Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/259b0750-ae62-42f7-84c0-e7c8b6acca96.roa
File:                     259b0750-ae62-42f7-84c0-e7c8b6acca96.roa (raw, json)
Hash identifier:          t8vWCE9KT5rMa56hLC/OkKyXJEFRVduXWEEOrJUcb1k=
Subject key identifier:   D4:6F:4F:02:86:5B:70:7C:7D:91:84:A2:BE:47:1E:AB:DE:AD:71:D6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       56580B7A3D56EF385DCBE48D7BE69690B951348D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/259b0750-ae62-42f7-84c0-e7c8b6acca96.roa
Signing time:             Fri 17 Oct 2025 20:00:16 +0000
ROA not before:           Fri 17 Oct 2025 20:00:16 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        162.87.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:58:0b:7a:3d:56:ef:38:5d:cb:e4:8d:7b:e6:96:90:b9:51:34:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 20:00:16 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=249c29520238c5d284c46f4f4d69713a8d21e50a6b507eaae138c2f688a4b91d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f9:38:d9:3d:a1:60:4a:9a:d8:80:1a:3b:27:
                    69:29:59:ef:95:77:39:8a:3b:8a:d5:eb:8d:c2:a4:
                    b0:09:a9:82:88:9f:2f:b0:49:c5:3b:85:61:c3:8e:
                    e1:59:42:0a:37:71:15:8b:74:d4:15:88:f0:67:35:
                    a0:41:75:c1:c2:36:d6:d8:3a:9c:c2:35:01:ae:90:
                    24:65:f5:ad:e1:99:bd:4c:cd:89:7c:6d:ff:5f:ce:
                    37:7b:61:b1:25:08:d6:e6:4e:ee:ed:a0:9e:d2:4a:
                    8d:ab:02:e4:38:e3:36:eb:1f:e7:c0:fc:8a:5b:df:
                    74:9c:e6:f9:93:b5:7c:bd:75:cb:9b:c5:78:ce:bf:
                    53:e2:8d:15:f5:d4:fa:39:99:a5:23:93:e6:ca:d2:
                    a2:54:eb:13:b3:b1:a9:6a:35:b9:bb:2e:48:01:68:
                    7e:58:2b:47:ba:ec:65:68:f4:2d:57:73:11:6f:95:
                    50:a9:99:04:14:ab:f0:93:a2:3b:d6:b4:88:d6:52:
                    ce:1e:cc:72:83:01:04:b3:05:c1:6c:98:e8:9e:ef:
                    21:d4:58:8c:55:cd:1a:3c:05:44:d7:e5:fb:a7:85:
                    a6:52:4f:76:a6:0e:24:21:14:e8:d2:75:04:ae:7a:
                    f9:df:43:66:de:96:1e:e8:ae:3c:bc:ea:58:c6:42:
                    78:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6F:4F:02:86:5B:70:7C:7D:91:84:A2:BE:47:1E:AB:DE:AD:71:D6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/259b0750-ae62-42f7-84c0-e7c8b6acca96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.87.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b5:82:c5:b4:2f:4e:a8:c5:3f:22:a0:ab:13:02:a7:12:4f:b1:
         f8:ec:c6:94:54:ea:35:75:84:c7:b8:a8:be:62:d7:48:e0:bb:
         84:13:6d:2d:92:f6:96:85:1a:2b:5d:20:85:51:9b:2a:9e:03:
         82:fc:ab:ff:ee:cb:16:c4:61:53:db:94:6d:60:d7:0a:6e:ae:
         c2:be:e6:f8:0c:6d:9b:b7:3b:ba:28:a3:05:ea:9b:04:5f:02:
         03:22:4d:85:30:9f:a3:7c:05:c4:a6:9e:6e:83:17:9e:b0:1e:
         60:86:49:e0:35:04:d2:d2:91:a3:34:8a:e0:5c:07:3c:f5:63:
         f2:63:73:01:e8:8e:65:86:ac:b2:bf:6b:43:2c:ce:30:c8:1e:
         97:2b:03:ea:86:5c:8b:82:c7:b6:22:b0:ee:2f:e0:93:19:c2:
         9e:4d:fd:54:a8:01:c0:45:d3:b6:30:a9:aa:e4:20:63:fb:f2:
         f7:50:5a:ef:86:25:8a:91:fa:a4:d9:c8:81:9e:f8:8f:14:4a:
         ee:62:86:5e:c5:4d:d5:5f:50:f6:80:87:8b:d1:03:ce:08:79:
         ad:f2:7f:4e:fd:8e:e0:ee:72:04:bb:7c:7d:1f:e6:dd:20:4c:
         09:51:13:91:b6:9c:34:44:6d:97:01:46:aa:86:63:f1:8d:a4:
         a4:84:95:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----