Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59664a97-7a86-420c-a977-c7e06b2c9750.roa
File:                     59664a97-7a86-420c-a977-c7e06b2c9750.roa (raw, json)
Hash identifier:          OT1tUG+YTxPXyzrFJZx8j2Q0O/NepPDlQQ1f+wJ9uO4=
Subject key identifier:   46:66:E0:E6:1F:67:D1:89:6A:38:42:23:D0:3B:60:73:BA:B8:59:52
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7DD90394E4396D5D9F53A80C260A7D9213625E66
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59664a97-7a86-420c-a977-c7e06b2c9750.roa
Signing time:             Sat 18 Oct 2025 05:10:55 +0000
ROA not before:           Sat 18 Oct 2025 05:10:55 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        119.13.180.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d9:03:94:e4:39:6d:5d:9f:53:a8:0c:26:0a:7d:92:13:62:5e:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 05:10:55 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=01bff9b78b86fb24aac0c35fbffbe55b61c0d5a7ff7151bf8cbd06e502d65a6c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ff:c7:0b:a6:dd:4f:08:c0:67:e6:f4:f3:f2:
                    d6:1b:8f:f7:24:54:eb:31:eb:0c:c1:34:80:53:e7:
                    26:09:2b:49:e8:e2:fc:e2:ff:7b:fa:49:4d:39:ec:
                    7c:44:a3:ae:90:9d:78:76:2f:c9:53:b5:d9:41:a5:
                    96:e8:9c:38:ea:58:06:d2:3d:b0:bd:e3:23:f3:92:
                    ed:8e:9f:3f:1c:2b:25:34:23:56:4d:ea:99:55:c7:
                    64:a4:29:99:bb:0e:d9:29:8a:81:3c:b1:e2:50:f0:
                    d7:5c:fa:5a:81:a6:b0:ef:cb:b2:12:75:f5:30:f3:
                    b3:b0:e0:4a:22:33:23:c4:a0:22:d0:87:e9:02:f3:
                    4a:98:3c:1b:46:f6:0e:1a:8b:28:04:d1:54:5c:19:
                    4c:d1:49:65:b7:ca:f7:e0:d0:b7:1b:3e:7f:d3:b6:
                    c1:5b:7d:9b:76:96:51:58:c3:98:41:94:62:5f:9b:
                    93:a7:18:02:08:af:a8:b2:7f:19:dd:c9:b5:31:c7:
                    bc:3f:fa:a1:15:3a:13:63:92:f7:d2:1f:c8:0b:1a:
                    7b:0c:4f:2b:74:7e:32:9b:bb:cd:c7:53:b9:a7:fa:
                    7d:9e:db:ac:8d:bd:f5:29:3a:37:14:b6:63:96:5a:
                    3e:ea:6e:c3:03:9d:30:6c:2d:db:42:b2:56:37:06:
                    70:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:66:E0:E6:1F:67:D1:89:6A:38:42:23:D0:3B:60:73:BA:B8:59:52
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59664a97-7a86-420c-a977-c7e06b2c9750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.13.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:83:3f:7c:40:7d:fa:95:7b:f6:bc:36:71:79:25:1e:fc:e8:
         98:2c:c2:69:cd:eb:2e:69:10:18:ac:24:96:df:a2:b3:eb:ad:
         f5:d4:f3:e4:2d:e2:09:49:70:db:20:10:b2:da:6c:ce:7c:18:
         69:5f:19:1a:1d:61:e0:55:f1:80:aa:12:86:f8:e5:d1:ec:c2:
         6b:91:f0:f9:41:25:a8:5c:4f:c2:aa:33:97:8e:04:a0:78:de:
         75:ea:e6:96:d8:b4:4f:2c:16:3d:7a:03:ac:6b:99:28:39:f2:
         27:d2:4e:5a:8d:bf:7f:ed:91:3b:ea:d6:62:f7:ba:64:a3:4d:
         0f:ae:78:fe:1d:f7:8f:7b:05:5c:17:4c:54:f1:73:6d:6f:a3:
         3d:43:31:6e:e9:65:36:49:a6:e8:9c:76:7b:eb:ae:1b:65:e5:
         68:d0:f9:69:ec:93:ab:7f:2c:80:86:08:84:b5:05:30:8c:08:
         0f:3f:30:35:eb:b5:46:e3:b4:f8:8b:a4:e2:a9:be:a6:d7:6d:
         ed:d5:0a:96:62:a3:08:35:2b:1e:d6:b0:3a:76:5e:a0:f8:70:
         ac:bb:52:3f:b1:dd:77:10:c7:7c:47:4f:52:04:1e:7c:93:ca:
         7c:30:4d:94:b2:53:16:d2:72:f7:19:e4:56:30:dd:f0:94:01:
         13:2f:8d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----