Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d9802f5-2b41-4e83-b0d2-b35ec68f6bb8.roa
File:                     1d9802f5-2b41-4e83-b0d2-b35ec68f6bb8.roa (raw, json)
Hash identifier:          qDGHSjI8E8Bbm5xTAkKNvOc/f8ymnAixYnkcGdIsGjE=
Subject key identifier:   4F:3F:B9:19:93:EE:58:3E:14:79:AB:D9:D3:81:74:74:B1:09:7D:07
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       79BF8786C28BD7D9FF1BF5063D4D9EA069C45AC7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d9802f5-2b41-4e83-b0d2-b35ec68f6bb8.roa
Signing time:             Fri 17 Oct 2025 20:21:08 +0000
ROA not before:           Fri 17 Oct 2025 20:21:08 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        161.178.128.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:bf:87:86:c2:8b:d7:d9:ff:1b:f5:06:3d:4d:9e:a0:69:c4:5a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 20:21:08 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=e48ae7b879d18b40e8416ac2b332ce153e9cef659f1b4fb71b7b3afc01cf8cfb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3b:8a:8d:b3:73:f7:55:ea:3c:36:ad:d4:e1:
                    ee:a7:87:24:0a:50:03:69:56:6e:9f:cd:e0:4b:16:
                    f6:b4:f7:ef:c6:0a:7f:3e:51:c4:8a:13:5f:d5:2e:
                    ed:02:e6:b9:16:c1:24:e1:bf:75:1a:7c:c2:d4:8d:
                    06:53:46:2f:e7:59:3f:24:94:ac:48:b5:73:00:19:
                    20:2e:86:85:4a:1c:94:08:d7:00:21:2b:9f:44:86:
                    cd:b3:29:d5:2b:46:3a:8e:ae:a0:58:ef:34:4b:48:
                    eb:a4:c0:23:7c:01:b5:ca:2e:ab:67:d0:6b:c0:dc:
                    81:fa:f4:82:aa:c5:12:70:6c:46:37:ef:6f:ce:fe:
                    ab:ee:32:05:e3:09:57:6f:1b:b1:28:27:0c:fc:ba:
                    4c:20:a8:c7:9a:02:74:2a:65:26:14:67:aa:75:97:
                    cc:7c:0b:84:12:9d:5f:e8:17:67:0c:a4:b7:2f:a6:
                    51:e0:8a:75:74:55:0d:a3:e4:e3:f1:31:de:6c:58:
                    a3:ae:ec:11:69:9f:b1:5e:60:21:69:04:c7:f2:32:
                    67:7d:2e:95:52:4c:e0:90:ac:1c:4c:92:3d:2a:6b:
                    94:59:3a:be:58:02:c3:77:ef:bb:1e:ca:f8:cc:c8:
                    24:e4:7c:02:2a:5a:5e:f3:79:20:32:df:94:5a:f0:
                    46:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:3F:B9:19:93:EE:58:3E:14:79:AB:D9:D3:81:74:74:B1:09:7D:07
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d9802f5-2b41-4e83-b0d2-b35ec68f6bb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.178.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4c:17:76:31:af:ab:78:49:bc:11:42:e2:8f:16:fc:41:32:ce:
         7f:52:ca:00:2d:08:6a:13:58:82:a8:de:cb:54:91:51:05:14:
         b4:1e:8d:4c:d4:56:48:69:62:6b:25:f4:42:24:fe:de:40:8c:
         b1:17:5c:b9:b6:c2:f9:de:85:7e:d4:70:7f:a6:4c:8b:22:54:
         73:ee:c6:67:b0:c3:45:69:0c:89:ce:fe:34:a8:3e:53:15:24:
         88:53:c9:08:73:e3:62:fd:0e:ca:44:cd:5c:79:2b:88:f9:3b:
         08:44:00:2f:cf:db:e8:bb:42:86:2e:86:d5:98:62:ea:03:8d:
         58:05:4e:72:09:61:03:4f:23:6d:5e:28:f8:db:c3:e8:b7:fb:
         84:1d:ce:17:eb:73:95:6d:79:58:0a:b5:08:b0:02:01:0a:41:
         9b:de:b1:08:55:8d:82:93:07:ef:02:ef:9b:a3:9c:5b:9a:a2:
         30:99:88:78:10:31:95:59:e5:f3:1d:2b:32:3c:ae:6c:01:44:
         ba:d7:54:1c:79:f9:06:cb:93:63:a7:b1:b3:e9:b5:31:80:93:
         83:60:14:39:ce:b5:9e:cc:31:35:78:50:da:de:7a:c6:4b:ac:
         3f:81:a1:1c:64:51:5a:6c:84:f5:74:d2:a9:5a:fb:57:63:12:
         0a:88:f9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----