Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c2a34e0-9a32-453c-85db-ddb5e7497a1c.roa
File:                     2c2a34e0-9a32-453c-85db-ddb5e7497a1c.roa (raw, json)
Hash identifier:          qJ/ILIMaU52u+MtFVdGjs6X8TD68SsAsMEZ+pvfu6Ac=
Subject key identifier:   3C:1E:A2:1F:1D:5A:6A:95:72:79:12:1B:F1:92:C0:41:84:29:8F:5E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5A1EFBE0A0760EEA2B203055B8D78D6289ED6B4B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c2a34e0-9a32-453c-85db-ddb5e7497a1c.roa
Signing time:             Sat 18 Oct 2025 00:20:53 +0000
ROA not before:           Sat 18 Oct 2025 00:20:53 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     7224
IP address blocks:        173.228.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:1e:fb:e0:a0:76:0e:ea:2b:20:30:55:b8:d7:8d:62:89:ed:6b:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 00:20:53 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=74f0e340595d5f35ef0041ec6e761bee1aa37481b85934636e4ba27858ca4e76, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d9:8a:1d:76:a0:fb:f4:53:24:a4:d3:c2:d1:
                    12:85:f4:d5:22:80:73:b0:86:7e:27:44:3a:52:49:
                    e9:81:2b:7a:02:c5:ca:90:1d:7f:05:bd:ce:51:1d:
                    da:cd:04:5c:f1:9e:dc:26:f2:14:c1:a1:fa:90:9d:
                    a8:6c:c2:7b:7b:38:f1:dd:5a:81:44:a5:11:61:cd:
                    5a:de:30:3d:4b:56:df:f2:c6:42:84:e7:4c:51:3b:
                    f5:f6:9e:2d:23:b8:a5:03:35:07:26:10:95:1c:20:
                    61:7c:c6:58:64:06:47:16:46:ee:ea:73:7c:c1:ec:
                    a9:9f:aa:36:8e:bf:c3:51:92:9d:a3:18:90:01:9b:
                    32:74:ab:3a:f2:22:da:ab:83:ec:5f:df:dc:fa:b6:
                    b8:04:be:35:86:75:eb:7a:e3:d6:5e:f3:ed:b3:22:
                    2d:d1:c9:84:e2:3d:f4:1c:ea:45:a0:02:81:e5:4e:
                    b8:42:5d:32:1f:dd:33:8c:92:73:b2:8d:63:80:4c:
                    d4:dd:2a:3f:b3:c3:e2:43:3c:39:1d:58:04:2d:81:
                    18:4f:58:03:5a:2f:07:bc:03:73:fd:a1:01:a7:8f:
                    b3:1d:fa:3b:ad:90:c4:17:5c:39:b0:5b:d5:45:6e:
                    a2:e9:8a:6f:0d:f3:b8:80:4e:6c:97:2d:35:68:c8:
                    84:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1E:A2:1F:1D:5A:6A:95:72:79:12:1B:F1:92:C0:41:84:29:8F:5E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c2a34e0-9a32-453c-85db-ddb5e7497a1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.228.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         58:52:f6:0c:04:8b:60:94:94:b7:aa:80:89:10:08:d1:2e:fc:
         d6:98:26:37:e9:3f:20:17:46:ad:cd:e5:be:ec:c5:22:45:c3:
         cd:13:a0:da:04:ef:a4:2b:50:f5:89:2c:63:a5:7c:c0:30:1c:
         40:30:e1:30:4a:61:61:2c:5a:da:b0:5a:0c:93:eb:84:34:d3:
         1e:22:f8:4a:ac:8b:24:4b:07:72:d4:e8:a7:da:3e:8c:a6:cf:
         0e:6e:12:7c:d9:7a:03:e0:9e:42:f6:b6:b1:2e:5a:0c:0b:49:
         72:e8:5c:7b:ad:de:ad:07:85:7e:25:a8:a0:fc:bb:96:fd:1d:
         97:2b:f1:e8:87:d7:da:de:38:2a:f1:7b:c4:6a:67:de:cd:fc:
         39:d2:86:42:68:c4:85:03:b9:8a:62:86:e6:b1:d6:c3:6f:c9:
         bd:e7:0c:3a:51:d4:8d:15:cc:af:d4:fe:5a:d8:e9:7e:7b:a2:
         9b:c0:0f:be:ad:42:4c:15:c3:9b:75:cf:f4:93:34:fc:38:7e:
         40:79:56:f4:79:4c:ec:7f:ab:d2:70:9f:e2:24:34:3c:c4:89:
         b7:3c:de:6f:92:d0:5e:f3:8b:e4:1e:7a:3a:ed:f5:27:1b:c1:
         1d:c1:71:53:52:f0:cc:4d:72:71:94:57:67:da:6c:a6:c5:4a:
         23:9e:a1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----