Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83436f15-9744-44ae-bab9-2563f6c055aa.roa
File:                     83436f15-9744-44ae-bab9-2563f6c055aa.roa (raw, json)
Hash identifier:          XfgRk6Qj4NkCX3MPefsn+n+/aWKzd/vcQ9BY+anDBN4=
Subject key identifier:   92:3D:89:29:9C:A9:32:32:BD:10:85:6D:C8:24:0E:A6:8A:D5:12:CD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       081669D7C53FB8F735A797B860999A3C32E0569B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83436f15-9744-44ae-bab9-2563f6c055aa.roa
Signing time:             Sat 18 Oct 2025 00:20:54 +0000
ROA not before:           Sat 18 Oct 2025 00:20:54 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        204.123.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:16:69:d7:c5:3f:b8:f7:35:a7:97:b8:60:99:9a:3c:32:e0:56:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 00:20:54 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=a775349a1caf3c702cb3b816f72ab8da85ff6318323b621fdf364f376c442b9d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bc:b7:8c:9a:2a:ad:25:69:90:0d:0e:72:44:
                    b1:7b:93:96:ff:32:18:8f:d8:e0:2a:14:fc:12:95:
                    da:15:2a:40:6b:f5:57:f6:36:4f:32:05:ca:e4:ba:
                    c5:92:83:85:6a:2e:71:a1:92:04:53:5d:7a:c6:be:
                    ed:ab:e7:77:3d:f7:cd:05:57:dc:c8:d2:58:1c:af:
                    15:67:59:b7:15:fb:77:1d:0a:da:3a:df:5e:90:b3:
                    4b:3a:3e:1c:99:1c:16:52:69:46:b5:39:36:c0:eb:
                    3b:f9:ef:69:ab:07:3f:82:70:78:59:e1:f0:f9:51:
                    72:4d:f8:d4:2e:47:00:47:df:92:e6:d4:dd:cb:3d:
                    54:74:08:59:b7:c2:3a:34:9b:bb:71:49:f1:35:f2:
                    ec:62:7d:aa:c6:2e:bc:39:d6:d1:12:46:ea:fd:c5:
                    03:48:fb:ab:17:d5:38:a5:5b:5e:7c:bb:00:cd:44:
                    57:2e:76:ad:b7:c4:3d:05:b5:14:27:91:5b:c3:ef:
                    30:b2:07:d9:fc:48:7a:90:c4:33:73:7b:7e:0b:36:
                    2f:11:26:ca:76:0e:4b:d8:89:42:c3:71:e4:8e:de:
                    2d:76:f7:fc:bc:b2:99:ab:48:d0:6d:6c:0e:b8:e0:
                    35:7b:d5:44:f4:8e:66:1c:ca:c4:72:f3:26:22:f8:
                    52:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3D:89:29:9C:A9:32:32:BD:10:85:6D:C8:24:0E:A6:8A:D5:12:CD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83436f15-9744-44ae-bab9-2563f6c055aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.123.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a1:9c:be:74:c3:fd:cf:fb:4d:c3:3a:7c:b0:91:4e:8c:4e:99:
         c1:c3:a6:36:ab:eb:2b:85:c1:0d:57:32:bc:8a:b6:b2:b7:3a:
         83:04:59:39:2f:11:7e:74:c3:a0:7d:60:b9:11:4e:10:d2:c3:
         c2:ee:2e:62:4d:f4:62:81:ec:b3:25:0c:17:1c:ff:01:e3:82:
         aa:dd:b2:e1:d3:1c:b3:69:a9:6e:6a:a4:31:35:e5:cf:02:34:
         61:ac:92:2e:34:38:0c:71:b0:55:cc:19:dc:fb:a3:ab:e5:94:
         b5:f9:52:9a:66:c8:ac:34:2d:81:ac:5b:45:bb:98:74:2a:e3:
         31:fe:4e:39:d4:df:b7:70:ac:c6:e5:a3:5b:d5:ac:60:6e:11:
         cb:83:c4:ba:7f:bf:9b:fe:20:ad:27:79:d5:dc:26:0a:1c:e6:
         e3:35:f0:ee:70:9d:ae:12:80:50:0b:1a:74:34:91:77:7e:7d:
         6a:6b:e6:46:92:77:84:4f:97:2b:b8:c7:46:60:c8:6a:23:08:
         6c:e0:ee:01:6c:8d:81:35:6c:a8:ed:ee:f4:a0:02:48:74:3e:
         a1:4b:b4:a1:b2:e0:c0:4f:2e:8f:cd:f4:a2:58:d5:a6:cc:de:
         1d:ed:49:48:40:de:82:34:0f:ca:eb:bb:a6:39:5a:d7:0b:be:
         a7:e8:f1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----