Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb83b246-0a61-491e-ad32-31d7fc889bb2.roa
File:                     eb83b246-0a61-491e-ad32-31d7fc889bb2.roa (raw, json)
Hash identifier:          yKpOOI0uuMW+h0fqbEnJni1pQ5vIj4On3Y97WdW9PQw=
Subject key identifier:   81:E0:C5:0B:59:1A:FD:2F:4D:C3:A4:8B:A0:51:D9:22:BD:4F:30:2B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       527D2134560DC12AB83C1DB5EEE3C54A145CC226
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb83b246-0a61-491e-ad32-31d7fc889bb2.roa
Signing time:             Fri 17 Oct 2025 20:01:18 +0000
ROA not before:           Fri 17 Oct 2025 20:01:18 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        182.30.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:7d:21:34:56:0d:c1:2a:b8:3c:1d:b5:ee:e3:c5:4a:14:5c:c2:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 20:01:18 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=8a99da352f05cfa23343c08dd590d90f0c01791c23b3aaf52c4bba9ff69da3af, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:81:a0:2d:08:d6:f3:63:88:87:da:91:cb:68:
                    be:f9:05:0f:b4:52:12:e8:ad:2f:37:b6:de:e3:3d:
                    0f:60:0f:e9:01:4d:99:5d:3e:07:c5:20:44:66:af:
                    9d:c3:ec:13:1c:3b:45:cd:5f:90:6f:fa:c3:2e:f5:
                    4c:79:02:fc:a9:15:59:d6:73:49:39:df:2c:85:8d:
                    77:60:a3:ea:cc:0a:de:4a:16:a5:9e:42:c6:71:84:
                    ca:7e:86:b2:43:74:4e:fc:30:ab:0f:98:88:ec:b2:
                    92:24:4c:14:6a:6b:1f:84:2b:0e:e1:6e:39:34:52:
                    e2:7c:2e:96:c2:87:71:a4:4f:eb:5c:68:e4:fa:83:
                    87:b5:2f:e9:51:46:f5:90:7b:2a:7b:ef:77:65:15:
                    af:e7:b1:27:25:88:8c:38:36:d2:6a:79:b3:6e:9f:
                    1e:bd:81:d3:6a:5c:39:96:b1:63:22:1e:ac:e1:b3:
                    70:f0:33:93:00:d7:59:08:15:86:ac:2e:23:ec:49:
                    5c:3b:8c:89:b4:0d:21:40:b9:30:83:65:35:53:11:
                    dc:27:9d:50:7d:f6:08:d4:52:61:3d:73:7f:33:44:
                    65:58:25:02:98:b5:20:2d:9d:ef:34:9f:8c:e8:55:
                    d9:76:c7:36:00:3c:20:14:49:5b:75:69:37:c6:10:
                    79:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E0:C5:0B:59:1A:FD:2F:4D:C3:A4:8B:A0:51:D9:22:BD:4F:30:2B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb83b246-0a61-491e-ad32-31d7fc889bb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.30.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         99:58:ef:b8:08:79:af:03:1c:1b:8c:3f:fc:d8:e7:aa:35:9b:
         b3:48:1f:91:54:ac:f2:da:40:b1:f5:2d:a4:d4:f5:65:5b:c2:
         c1:80:12:9b:6d:e7:3b:43:b5:e0:40:fb:28:b9:47:34:db:38:
         bb:35:18:16:57:5f:92:f5:b0:df:6a:38:49:54:7b:8c:52:72:
         e5:fb:20:42:00:1d:49:6d:e6:da:e9:d2:99:e7:d7:9e:03:ff:
         a5:57:b1:25:7f:fb:c8:11:a7:c2:2f:3a:f5:5a:03:46:3c:63:
         50:54:30:5f:1d:9c:57:93:73:bf:a7:03:c6:d6:8b:61:12:3f:
         65:31:05:bf:0e:d4:e7:52:c3:1f:66:fd:59:19:35:93:83:fc:
         59:44:c9:02:c4:8a:b8:02:46:fe:fc:2d:ab:f7:21:95:f8:6d:
         74:9f:2f:ec:f5:25:b8:7d:88:22:73:07:16:24:24:6f:e8:06:
         8a:db:b2:0d:b1:31:5c:07:68:6f:d8:04:1c:37:50:83:04:33:
         19:b8:ab:b1:d0:3d:d0:91:86:0b:cb:45:c0:8d:b4:fc:f4:d4:
         9b:21:0e:2c:a1:21:8e:37:52:ce:4b:db:06:d8:ac:ad:44:7e:
         6e:2b:51:fd:04:9c:eb:ad:b1:88:a3:aa:8e:9b:4d:05:12:21:
         74:fd:1c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----