Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/341c857e-fc1e-4a5c-a295-d044d4a17699.roa
File:                     341c857e-fc1e-4a5c-a295-d044d4a17699.roa (raw, json)
Hash identifier:          4JW/ZuenxGmLvABJgg628qnRa+etgqWj3bZbbn6dwlU=
Subject key identifier:   81:DD:02:44:41:CA:CB:5C:61:26:78:A7:C5:F8:08:0C:1E:D0:0D:9C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1DBD4BDA959252A1A2DBE37D6E698DC3DB3325E4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/341c857e-fc1e-4a5c-a295-d044d4a17699.roa
Signing time:             Tue 27 Oct 2026 00:11:18 +0000
ROA not before:           Tue 27 Oct 2026 00:11:18 +0000
ROA not after:            Mon 25 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        184.192.0.0/12 maxlen: 12
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:bd:4b:da:95:92:52:a1:a2:db:e3:7d:6e:69:8d:c3:db:33:25:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 27 00:11:18 2026 GMT
            Not After : Jan 25 23:59:59 2027 GMT
        Subject: serialNumber=f976ade96495b55b1ad178e8ccab4c54e97fe39ea782881184789524ebdb9961, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4e:d0:de:66:15:90:88:f1:a5:73:20:ec:d2:
                    da:5e:a9:e1:55:23:e0:8c:03:21:8b:f2:47:85:67:
                    c1:1b:e1:d9:a9:bd:99:c2:9f:a0:54:19:e8:18:03:
                    49:a6:a9:1b:75:30:28:c7:0f:41:55:e2:84:b2:99:
                    5f:c7:0c:0b:e5:f8:f8:b0:69:50:42:52:26:91:ed:
                    fe:82:2b:2f:60:d4:2e:aa:02:61:1b:a1:27:16:eb:
                    6d:71:19:fc:e3:60:29:7f:03:83:9e:e0:3c:ce:d8:
                    5f:3c:08:40:41:4d:83:cb:f9:f2:69:09:24:ff:19:
                    54:6e:2c:d4:38:d0:95:1d:e6:bd:e7:fd:55:dc:69:
                    0c:f3:e8:6d:9f:5e:9f:52:5b:7f:5e:c4:e7:ca:96:
                    37:1e:50:4d:67:83:b5:ec:c7:7b:2d:72:8d:09:14:
                    33:2e:ea:27:76:4a:ba:8a:ff:09:7b:64:6a:59:98:
                    f4:5d:e5:9e:45:28:8d:01:92:3e:35:a0:cc:d1:3b:
                    2c:d8:9b:ca:c3:ae:57:3e:a5:75:2d:04:0d:bb:e3:
                    8e:6e:ab:88:bb:05:ac:f5:4a:e6:35:33:bd:88:e5:
                    1e:5f:62:83:08:55:2e:a4:9d:7e:9c:42:aa:f1:f7:
                    4d:48:90:fd:68:dd:4d:cd:77:6e:e4:41:a9:c6:d1:
                    a5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DD:02:44:41:CA:CB:5C:61:26:78:A7:C5:F8:08:0C:1E:D0:0D:9C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/341c857e-fc1e-4a5c-a295-d044d4a17699.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.192.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         8b:42:84:a3:96:e1:83:bc:e5:0c:a6:8b:24:ac:2c:2a:07:7b:
         23:2d:ef:aa:a2:e3:e1:fc:70:9b:4e:a2:d7:a8:f2:1c:04:9b:
         93:13:9d:3d:a8:30:71:cf:6c:f8:de:1c:6f:e4:7f:a1:b0:ab:
         1c:d8:f6:34:f8:57:1d:73:02:b4:5b:d5:dd:64:fb:46:7b:ed:
         42:db:78:04:a9:ef:78:00:e3:67:79:e9:b8:b3:45:df:6c:3a:
         5d:d1:49:b1:b1:55:dd:bf:65:c2:ff:5b:81:98:83:80:7f:2b:
         5a:3e:2c:68:b9:3b:a1:73:0f:81:3a:59:87:83:65:3b:99:04:
         01:fa:9c:1d:8e:e3:36:b7:83:bf:c2:ae:3a:1b:70:4a:7f:fe:
         51:fb:e8:fb:0f:c9:f3:05:b1:41:fe:12:70:13:7f:07:1d:e5:
         f5:d6:04:a9:05:e2:5d:d4:1d:1c:77:e4:24:c6:38:0f:d5:91:
         e1:02:8a:ee:42:7c:2c:3f:65:96:79:3a:0b:dd:9e:01:81:93:
         43:15:de:09:9b:e3:ee:32:50:10:f3:55:36:e9:03:7d:be:db:
         8a:5c:f5:03:8c:87:64:9f:57:32:3c:6d:6b:b9:e9:90:2b:0f:
         11:c3:e1:64:19:8c:10:78:fc:5b:ec:02:37:8f:4c:0b:6b:32:
         82:f2:4a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----