Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a9e0461-1eac-46f7-a3a8-d886a8271805.roa
File:                     7a9e0461-1eac-46f7-a3a8-d886a8271805.roa (raw, json)
Hash identifier:          kIygXClWZlDnYZpfs+g1RICaXlwaAOfA241PjpPMKgk=
Subject key identifier:   14:56:C2:07:38:4B:8E:65:6B:A9:5B:F9:37:EC:DD:84:82:EB:57:31
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       120F89D17ADE2151B86292A4101077BE75B0DAD1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a9e0461-1eac-46f7-a3a8-d886a8271805.roa
Signing time:             Mon 06 Oct 2025 15:21:59 +0000
ROA not before:           Mon 06 Oct 2025 15:21:59 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.144.88.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:0f:89:d1:7a:de:21:51:b8:62:92:a4:10:10:77:be:75:b0:da:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 15:21:59 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=c91becc3df2f181be3bf1bb97325a32c36bbf0dbc45abc6dcbbc30ec3241790b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:36:b5:8e:c7:05:53:3c:ea:a7:86:c3:f7:13:
                    03:4b:82:d1:08:52:c0:14:9d:a0:57:5d:51:ed:29:
                    d4:53:d2:9b:51:8a:6f:66:96:76:49:b9:32:08:a5:
                    d8:9c:09:3d:aa:c1:df:6d:6b:36:97:5d:ee:68:39:
                    98:5a:90:20:cd:25:a5:7e:90:90:55:f1:e7:3e:65:
                    1c:47:d5:74:ef:e3:c0:dd:24:ad:9d:f1:0e:4e:70:
                    44:60:38:89:ca:53:f4:ca:83:d5:ec:4b:8f:be:d0:
                    49:36:b0:e7:9f:7f:96:4b:f4:af:69:fe:ea:31:26:
                    cb:9f:8f:ba:3a:8a:73:de:4b:ae:ea:d1:e9:f7:aa:
                    07:69:7c:42:ae:50:b9:c0:6b:20:6f:88:66:b3:d9:
                    61:6c:1b:aa:27:8e:81:b6:d1:2a:cf:88:25:b4:dc:
                    af:2d:bc:4a:e0:35:e4:fb:8f:97:16:09:c5:26:04:
                    2f:f3:8d:0e:52:30:5b:76:79:50:aa:f5:49:ab:9e:
                    1c:68:ea:29:27:b0:2b:27:b8:43:09:37:27:be:9f:
                    53:41:91:de:ba:9a:6f:a2:0d:6c:70:7e:ba:33:a0:
                    4c:b4:9d:9c:50:1b:65:c9:89:b5:dc:35:75:ab:65:
                    2e:3c:fd:94:40:de:fa:78:22:d3:67:db:46:01:3a:
                    50:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:56:C2:07:38:4B:8E:65:6B:A9:5B:F9:37:EC:DD:84:82:EB:57:31
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a9e0461-1eac-46f7-a3a8-d886a8271805.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.144.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         08:94:98:4e:72:25:21:ed:7f:5f:8c:e5:66:13:45:63:5d:ad:
         94:3b:14:dc:ac:1b:c4:56:49:b0:2a:f3:7f:9a:d7:67:d5:6c:
         14:ae:2a:13:7b:3c:52:d0:3c:47:d3:d6:78:3f:51:03:63:96:
         ab:50:b7:cd:ef:70:e9:17:7d:b2:2f:1f:45:75:f8:ef:45:f2:
         20:52:66:7a:ce:07:18:39:11:76:51:d0:88:fe:56:07:97:b5:
         de:c1:55:5a:49:a5:38:e2:69:70:7e:bd:cc:56:bc:a1:13:82:
         80:88:2b:d5:04:e9:f9:56:5d:54:06:37:80:aa:b2:fb:4a:b3:
         23:67:c8:d9:f1:1b:dc:1f:14:b7:96:92:52:7e:b0:5c:b6:9e:
         bb:9b:20:34:97:44:ea:8f:69:72:d5:42:3e:a8:61:e4:e8:43:
         f9:72:26:1c:e1:81:3b:db:8f:da:b8:94:86:94:48:f2:b2:75:
         a1:00:3c:7a:eb:24:af:92:bd:b1:7f:0e:e1:72:a0:38:d4:84:
         ee:2c:98:a5:75:f2:fa:b9:9f:f3:17:e5:b8:10:19:47:a7:9b:
         8e:4a:10:0e:8d:a6:1c:2a:cb:0d:96:0c:d5:7a:97:d4:5c:91:
         63:09:78:bb:d7:22:a0:00:d9:05:a4:38:0f:1a:28:ec:a4:13:
         74:1a:a3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----