Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff28ff32-8589-40e1-8f07-cacdbffd05b8.roa
File:                     ff28ff32-8589-40e1-8f07-cacdbffd05b8.roa (raw, json)
Hash identifier:          L5ZGARCWsyDR3cTGHidGc3lMTvghaSZGdwdDmsWp6aQ=
Subject key identifier:   BD:A1:69:14:D4:59:E9:49:E2:2F:A9:84:65:19:AC:BF:0B:75:0D:5E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0D6104125D63B75A655A84937DE4947D0FA624A0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff28ff32-8589-40e1-8f07-cacdbffd05b8.roa
Signing time:             Wed 08 Oct 2025 00:01:17 +0000
ROA not before:           Wed 08 Oct 2025 00:01:17 +0000
ROA not after:            Wed 12 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        159.20.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:61:04:12:5d:63:b7:5a:65:5a:84:93:7d:e4:94:7d:0f:a6:24:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  8 00:01:17 2025 GMT
            Not After : Nov 12 23:59:59 2025 GMT
        Subject: serialNumber=8ac5d9554cfc508a4b23e9f6ea37a992ad61dc20a9c914a9426f79364abb433f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:63:25:2e:90:d9:4d:ca:40:c8:51:6e:43:f4:
                    48:d3:71:42:b6:8a:36:7f:73:77:af:ef:fe:08:b1:
                    40:6a:dc:89:7a:b9:1a:53:d7:5b:f1:a9:ac:16:2c:
                    07:92:00:c0:33:64:93:a4:d1:14:5a:80:ab:08:f1:
                    80:0b:81:24:66:76:b6:13:fb:91:29:0e:ab:de:23:
                    f2:06:87:d3:60:e5:fa:86:0a:71:19:71:5e:88:1a:
                    05:e1:98:f1:cd:25:49:10:22:56:b2:7a:10:fa:e3:
                    f6:c5:04:5f:a9:48:8e:c3:47:50:45:f8:97:86:80:
                    2f:29:2a:06:b0:3f:d1:01:b0:08:41:4f:da:2e:6d:
                    2f:6d:88:00:80:2f:e3:d3:2d:7b:90:0c:25:20:30:
                    94:65:71:bf:12:7c:64:fd:fd:42:24:7c:29:f7:9a:
                    37:74:ae:f1:62:85:03:36:e6:52:77:dc:45:0f:82:
                    f9:12:48:3f:e4:bb:41:83:bf:16:28:47:9e:31:17:
                    e6:55:56:34:f1:18:76:11:ba:56:56:38:86:f1:f6:
                    4f:fe:72:8b:c6:78:4c:32:6b:e0:c5:cc:60:66:66:
                    c5:87:fd:be:c2:78:c8:d2:d8:b1:ea:54:7b:a1:00:
                    a6:49:21:44:04:1d:02:20:4a:8b:b4:ea:03:2f:e5:
                    94:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A1:69:14:D4:59:E9:49:E2:2F:A9:84:65:19:AC:BF:0B:75:0D:5E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff28ff32-8589-40e1-8f07-cacdbffd05b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.20.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a7:3b:a6:ed:af:02:3d:e2:c6:c5:e6:cc:f6:98:d5:7f:ea:f4:
         0d:f0:c2:cd:36:62:5e:22:dd:a4:ba:0b:3f:42:2c:0d:77:be:
         a2:04:5a:71:cc:1d:2d:d9:7f:04:43:b0:0f:fa:9d:a9:cd:cd:
         ca:77:60:e7:da:c0:b9:b4:27:ff:03:68:80:52:9b:54:5e:5a:
         7b:1a:3c:b6:ed:8f:ac:81:ea:7b:3d:d3:a5:c2:90:58:01:1d:
         32:f0:61:65:d8:3a:6c:3d:64:ea:80:ac:98:1c:a4:88:69:8b:
         fd:c9:13:13:ab:35:20:e5:0a:9d:17:14:8f:c7:02:04:64:d3:
         cb:d9:56:19:65:5c:72:ea:e9:25:3f:c4:79:70:3a:eb:fc:dc:
         03:0e:7b:da:d3:08:ad:f8:2d:da:70:50:4e:bc:48:13:8d:92:
         48:63:17:16:6e:59:bc:d7:9e:89:a3:33:e3:be:a6:1b:48:fe:
         59:ef:bc:1d:80:99:1d:ea:8b:f1:bb:f3:7a:d6:ac:86:c2:41:
         b5:ed:e0:2a:a3:47:1d:2a:45:7e:3c:9d:8b:a3:96:4b:20:6b:
         d7:f6:ef:df:04:ad:c7:c7:89:7e:a6:52:72:42:ec:c9:18:c3:
         36:a8:17:ed:60:d3:bd:16:90:54:f2:1c:b4:10:d1:56:19:47:
         90:6c:dd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----