Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e78c606-f2f1-41f5-b3eb-b5b1035697f6.roa
File:                     9e78c606-f2f1-41f5-b3eb-b5b1035697f6.roa (raw, json)
Hash identifier:          rxBn71vz+/q+gzEqIXV3Pb0BBVFNcWxIC4nEzGhW4xM=
Subject key identifier:   A0:F6:E0:87:2B:16:46:A2:41:56:E3:56:5E:26:97:19:DC:2B:FB:45
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0B0BD0ED4058492E87024539AE0060472C5DAFC3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e78c606-f2f1-41f5-b3eb-b5b1035697f6.roa
Signing time:             Tue 30 Sep 2025 00:21:08 +0000
ROA not before:           Tue 30 Sep 2025 00:21:08 +0000
ROA not after:            Tue 04 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        168.241.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:0b:d0:ed:40:58:49:2e:87:02:45:39:ae:00:60:47:2c:5d:af:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 30 00:21:08 2025 GMT
            Not After : Nov  4 23:59:59 2025 GMT
        Subject: serialNumber=800f26246f90f5d6ae982dec88f5f54be2a7a02376a8115cb25163b68b820440, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b4:00:82:76:c5:11:c3:b6:60:cc:77:1b:25:
                    87:0d:6b:b5:dc:cb:f0:0d:2a:fc:da:56:0f:bf:ec:
                    17:a5:2a:f9:ca:7b:e9:0e:ad:42:85:ec:3a:41:c5:
                    6f:e1:97:8c:2a:8b:93:b7:14:50:cd:be:ce:e1:54:
                    4b:91:87:fc:52:64:98:f2:16:7e:05:7c:be:bb:2c:
                    bc:65:ad:ae:ef:0e:e0:0a:b7:c5:51:5a:12:6c:1d:
                    5e:b9:94:b1:a1:79:77:aa:2e:8b:a5:53:63:e0:53:
                    be:fd:9d:7b:64:23:c0:40:8f:6e:9b:25:2e:3d:2a:
                    7e:28:e5:7c:e4:eb:c3:2a:0a:6e:49:4a:3d:03:3c:
                    09:0d:ee:90:6c:82:03:57:5b:be:82:ba:09:fc:c2:
                    d9:6c:b0:ad:be:46:fc:07:85:e5:46:5a:0f:0a:4d:
                    e4:1d:2b:8b:a1:4c:f9:ad:28:cf:a5:aa:e9:d1:1e:
                    f8:ef:7c:f1:fb:3b:58:50:43:96:07:25:67:aa:b5:
                    6d:4e:0d:d6:53:7c:b3:a7:23:ee:65:87:ab:84:3a:
                    c9:83:1c:34:39:fa:e9:5e:a9:92:77:e1:bb:2b:ff:
                    70:aa:07:bb:86:fb:9c:de:c9:ed:11:be:28:65:6b:
                    39:bd:19:82:a5:76:e0:78:48:13:ed:9a:af:d9:24:
                    9e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F6:E0:87:2B:16:46:A2:41:56:E3:56:5E:26:97:19:DC:2B:FB:45
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e78c606-f2f1-41f5-b3eb-b5b1035697f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.241.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c6:f3:04:38:b2:8b:da:26:2c:16:8a:45:6a:6f:51:38:c8:91:
         05:36:0c:91:27:9f:1b:ef:41:c7:03:e8:dd:36:b0:42:61:87:
         24:a3:b8:df:cd:7b:eb:08:bc:6f:77:dd:9b:d8:5c:29:b1:fc:
         0e:6c:1f:67:a4:a9:e9:d1:82:16:64:df:a8:32:33:31:bd:8b:
         30:ca:9a:ff:a6:cf:73:3c:b5:aa:c9:59:f4:31:73:17:90:a4:
         43:ce:0a:0c:72:1a:96:27:45:f3:dd:9d:13:be:7a:d3:ef:bb:
         39:e3:dd:86:bd:e4:82:6a:a7:7e:52:86:61:52:da:61:f1:f7:
         8d:ec:c7:26:1b:4c:cc:df:2c:56:25:61:e2:08:44:b1:3d:97:
         48:40:a6:2e:d6:0a:88:5c:db:22:8a:9a:92:fd:04:23:0e:40:
         1a:a7:fd:83:83:49:de:41:58:24:07:62:ef:b2:9a:a6:0b:fe:
         e9:9f:b2:a4:04:08:df:41:9a:af:c0:4a:39:ce:1d:ad:f1:f1:
         74:ca:5e:f6:39:44:33:ba:ab:ad:26:47:ae:7f:9f:76:04:0c:
         34:91:f0:25:b5:ad:af:cf:af:f9:f5:57:06:fe:ce:0c:c7:40:
         3c:7e:be:df:f7:80:d3:2f:5d:15:63:cd:59:4c:d7:90:31:c3:
         bc:9f:3c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----