Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5753e2d3-4442-467a-b1d8-3c38c62f910c.roa
File:                     5753e2d3-4442-467a-b1d8-3c38c62f910c.roa (raw, json)
Hash identifier:          JkxIUHXrq5yhCYvlBNpbSuHVR8UlRJvE9kYREXGAbjI=
Subject key identifier:   44:10:BA:F0:9B:0E:54:7F:5D:75:97:14:22:47:8A:B9:9B:0B:71:83
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0D0C580C421375A740A00B0815AA16D69BF87C70
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5753e2d3-4442-467a-b1d8-3c38c62f910c.roa
Signing time:             Tue 30 Sep 2025 00:23:05 +0000
ROA not before:           Tue 30 Sep 2025 00:23:05 +0000
ROA not after:            Tue 04 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        161.228.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:0c:58:0c:42:13:75:a7:40:a0:0b:08:15:aa:16:d6:9b:f8:7c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 30 00:23:05 2025 GMT
            Not After : Nov  4 23:59:59 2025 GMT
        Subject: serialNumber=e0348e220882543369a809402d45cb23f1fcf72d1eb18fc14a4a1f0e135be3b5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:83:f6:9b:44:0b:5b:e6:ac:8d:1f:b9:5b:bc:
                    56:9c:9f:de:92:af:cd:17:be:ce:9d:65:c9:a2:a9:
                    ac:dd:89:cf:c5:3c:e1:7b:d8:be:0f:e4:cb:72:b3:
                    1d:43:ee:f1:2d:8c:5d:dd:d8:52:a3:21:79:ff:3d:
                    52:55:df:b6:ef:f1:f6:e5:de:04:f3:b5:c9:d1:81:
                    5e:c5:1e:04:29:6b:f9:8b:33:c7:47:ac:fd:3f:bd:
                    c9:26:47:41:46:6a:6b:d6:14:3d:22:cb:a7:58:5b:
                    bc:5e:8b:65:7d:b4:d7:49:ad:aa:b2:48:cc:63:fa:
                    28:bb:8a:3f:1c:7c:6b:7b:5d:19:ed:27:e8:ab:73:
                    e8:22:a4:77:f1:43:bf:fa:81:7e:f6:8c:9e:85:9b:
                    2b:57:51:13:9d:f0:e6:49:de:83:17:e3:d8:58:ac:
                    29:8e:ad:63:83:ef:7a:ee:7f:85:63:70:ba:a0:5d:
                    44:f6:7d:ee:25:ed:cb:a3:dd:0a:d4:00:d0:09:cb:
                    69:47:fd:e8:31:d4:65:15:ca:9e:e0:6f:e8:d5:03:
                    65:e8:a4:e5:36:5d:73:2e:d4:f2:89:6a:91:6b:5b:
                    cb:17:e6:98:16:88:9d:ae:42:59:a2:4b:df:5b:76:
                    14:8e:a1:3d:cb:ea:d5:ee:52:f5:70:08:22:8d:ea:
                    d2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:10:BA:F0:9B:0E:54:7F:5D:75:97:14:22:47:8A:B9:9B:0B:71:83
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5753e2d3-4442-467a-b1d8-3c38c62f910c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.228.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         76:71:d4:8b:eb:24:7b:fd:62:08:fe:c2:a3:e7:9d:de:fe:fb:
         48:1e:95:26:c8:7b:a8:3b:7c:c7:87:ce:e3:9c:c0:e2:b3:6d:
         90:bc:65:dc:5b:71:17:91:18:fa:c4:7a:4e:b8:bf:e5:cf:92:
         50:f3:dc:db:1a:bb:f3:f0:7f:75:b2:5c:fb:f4:19:83:26:3a:
         9f:35:cc:17:61:f0:f5:84:24:a7:d5:f1:69:87:95:30:22:bd:
         8c:c6:dd:53:5f:88:2b:6d:e4:c7:d2:78:a1:41:8f:a0:7b:5e:
         fb:75:5c:fc:be:53:92:5f:ff:99:72:34:6c:f0:d2:0b:89:9c:
         eb:1f:28:41:71:9a:8c:43:50:f5:45:06:1b:e5:ec:ea:56:31:
         51:65:70:db:be:44:fe:d0:39:a2:43:ab:1e:98:2f:c1:96:e7:
         e7:30:69:c8:2e:cd:f9:e7:24:79:9b:65:b0:36:be:2c:3c:30:
         3e:92:da:c2:bf:2e:73:d0:00:e3:d1:03:44:91:8d:d3:5a:a2:
         db:6f:20:e2:7d:fa:bc:fd:e5:48:ee:e4:4c:ee:33:ae:5f:ea:
         9f:24:91:cf:38:f2:1e:2d:ae:ea:bf:f7:b4:62:8d:b2:43:70:
         eb:52:b7:06:b1:d2:6d:a7:5b:c1:f6:5a:26:b8:82:c1:fc:93:
         6e:07:7f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----