Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb0b7d83-ba63-418d-9ba0-0081273c74ff.roa
File:                     fb0b7d83-ba63-418d-9ba0-0081273c74ff.roa (raw, json)
Hash identifier:          F3/wbShNAFUaY07EWFLoMPA6bT24mbdTD5F9voBQl3w=
Subject key identifier:   6C:F8:5B:AD:E5:95:F4:5A:A2:1A:E9:1C:C8:16:12:7F:AC:63:35:EE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4B6AB5BB8514D217758656F9ADDEC7A2D4BDA338
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb0b7d83-ba63-418d-9ba0-0081273c74ff.roa
Signing time:             Sun 19 Oct 2025 03:11:39 +0000
ROA not before:           Sun 19 Oct 2025 03:11:39 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        170.221.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6a:b5:bb:85:14:d2:17:75:86:56:f9:ad:de:c7:a2:d4:bd:a3:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 03:11:39 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=81fbbe7d98764b20be7c7f9e7a5433ec0eb76fbf0c830653bbf9546b02f99122, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:03:58:a0:06:28:31:ba:86:c1:53:0e:8d:f2:
                    51:16:c7:7f:9b:f1:47:79:cc:43:c9:d1:35:de:00:
                    55:35:e2:1c:16:65:0e:5f:03:51:36:74:f4:3e:44:
                    81:a8:14:53:36:f9:96:3b:e9:a4:d7:8a:40:b2:6d:
                    97:51:50:a7:a3:23:36:3a:4e:4e:81:c3:38:dc:50:
                    83:2e:43:14:f8:a7:9c:5c:2f:98:10:65:61:08:91:
                    d0:5c:83:f7:79:22:55:21:60:38:53:2b:77:e3:68:
                    80:c3:4e:87:80:d0:01:22:e3:88:38:db:0c:f5:53:
                    be:a2:96:74:20:d9:5a:6a:64:2c:12:5e:63:8b:8f:
                    fc:c1:45:92:45:dd:9c:d5:65:5e:03:56:2b:53:1c:
                    65:d3:fd:85:52:c0:bd:88:20:20:04:b0:83:b0:51:
                    b6:78:ca:37:1a:5d:1c:fb:25:02:f1:67:53:ca:a4:
                    4b:23:23:8e:0a:cf:e0:44:23:af:b0:f0:9e:fe:15:
                    aa:86:1f:25:23:0f:c2:56:d8:57:05:ae:05:02:bb:
                    4a:07:65:68:66:d1:4a:cd:ae:88:b3:84:f9:08:54:
                    73:7e:2c:39:f6:ca:7a:c5:41:53:cd:55:bd:22:a0:
                    7f:65:64:b2:c3:ef:24:83:2f:cb:4f:04:c0:e0:6d:
                    26:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F8:5B:AD:E5:95:F4:5A:A2:1A:E9:1C:C8:16:12:7F:AC:63:35:EE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb0b7d83-ba63-418d-9ba0-0081273c74ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.221.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ae:43:81:56:78:a7:30:ed:d6:27:af:43:7f:51:c2:56:a6:ff:
         62:2d:ec:5c:39:a6:d5:c1:2e:c8:aa:a2:c6:2d:27:0d:e4:74:
         e0:a4:69:1a:19:5d:2c:13:6a:ef:be:23:c9:1c:1a:0d:6b:06:
         d4:5f:b3:d2:8a:eb:ea:c9:ba:d2:07:6f:4c:bf:7f:30:b0:c8:
         8b:e2:4f:b0:c8:c0:9a:29:71:81:f4:72:a8:a0:44:28:30:9c:
         0b:0f:4c:6f:ca:b2:d9:1f:a8:fe:05:a4:0e:9e:0e:d9:43:f0:
         76:ec:f0:80:ab:d8:f1:d5:39:af:7d:49:a9:9b:28:5f:39:44:
         72:fb:80:f3:f6:58:72:6a:c0:28:6c:56:02:cc:f1:49:33:f4:
         ea:d8:5d:5f:2b:dd:d9:6b:74:c4:94:55:6e:33:dd:5b:63:09:
         20:61:83:2f:22:4c:02:86:0b:25:6b:ba:b5:38:a6:fa:d4:42:
         61:2a:56:66:1e:a4:e9:dc:7f:c6:42:35:69:8b:2e:f9:5b:66:
         b8:23:64:29:85:28:ad:02:ea:3b:5a:22:37:c2:25:84:09:fe:
         65:c8:81:f2:3a:b8:78:40:48:b5:c4:cb:17:63:7d:de:87:fa:
         4f:b7:50:1d:b2:f4:3d:6d:6a:dc:6f:55:cf:de:65:73:bd:fb:
         1d:33:33:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----