Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aae2d162-8718-4e30-8f4a-57332cb846c6.roa
File:                     aae2d162-8718-4e30-8f4a-57332cb846c6.roa (raw, json)
Hash identifier:          19NmMH14XCtIf0/fTmIgyn6QODOFhWs8ZpgKv0DbqM0=
Subject key identifier:   20:53:5E:F9:CF:E5:28:83:AA:D6:7A:D1:24:B1:C3:EF:FC:88:A4:3F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       514C38BBC94A45863EC2EB7B15F865A15FD9AC75
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aae2d162-8718-4e30-8f4a-57332cb846c6.roa
Signing time:             Fri 26 Sep 2025 00:40:23 +0000
ROA not before:           Fri 26 Sep 2025 00:40:23 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        45.57.160.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:4c:38:bb:c9:4a:45:86:3e:c2:eb:7b:15:f8:65:a1:5f:d9:ac:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 26 00:40:23 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=4c111de16fc889cd25973e3f54336f1d5128029451f729ce1b3f1836191c961e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e2:ed:0f:e1:18:bf:9d:67:84:a9:99:48:9e:
                    09:22:22:18:c9:28:02:c5:df:b1:05:a6:28:d3:6c:
                    3b:ca:2c:3e:67:f6:a1:1e:91:08:86:10:12:4a:0b:
                    78:a1:4e:e8:65:8e:ce:46:c6:b4:3b:a8:aa:cd:a5:
                    1c:45:c9:f0:2a:da:16:d9:b1:02:67:69:96:3e:82:
                    21:09:09:f1:eb:8c:c0:85:cb:79:ff:bb:40:01:df:
                    99:8c:3b:6e:bb:bc:bf:22:07:70:71:b5:62:76:dd:
                    de:65:a3:b2:fa:5e:45:26:3b:96:e2:32:4b:a3:d8:
                    64:ae:f7:3f:11:6e:b2:cb:01:60:58:a9:51:4d:13:
                    78:51:1a:82:9e:0a:d5:04:59:f3:c3:42:d8:20:7f:
                    13:97:21:00:4c:35:15:fd:a6:7f:49:76:e8:8d:86:
                    6d:33:a9:f3:b2:f6:b3:78:36:8a:34:ce:7c:4b:26:
                    2a:a9:3d:d4:02:56:a2:7e:21:44:e4:ce:5f:7e:56:
                    9a:17:c1:82:6e:23:8a:fc:1f:59:06:98:59:4a:99:
                    8e:54:42:6e:af:22:f0:3e:bc:64:7a:5c:c8:d6:5f:
                    1a:25:64:92:d4:3b:e9:7b:19:44:29:74:e6:d6:b3:
                    c7:e8:a9:97:c5:f1:e6:2b:7a:59:1a:a8:cb:37:d5:
                    c3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:53:5E:F9:CF:E5:28:83:AA:D6:7A:D1:24:B1:C3:EF:FC:88:A4:3F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aae2d162-8718-4e30-8f4a-57332cb846c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.57.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ad:8d:6f:01:f1:89:30:d0:e4:ce:c9:3b:8d:7b:c1:b5:ec:be:
         a5:7a:7e:e4:62:25:8d:6d:20:40:60:b3:dc:df:31:be:0a:67:
         34:42:aa:89:27:18:b8:b5:ad:b7:fb:83:e2:48:ea:6f:08:04:
         c9:0a:b2:b3:9e:06:69:41:17:eb:be:c4:bc:28:4d:ea:f5:60:
         62:19:32:6a:20:38:7d:ea:54:76:5d:97:af:3a:89:10:47:f7:
         03:8c:c9:98:3c:9e:45:87:a8:da:56:4f:15:dc:e7:5d:68:0c:
         40:97:dd:d5:a2:ca:34:19:ed:08:7d:9c:0f:02:e3:1e:c2:06:
         0f:38:f9:89:65:c3:1a:d5:ef:48:08:26:86:fe:11:ff:67:99:
         02:d5:24:12:eb:d4:da:0e:92:cc:bf:25:7b:0e:f6:41:73:77:
         91:ae:a6:e2:ec:eb:30:16:95:8b:84:bc:d5:a9:ce:a9:b6:1c:
         ed:cb:16:64:2e:38:8d:c7:66:db:39:0a:2b:52:5e:34:01:e4:
         da:93:cb:6b:c5:0a:42:53:fe:89:96:e9:76:d6:49:24:21:2f:
         1a:6a:15:a8:22:6f:91:bf:a7:1c:57:82:13:92:03:b2:81:08:
         45:0f:84:50:e6:9a:1b:9a:cf:0a:15:f8:e5:02:81:39:16:ef:
         77:c8:bb:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----