Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1319bff-f900-43dc-b7cc-7a35184b65a5.roa
File:                     f1319bff-f900-43dc-b7cc-7a35184b65a5.roa (raw, json)
Hash identifier:          wEsXJalDmN57jDLocVZym87qvf11Ah7YyrwsCsqw/mU=
Subject key identifier:   3B:CE:FE:E9:24:39:C1:D2:76:E7:A4:C5:31:9D:F8:51:C7:B3:B0:14
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       03FFD4B6A135A80C584D18C66A0516B387F272BA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1319bff-f900-43dc-b7cc-7a35184b65a5.roa
Signing time:             Mon 06 Oct 2025 15:40:47 +0000
ROA not before:           Mon 06 Oct 2025 15:40:47 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.162.64.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ff:d4:b6:a1:35:a8:0c:58:4d:18:c6:6a:05:16:b3:87:f2:72:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 15:40:47 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=759df1796189dd2bf6717514f5c5422d07d7c8ea8a9fa25b25730aed984fc34b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cf:d3:17:c7:e0:80:b4:c0:ba:c6:a5:d8:88:
                    44:22:cd:8d:2f:36:cd:ab:d8:52:89:a3:02:5d:5a:
                    40:8c:da:10:8e:c8:52:f1:7a:81:86:7f:18:77:30:
                    1f:3b:08:e9:5f:1c:6a:73:ac:cf:dd:b6:cf:72:ae:
                    72:04:e5:d3:33:12:e4:c9:dd:2b:e9:67:69:60:a5:
                    86:bc:85:e0:b1:df:03:aa:b4:4b:83:9a:b6:74:bf:
                    d7:a0:a5:01:a9:93:94:a4:9e:e5:02:26:bd:27:02:
                    b6:06:c0:59:07:80:ac:f4:06:92:e2:11:65:59:c1:
                    95:ba:43:78:a6:48:77:fd:78:b8:5c:7c:0d:fe:be:
                    a6:2b:b6:0c:d8:88:7d:0f:1a:09:95:12:a0:e7:5e:
                    92:1a:eb:71:13:a7:a8:f8:1e:6e:06:da:ac:06:be:
                    3d:ab:b5:34:63:54:f5:cd:4f:6b:94:2b:dc:60:0c:
                    58:57:76:f5:c6:fe:15:e5:a4:09:14:0f:9b:f2:80:
                    a8:5b:a2:17:57:f1:76:08:5c:9a:a8:b2:c0:39:20:
                    6a:38:47:88:bd:bb:c5:d4:0e:69:5c:f8:e3:6c:56:
                    2d:b7:b3:ef:fc:a3:d2:a1:43:80:74:75:3c:db:62:
                    b2:d5:d2:43:70:0e:9d:9d:24:38:4a:c2:87:4f:96:
                    42:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:CE:FE:E9:24:39:C1:D2:76:E7:A4:C5:31:9D:F8:51:C7:B3:B0:14
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1319bff-f900-43dc-b7cc-7a35184b65a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.162.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d2:da:eb:58:fe:48:ec:f6:b4:e1:01:26:5f:3e:64:4f:1b:6f:
         35:0f:23:b3:0d:d1:ad:ce:a1:0f:09:0c:a4:56:df:07:8d:fd:
         9b:41:c3:50:d8:0b:3a:c5:95:68:3f:0b:ab:2e:b6:1e:49:aa:
         76:01:12:10:03:84:82:7d:01:2c:2c:6d:8f:ed:b7:a6:f9:a0:
         df:f9:1c:56:99:1e:02:99:d7:f3:29:b4:00:98:fe:5b:2c:32:
         0c:8a:eb:cc:5f:5b:78:ae:4c:a9:25:c8:e1:71:1d:75:9c:bb:
         a4:11:00:5f:be:e2:a8:37:ec:17:f9:aa:69:1d:ec:ef:9c:72:
         4c:de:0a:6e:0f:7d:ee:9e:fb:ae:f4:fd:ad:4b:4d:5b:0a:5c:
         7e:81:64:00:1b:37:70:7d:ed:05:c9:4e:b3:43:5a:ae:9a:52:
         f0:2d:a5:bb:1d:b4:62:2e:df:4c:73:44:02:3e:f8:81:ce:76:
         5a:3e:03:63:68:f7:7f:ef:95:6f:81:e7:1d:99:da:46:3d:f0:
         ed:5c:a8:84:c1:11:c3:1c:ec:6d:d3:a6:9a:97:18:00:a6:cc:
         36:b5:49:67:eb:ad:6f:40:ca:c0:38:c7:4f:3c:ad:14:31:7a:
         e3:a9:75:8b:f6:8a:91:18:74:85:af:0d:eb:c6:a8:b0:67:06:
         b5:b0:5c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----