Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3c97cba-7083-48f3-8280-ad90bc3bee59.roa
File:                     b3c97cba-7083-48f3-8280-ad90bc3bee59.roa (raw, json)
Hash identifier:          y7Sx1h8cQ/W+IEgbL+RLMOroHL0mLY+ANoZTFVluQwE=
Subject key identifier:   E8:25:E2:13:E6:53:80:A5:AA:8E:1C:59:94:97:EA:11:41:28:EA:B9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       45B3CBA82025AE6307EAD82C272B86F6916979E8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3c97cba-7083-48f3-8280-ad90bc3bee59.roa
Signing time:             Fri 03 Oct 2025 00:02:21 +0000
ROA not before:           Fri 03 Oct 2025 00:02:21 +0000
ROA not after:            Fri 07 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        192.10.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b3:cb:a8:20:25:ae:63:07:ea:d8:2c:27:2b:86:f6:91:69:79:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  3 00:02:21 2025 GMT
            Not After : Nov  7 23:59:59 2025 GMT
        Subject: serialNumber=acc2878034566d3919ce21b8e9a7e2f4aa507f250ed38e3f9dbb8a0e2216ece7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:07:52:5a:0e:23:a0:c2:a1:36:a0:6e:e8:7c:
                    e2:52:d6:b4:30:7a:78:95:ca:e8:e4:dc:cf:5b:24:
                    f4:d2:c0:e9:85:10:3c:75:aa:83:bc:4a:7c:72:c2:
                    84:eb:db:b7:57:9f:41:dd:33:f8:d1:06:03:58:90:
                    80:a2:02:96:18:52:a4:22:ac:c1:28:34:6b:9b:68:
                    f2:26:20:97:3e:f1:e0:98:3c:16:c0:d5:48:fb:25:
                    b0:90:16:78:0d:75:d6:02:47:0e:4d:34:72:a6:3a:
                    92:fe:0c:3a:b3:92:5c:ce:53:97:d6:64:40:9d:d7:
                    fe:1e:63:8f:e5:1e:14:e3:04:d6:13:f8:0a:24:e2:
                    c4:4a:e0:05:2e:50:91:4f:eb:60:19:66:ee:34:dd:
                    11:23:3d:5b:4b:f9:27:cf:60:32:11:ca:10:0a:9d:
                    f9:ee:5d:7b:e1:d1:1d:32:fb:4a:55:98:ff:10:36:
                    6e:59:86:36:ae:b4:c7:86:34:82:12:9f:c6:ab:6c:
                    cf:7f:ce:3a:de:99:7d:ff:e9:06:01:21:91:72:94:
                    f4:0a:aa:7e:b2:80:8d:65:c8:a0:7b:f5:27:b3:b0:
                    9d:cd:19:54:18:b6:82:13:ff:67:08:a1:6c:da:30:
                    e7:17:f8:29:c3:2a:2f:ec:8a:c4:1c:1f:27:33:d6:
                    9b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:25:E2:13:E6:53:80:A5:AA:8E:1C:59:94:97:EA:11:41:28:EA:B9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3c97cba-7083-48f3-8280-ad90bc3bee59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.10.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         34:c2:f9:aa:6c:29:1a:a5:35:54:70:5a:f2:07:d1:e3:25:ba:
         56:02:c8:2f:e2:28:e9:26:5e:42:7a:b1:13:40:b7:32:9f:e1:
         65:67:86:5d:82:32:2c:49:c1:8d:6d:e3:c3:50:b4:23:e0:e8:
         84:2a:46:4f:ec:16:b9:28:85:97:ca:d2:82:1e:3c:27:67:c6:
         de:7f:de:82:0e:61:a3:6d:97:37:de:d0:04:94:f6:7b:cb:68:
         08:ca:f8:92:ee:1f:dc:68:63:61:92:2e:0f:a6:b1:50:bf:00:
         5e:3a:2c:76:cf:41:00:e1:74:18:87:b9:cd:4a:d3:0f:58:f5:
         72:75:c3:ff:31:82:b7:ad:14:76:c3:ec:ee:cd:80:27:09:9b:
         30:8c:d0:7d:11:ed:87:0e:db:34:81:6e:28:64:88:c6:78:f0:
         72:f6:3b:f3:bd:43:52:0d:22:b7:a7:f0:b3:86:a8:7d:8c:76:
         b0:67:e8:b5:91:8d:6f:e3:f0:c9:88:6d:e8:64:57:59:20:6b:
         86:b9:8f:b8:da:f1:17:62:8d:07:94:e5:83:de:6a:19:02:d4:
         c9:52:a9:8f:79:74:ab:2e:a9:b8:93:17:ae:e8:c4:cb:35:94:
         50:d4:ea:eb:54:c7:57:aa:68:31:ea:e7:d6:fc:f2:2e:7e:c9:
         90:2f:df:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----