Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f96569d-1e29-4c82-8714-f7e019d9de0e.roa
File:                     1f96569d-1e29-4c82-8714-f7e019d9de0e.roa (raw, json)
Hash identifier:          xhtGDa9sLFdI/sYnw/jB46b8MKmCJt+U/kExeW7rLjE=
Subject key identifier:   B3:66:94:4A:CC:99:C7:AF:3E:58:D1:62:D6:1E:C9:7B:F5:5E:0D:87
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5C25EC2FE2FD887B1CECE7186183AD7C9EF7AA39
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f96569d-1e29-4c82-8714-f7e019d9de0e.roa
Signing time:             Wed 08 Oct 2025 00:01:16 +0000
ROA not before:           Wed 08 Oct 2025 00:01:16 +0000
ROA not after:            Wed 12 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        134.73.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:25:ec:2f:e2:fd:88:7b:1c:ec:e7:18:61:83:ad:7c:9e:f7:aa:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  8 00:01:16 2025 GMT
            Not After : Nov 12 23:59:59 2025 GMT
        Subject: serialNumber=fecd30d06050a2d64828109d1491d52540c05b7fad052ccb34068f21d4004d64, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:55:34:3b:88:37:4e:db:ba:9e:12:c2:8d:f1:
                    4d:84:1d:0a:ed:e8:1c:e3:4f:10:14:5d:61:75:4a:
                    00:19:68:6d:95:e5:f4:3a:26:e3:95:58:04:ed:1d:
                    13:f9:a1:61:f6:89:49:ed:3b:09:ae:06:4b:f4:79:
                    41:2c:b0:1d:be:6a:ba:8d:15:a1:b7:0a:79:4c:91:
                    c6:cd:db:8c:c7:b2:65:7e:a0:07:e5:de:e1:d8:01:
                    26:fa:29:3c:72:c6:e9:97:66:af:7a:72:5c:e6:74:
                    9c:69:f1:63:a1:ce:b1:59:6a:d0:92:11:40:01:58:
                    af:05:d8:b7:1d:3b:ec:ef:75:19:ac:b3:17:a6:83:
                    6c:f2:1c:1d:b9:6b:d9:6d:3a:23:dd:c2:7a:ca:95:
                    6f:1c:5e:db:92:60:29:74:b5:40:e9:ee:16:13:41:
                    3e:81:98:90:71:b2:5c:98:61:37:73:d5:fa:b3:cc:
                    9a:ef:a4:e3:95:ca:22:2b:a2:ae:ca:18:bb:31:00:
                    dd:aa:34:3b:e9:2a:7a:57:2f:8c:e5:84:3e:03:b4:
                    ee:02:75:9a:28:5b:06:66:84:1a:73:86:c5:3b:ae:
                    61:92:19:e3:39:f9:e8:c9:4a:fc:12:59:86:bf:2c:
                    11:49:8c:e8:2b:a3:5a:0d:e3:67:6d:11:4a:75:06:
                    39:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:66:94:4A:CC:99:C7:AF:3E:58:D1:62:D6:1E:C9:7B:F5:5E:0D:87
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f96569d-1e29-4c82-8714-f7e019d9de0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.73.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         80:d7:5e:30:72:e7:61:f6:2b:8f:5b:6e:2b:99:92:a3:5a:89:
         92:6c:a8:9a:b2:d0:91:aa:c5:ae:da:19:4d:d3:60:5c:df:0a:
         c3:2a:a1:9c:a9:ad:70:dc:b6:f6:bf:74:d0:e4:de:3c:4f:d8:
         95:d8:7d:1e:85:a2:f1:a2:1c:d3:13:bf:e0:1d:46:db:ef:24:
         bb:d4:2e:09:39:98:2e:d7:ce:88:d7:f0:e8:c3:bd:07:e2:ef:
         a9:2f:a6:d3:56:82:04:8e:c8:49:8e:0c:b2:f7:15:1c:72:f5:
         50:47:a2:d0:9e:0a:7b:7b:9e:f9:b8:6e:65:6d:52:61:90:d1:
         92:31:fa:86:f8:f6:66:61:45:7d:3a:ab:3d:cc:56:57:5e:3c:
         fd:a0:f6:bf:4d:0e:74:4c:56:06:5e:ab:e4:f2:b7:65:31:2a:
         69:15:00:1b:b7:2d:7f:26:82:dd:9e:f4:7c:80:ae:55:99:c3:
         1c:b5:59:36:3c:dc:a2:cb:2e:75:dd:de:36:e5:0b:c1:af:3e:
         89:02:2e:74:40:5d:49:fb:2e:03:05:44:42:21:38:cf:91:00:
         bc:37:63:6c:49:08:8b:16:a2:89:1d:b5:54:e3:14:7f:a7:ac:
         55:13:85:8b:b3:80:22:d6:4c:99:16:93:5e:3d:44:c2:a1:3b:
         a3:59:33:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----