Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ffea096-134e-4a4c-ab88-d5d21b886b3f.roa
File:                     5ffea096-134e-4a4c-ab88-d5d21b886b3f.roa (raw, json)
Hash identifier:          8Ma+HUe9LrzrQshun77MIz0QOiq/gYhvyUVSaNoAlQk=
Subject key identifier:   0D:9E:EB:74:7F:39:E3:B3:10:1D:BD:F6:8E:8B:A1:76:9F:53:52:B2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       458E7A1E9570F943FC510E79D8BF2773567340D8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ffea096-134e-4a4c-ab88-d5d21b886b3f.roa
Signing time:             Sat 18 Oct 2025 01:50:43 +0000
ROA not before:           Sat 18 Oct 2025 01:50:43 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        161.178.0.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:8e:7a:1e:95:70:f9:43:fc:51:0e:79:d8:bf:27:73:56:73:40:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 01:50:43 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=f0772c258edea569862ef16f0bd8c942b1ce065e727ec48d66ddcf436fadbd55, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:90:45:35:04:08:54:bd:5f:b2:96:6a:7d:c3:
                    38:80:83:bb:6c:99:14:0d:0f:e6:24:8b:52:79:8f:
                    82:6b:8c:4c:b9:2b:d2:52:5c:ee:fd:03:47:7e:a4:
                    f2:1e:ce:7e:28:40:31:ae:82:0f:e9:d4:eb:06:05:
                    e3:22:c2:55:6a:b3:fe:c1:17:5d:6d:b7:88:b4:d2:
                    43:da:fb:f9:07:60:6c:c0:4a:e7:c6:f3:3c:f3:07:
                    a2:29:1a:2b:22:eb:1e:1d:96:47:20:ac:8a:4e:1e:
                    42:82:a2:87:f6:c2:aa:f1:db:9f:72:2f:a8:7b:c1:
                    5d:ca:f9:5b:c9:9c:ba:b0:2a:7e:b4:a5:ef:34:bf:
                    09:7a:5b:d9:ab:8d:7c:8a:7b:b5:3d:05:84:32:f2:
                    ed:2e:a5:de:8c:7a:66:fb:4d:06:78:57:e6:bf:c0:
                    38:b6:e5:4f:2e:0f:7d:89:25:48:69:d2:3b:de:91:
                    20:a6:df:22:80:0f:69:45:98:79:fb:a9:ff:13:3d:
                    83:fb:30:08:7b:c9:e9:4f:05:00:ae:9b:32:da:bc:
                    f4:21:28:02:23:8c:5e:48:12:15:41:90:94:23:64:
                    7d:11:69:d9:c1:ad:24:81:3c:a7:97:ed:05:bb:aa:
                    19:ca:a5:d5:6f:cf:11:8b:ee:25:9e:aa:1c:88:5d:
                    58:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9E:EB:74:7F:39:E3:B3:10:1D:BD:F6:8E:8B:A1:76:9F:53:52:B2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ffea096-134e-4a4c-ab88-d5d21b886b3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.178.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b9:40:70:4a:d3:3e:92:77:8e:18:6d:d3:8f:43:1f:87:8c:13:
         56:4d:83:88:e9:df:b6:bb:b3:34:15:43:f7:3d:b8:65:4f:a7:
         8e:ce:17:91:e9:fa:2f:98:d5:c5:5b:6e:35:7c:cd:f7:b7:4a:
         19:1a:b9:69:2b:80:42:7e:6a:5e:ab:07:fa:11:12:51:30:81:
         7a:1f:6b:8b:e7:c9:c7:a5:50:c8:7d:e7:91:33:9d:aa:45:89:
         2a:00:9e:64:94:27:4c:f2:0f:74:35:d5:ce:bc:3e:e5:a3:23:
         93:14:0e:f2:3f:2a:97:03:de:79:c0:d5:30:dc:09:30:26:5d:
         ef:70:83:93:e9:bd:1f:43:3f:86:8e:46:50:b4:99:c5:b7:81:
         8f:be:9e:ca:4a:82:7f:ad:30:71:1d:c7:a7:18:7d:14:cf:f7:
         73:d2:94:7a:71:69:51:9d:1f:54:1e:d6:11:5d:9e:78:87:0d:
         e3:48:fe:b1:b9:3c:e8:a2:49:f7:c0:97:5c:62:9a:b8:4d:6a:
         5a:f8:6c:91:f8:24:95:77:20:82:21:54:bf:4d:01:fc:97:67:
         f8:9c:72:7e:63:16:19:74:7b:3e:bb:f9:a8:18:0b:c6:15:2f:
         96:82:b7:7b:a8:9a:53:8c:69:d8:8e:44:49:eb:3f:52:4a:3b:
         67:74:81:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----