:d8:4a:74:91:b6:6a:2d:77:bb:94:f0:48:a1:89:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 20:20:05 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=95f14952baabe1f18c8436fee332b3d729ba53a42efa9f1a24492aefc891c827, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:de:a5:bc:9a:9b:13:8f:6e:a0:4b:b9:8f:c1:
                    b0:08:77:b9:42:1e:f8:fe:0b:51:f7:93:ef:f2:0a:
                    4a:b1:f3:d5:23:c7:9b:ec:23:76:59:f2:fe:dc:e5:
                    16:02:71:36:dc:b9:6c:fe:1c:f9:0f:92:c3:8d:8d:
                    f6:67:25:ec:98:53:8d:39:64:e9:17:84:d0:d4:19:
                    a9:aa:4c:9c:54:9a:57:0d:54:99:e3:10:b3:44:2e:
                    83:41:84:8e:cd:e0:01:b4:9e:63:d6:25:e8:d0:0c:
                    e5:3a:0a:45:4d:b6:1a:3c:a6:92:a0:8d:fb:2f:ce:
                    86:d3:c0:cc:1d:1b:8f:cd:e3:7b:0d:ad:e8:66:89:
                    e5:66:9c:28:1f:27:bf:87:80:3a:2f:2d:eb:28:1d:
                    38:8f:e4:60:c0:c1:60:a8:89:dd:4d:90:3a:87:1f:
                    70:81:1a:80:5c:67:4b:88:41:4f:89:a4:fc:9a:a3:
                    5c:c1:ed:f9:eb:15:53:f7:38:31:69:86:b0:69:4a:
                    c6:be:7c:b1:80:74:35:a4:70:71:44:0a:2b:82:a7:
                    37:37:49:71:f1:ea:57:a0:d6:5f:66:71:c1:85:02:
                    a5:4b:bb:6b:40:c4:82:46:0e:e7:a5:d6:d8:6a:d0:
                    58:8b:3c:f9:3a:2c:36:8a:02:b3:f3:33:c9:8f:35:
                    43:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:1E:62:AF:13:F7:8F:C9:2A:36:2C:EB:68:C2:0B:AA:CB:C8:A2:7C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1849f94f-427d-42b2-9481-ebb397a6c8ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.178.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         26:55:c0:e2:c8:c4:0a:64:d7:54:74:61:d2:27:26:e2:fa:49:
         50:cf:03:a1:09:fa:6b:a0:e8:c7:3b:d6:83:40:af:8a:c3:79:
         15:20:b6:ec:50:16:9d:05:14:86:41:03:92:fb:d9:a0:03:22:
         cd:00:64:67:e6:7f:4b:6a:89:39:08:44:30:53:ba:c2:75:ca:
         cb:88:fb:2f:35:cb:2f:5f:63:a5:0a:64:f4:a5:e4:c9:de:f4:
         b2:fc:d8:23:be:75:49:3f:63:f6:11:b8:b9:6b:75:80:5c:9e:
         ec:01:95:e6:8f:e6:1d:0f:89:a4:67:a7:3a:1b:3a:17:d0:ed:
         c1:16:fa:2b:b7:31:12:3c:72:10:c6:64:49:1b:6a:80:e9:8e:
         d6:22:7e:f8:57:d2:69:af:59:c8:19:65:dd:22:04:44:c7:17:
         32:21:c2:6e:0c:8b:cd:85:18:48:8e:42:f8:fd:df:31:15:93:
         b7:a2:11:34:33:58:ab:84:66:d5:87:02:5f:13:92:a1:4a:14:
         8a:51:68:43:d1:d7:fe:04:dc:17:e8:f4:ca:45:59:36:a7:64:
         d7:b8:2e:48:c3:a8:eb:e5:1e:4c:80:ee:a4:d6:ef:32:8a:21:
         f5:45:5e:e9:8b:2e:0b:26:ea:d7:02:e4:8f:c7:c5:75:8d:73:
         52:99:1a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----