Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/478a8350-b442-4017-97f0-f31faf638a8d.roa
File:                     478a8350-b442-4017-97f0-f31faf638a8d.roa (raw, json)
Hash identifier:          5qJFG916BPSXocYhRlnpUTdmWrMNhgSWxLczOUw48TA=
Subject key identifier:   C9:AC:BE:59:AF:6E:80:0C:84:12:15:B8:6E:55:4E:96:A5:BF:D6:F1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5FC8262BD0AD406B85BC8BD51B5D0E0E2B88CAED
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/478a8350-b442-4017-97f0-f31faf638a8d.roa
Signing time:             Sun 19 Oct 2025 02:11:02 +0000
ROA not before:           Sun 19 Oct 2025 02:11:02 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        155.193.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c8:26:2b:d0:ad:40:6b:85:bc:8b:d5:1b:5d:0e:0e:2b:88:ca:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 02:11:02 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=cfedbfbf594eca97ba02c12c994648e7a0a5c9beb461ae182cd015e5bc82f272, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a9:bd:a0:97:c1:dc:85:0d:f9:91:a8:44:b5:
                    a9:9f:60:7e:a8:d7:17:e4:bb:bb:7c:a5:0a:c3:ac:
                    6f:e0:16:3f:74:09:ce:db:40:79:b2:5f:fd:31:fd:
                    cd:23:10:b6:a2:aa:2b:5c:c9:89:d5:ae:93:5b:6e:
                    5f:a8:25:19:76:24:59:71:f9:e0:f9:5a:6f:9d:ab:
                    64:95:c9:e8:90:af:4c:9f:30:97:c2:9c:ba:ef:b3:
                    8c:3d:3f:36:41:cd:fc:41:4b:8b:9b:05:6e:80:ac:
                    62:72:3f:0c:0b:14:41:a8:77:57:7f:37:08:b2:3d:
                    55:b3:a0:a2:4b:4c:d1:36:fd:5c:2e:6b:57:3c:a6:
                    8a:1f:17:6b:5f:4d:65:2d:8d:a4:99:b0:39:51:47:
                    a7:fc:66:c6:d3:86:1c:dd:41:1d:c4:31:7e:98:6f:
                    64:9d:e5:44:b9:e6:86:99:63:c9:b4:b9:0c:8f:ed:
                    76:0e:5d:69:bc:fb:a5:a4:04:18:75:e8:ab:5d:ff:
                    23:a0:ef:a9:4c:5d:5c:00:96:c6:d1:3c:ca:c3:ac:
                    51:a7:02:b8:bb:c9:63:fb:1c:d7:cc:58:11:61:d4:
                    34:ae:be:06:ef:64:80:ca:ad:d7:83:01:d1:ec:71:
                    46:92:d4:9e:98:0a:10:be:a4:dc:04:fa:c9:03:4a:
                    e9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AC:BE:59:AF:6E:80:0C:84:12:15:B8:6E:55:4E:96:A5:BF:D6:F1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/478a8350-b442-4017-97f0-f31faf638a8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.193.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1a:82:47:d9:91:03:eb:9f:f2:9b:56:5b:ac:e0:5d:e4:7b:1e:
         2f:d5:2b:9f:d6:30:5f:f8:c9:a2:1a:61:5c:e5:37:27:cb:6f:
         79:29:cb:59:f2:75:d5:68:46:42:41:a7:8f:8f:c3:ef:b7:3d:
         68:da:0f:aa:ac:cd:2a:8a:2d:fd:2c:5d:37:2d:71:4a:32:7a:
         62:7e:80:c4:a2:41:0e:aa:2a:d6:e8:31:92:4e:ae:f4:17:f7:
         58:3d:99:33:0a:85:7b:7a:e6:25:11:2a:66:9d:ad:d1:c3:25:
         1d:27:b8:7a:1f:8e:4f:f6:9d:12:75:1f:2c:47:bb:47:e5:69:
         42:81:5b:a4:dd:20:77:86:0a:ba:f2:63:87:5e:6c:fd:ac:4e:
         68:cc:af:fe:e5:75:14:92:b7:b0:b3:a0:73:3d:bd:6f:92:0c:
         42:85:8b:e9:64:ce:e6:79:1b:29:f1:09:3f:de:21:64:42:17:
         0b:f6:8b:84:f2:8b:4d:58:55:c9:1f:4c:8d:b2:6b:05:aa:03:
         08:38:2b:39:15:d0:03:1a:02:ba:11:39:e7:8f:d5:00:d7:3c:
         1d:6d:3d:bf:e2:e7:94:76:07:d1:77:e1:0e:ec:9b:1d:1e:84:
         6f:fe:f3:f9:fe:b6:e3:b8:80:fa:f5:02:5b:ad:1f:d0:99:aa:
         b3:4e:82:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----