Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/455ad1c4-cda1-4def-a603-9493ce5df056.roa
File:                     455ad1c4-cda1-4def-a603-9493ce5df056.roa (raw, json)
Hash identifier:          bPW6FkVCtfxlHYLPTO6kKmPS0r0KILsWFcS2sdijwQM=
Subject key identifier:   62:C7:49:C1:7E:06:D4:A2:06:4D:90:B6:D9:96:9B:C6:EA:00:3B:3C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       34CC48D88EEF77D92D26488E30D324110E3ED83D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/455ad1c4-cda1-4def-a603-9493ce5df056.roa
Signing time:             Thu 02 Oct 2025 21:08:47 +0000
ROA not before:           Thu 02 Oct 2025 21:08:47 +0000
ROA not after:            Thu 06 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        194.97.160.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:cc:48:d8:8e:ef:77:d9:2d:26:48:8e:30:d3:24:11:0e:3e:d8:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  2 21:08:47 2025 GMT
            Not After : Nov  6 23:59:59 2025 GMT
        Subject: serialNumber=3e74153da8cd2a375b0980b0d781255f3d3a1f903dad70b662499db669926cf8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:44:41:7f:f3:68:cd:9b:38:47:e1:43:18:66:
                    92:64:58:b0:5d:6b:30:0d:5f:7f:ec:d7:38:9e:1a:
                    ac:57:0f:bc:5b:4a:f1:34:a9:15:71:cb:f9:92:37:
                    2d:86:e8:b7:cb:9a:ba:c9:99:56:93:e7:8e:96:ff:
                    f0:11:59:8d:2a:a7:d6:87:b0:f9:90:b7:2a:27:b4:
                    f4:40:c5:23:10:f3:c7:28:97:92:1a:6e:73:42:08:
                    65:eb:77:2d:0c:5e:25:28:7e:d6:10:18:72:cf:47:
                    7f:fc:c6:8e:06:a0:63:fa:fa:e0:cc:12:ed:81:d5:
                    a7:c1:af:0f:c1:9a:e1:b9:38:73:1e:b7:85:b3:a6:
                    7e:e7:de:bc:56:e3:bd:0a:fd:05:c6:e2:d4:ee:55:
                    1a:b6:b1:09:a6:32:e0:5e:c3:64:58:11:3c:1b:1c:
                    47:03:50:61:c6:5f:08:6d:5b:04:e1:25:0c:b1:ec:
                    12:16:83:c2:b4:a6:83:f8:fa:9f:0b:28:d1:36:de:
                    23:c4:e3:67:8d:2c:16:c0:9f:fc:62:6a:a5:61:b5:
                    e4:c8:27:4d:29:f1:7e:6f:17:11:cf:e3:01:7c:32:
                    80:56:93:1f:21:c1:f9:71:f4:37:85:20:77:28:ed:
                    2d:b2:cf:a2:1f:b6:fb:21:d2:a3:6c:bc:8e:9c:3f:
                    43:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C7:49:C1:7E:06:D4:A2:06:4D:90:B6:D9:96:9B:C6:EA:00:3B:3C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/455ad1c4-cda1-4def-a603-9493ce5df056.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.97.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c5:aa:ba:22:0a:e7:f2:08:5b:2a:30:71:fc:60:c4:41:4c:b4:
         98:28:e3:5d:07:00:4d:4f:ee:70:53:e8:16:59:1b:59:1d:67:
         ee:21:ac:21:74:3e:77:ba:e3:a9:4e:fe:6e:60:3d:1f:79:80:
         1b:35:ed:98:35:53:86:8a:bf:8c:1a:5b:1e:06:28:95:d9:14:
         9b:06:7d:4e:0e:b6:86:99:5d:69:e4:1f:85:f7:d9:b6:3e:5c:
         cd:ce:9b:37:4a:50:a9:56:e5:9c:fe:c7:e7:ee:00:2d:45:5f:
         ff:f4:30:a0:e0:c6:36:99:7d:14:d4:96:f0:14:36:5c:d9:9b:
         16:00:1d:17:3f:53:b5:94:da:7c:cf:48:e1:a1:ed:4f:3f:e7:
         3a:e5:17:9e:6b:ab:cf:9a:26:1d:5b:00:bd:d8:93:3f:97:d6:
         94:4c:bf:47:8a:5a:04:83:7a:f5:56:e7:59:c4:8b:e0:7b:32:
         5b:c8:3f:18:c2:5d:14:58:43:c2:ef:3e:f6:76:c1:ad:c6:8d:
         84:a0:8a:36:9a:e5:ae:21:6c:c1:de:5f:6c:ae:86:5c:cd:28:
         c3:33:2e:08:8c:de:13:cf:6b:c8:ee:e1:6d:fb:b8:c9:73:77:
         13:a0:77:f6:0f:2b:ee:a2:36:aa:3a:5e:c6:5c:e8:cb:34:aa:
         98:07:3b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----