Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/984a59d5-e044-49ef-ae66-4b6be4d4d9cb.roa
File:                     984a59d5-e044-49ef-ae66-4b6be4d4d9cb.roa (raw, json)
Hash identifier:          TVGJzdAQ8QqZmXxLM4iW6f6tVdM/EiDXj8S8UJsDIl0=
Subject key identifier:   1D:8B:34:8F:59:DE:2D:8D:67:FB:EA:2A:60:EB:CC:14:74:7E:16:3F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       612B2AFAFCD2CDD3B8EB2A9FE61CE0C223A1DD05
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/984a59d5-e044-49ef-ae66-4b6be4d4d9cb.roa
Signing time:             Mon 29 Sep 2025 15:02:03 +0000
ROA not before:           Mon 29 Sep 2025 15:02:03 +0000
ROA not after:            Mon 03 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        129.235.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:2b:2a:fa:fc:d2:cd:d3:b8:eb:2a:9f:e6:1c:e0:c2:23:a1:dd:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 29 15:02:03 2025 GMT
            Not After : Nov  3 23:59:59 2025 GMT
        Subject: serialNumber=38c56a2341f9fdb54e5c8bdcd40691dd94df6f952f2ca4b1bca739c28d16bfc2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b2:db:94:ab:59:ad:06:f3:8a:93:94:91:02:
                    ca:4d:da:a2:e8:ca:3e:19:e1:66:bc:72:8c:29:33:
                    aa:27:6d:e9:ca:11:71:99:01:23:99:70:ee:ac:61:
                    3a:08:62:68:ba:40:f3:c0:75:dd:42:53:6f:66:c2:
                    fe:b3:b8:15:df:50:52:bc:92:3c:f2:6b:f2:3f:f9:
                    69:5a:d0:c3:22:a2:f9:61:eb:a2:bb:50:f3:df:9b:
                    49:aa:5e:2a:6b:85:8e:a0:b0:c1:81:7d:fc:59:b8:
                    cc:5a:dd:62:44:59:3d:d8:c0:3c:6b:69:b5:5c:a1:
                    07:8e:07:7c:68:0e:63:ba:79:51:e2:dd:73:25:7a:
                    3e:9e:80:3d:59:f4:32:3b:09:42:f0:18:98:72:b1:
                    81:bd:d5:7e:00:7b:fe:c7:f8:55:9a:78:55:db:e0:
                    19:63:a4:36:2f:30:20:06:14:6f:d8:77:0c:52:0a:
                    68:ed:6d:78:25:bf:cb:6a:25:0a:c1:26:74:5d:d1:
                    ec:07:75:94:7b:d6:e6:8f:f2:da:8d:88:5b:68:41:
                    ab:a5:f8:ac:ed:b8:70:af:c8:a0:9b:67:16:4e:65:
                    58:5a:39:c9:29:8a:08:17:a7:62:83:66:d4:45:9c:
                    9b:ee:fe:8d:32:76:b2:93:5f:58:6c:d7:24:20:93:
                    5a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:8B:34:8F:59:DE:2D:8D:67:FB:EA:2A:60:EB:CC:14:74:7E:16:3F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/984a59d5-e044-49ef-ae66-4b6be4d4d9cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.235.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c4:e2:2a:0e:a9:fc:81:ac:34:ae:36:01:a0:62:c6:7b:ed:43:
         bb:21:bd:0f:75:21:ab:5a:3d:3b:4e:32:00:8e:c7:a7:dc:0e:
         5e:c1:ed:46:cb:b0:ee:09:3b:48:d8:99:68:e5:fd:cb:eb:c2:
         38:1a:d9:eb:bf:29:57:b1:77:25:f5:d9:ea:5d:c1:a7:66:14:
         0b:53:e3:dd:74:91:80:a1:cb:3d:a8:ce:b5:47:34:cc:b1:f1:
         7c:e9:0c:ae:ec:57:03:49:11:48:ae:70:78:5d:c9:40:e5:86:
         ae:36:fb:a5:85:b9:a1:ab:df:f7:36:35:a1:cf:92:74:8d:79:
         5b:80:e8:9b:7f:d1:07:07:3d:76:0e:07:d4:27:e0:a5:d9:bc:
         67:86:90:7c:c5:f0:15:7c:c4:21:64:94:84:8e:37:2c:91:b9:
         0e:95:24:de:17:e6:c9:ab:74:e9:eb:d0:24:be:80:09:15:48:
         d5:ce:f8:a2:18:b0:3e:85:d3:bc:79:ae:29:2e:e8:36:68:c8:
         3f:cd:a0:62:a7:6b:57:71:d2:26:f9:3a:44:e4:7c:7c:3c:d6:
         7a:4d:51:33:f2:78:36:83:a5:00:89:2b:8c:f6:2b:52:a4:ec:
         8f:dc:40:a7:6a:f2:a6:69:e1:e3:88:d8:b6:12:33:e7:84:61:
         0d:69:0f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----