Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11d86d5e-caf4-46bd-b962-a2c43ad0f565.roa
File:                     11d86d5e-caf4-46bd-b962-a2c43ad0f565.roa (raw, json)
Hash identifier:          xg/nDTW3I6uNnxXXo6LlgX6FPUz9Db0BSIL/AyvJFPk=
Subject key identifier:   B2:81:AB:4A:90:F2:DE:CD:C8:80:2A:AD:3C:E4:AA:3A:79:F5:1D:8F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7BF908ADEDC17B215E768E64692207CBA0EE81AA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11d86d5e-caf4-46bd-b962-a2c43ad0f565.roa
Signing time:             Sat 25 Oct 2025 00:21:22 +0000
ROA not before:           Sat 25 Oct 2025 00:21:22 +0000
ROA not after:            Sat 29 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        141.230.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f9:08:ad:ed:c1:7b:21:5e:76:8e:64:69:22:07:cb:a0:ee:81:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 25 00:21:22 2025 GMT
            Not After : Nov 29 23:59:59 2025 GMT
        Subject: serialNumber=951882854a76daab8d2788ac798ff7e13faa0a47563e0b5abdb00787b42aa128, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:71:be:83:92:e8:8a:48:08:80:54:84:3b:bb:
                    19:71:2a:cf:e0:12:59:1d:d2:0e:bd:38:15:83:db:
                    62:2f:4c:0f:34:42:57:ac:4c:72:ff:f7:f3:37:12:
                    ab:30:ad:9e:8c:c9:07:aa:8e:19:a3:46:f3:e4:c9:
                    70:a6:c2:e8:3e:40:50:d0:56:b0:d5:99:97:8b:0c:
                    4e:89:33:01:8f:0a:cd:91:12:3d:83:75:65:ba:f8:
                    1b:77:d8:d8:35:5d:ba:d7:20:e9:67:a7:c7:fa:aa:
                    85:8e:fe:e7:95:55:2a:09:56:90:d5:3c:b2:b6:a2:
                    03:35:7c:0b:99:0b:b3:9d:7d:1f:1c:31:4a:fe:5d:
                    e0:cc:d9:a2:a1:42:ec:6b:08:35:dc:3c:94:90:43:
                    63:5a:37:2d:fb:ea:ef:bb:6e:e6:44:b5:54:78:2b:
                    77:8f:51:23:e1:73:02:c8:a1:cb:c4:e3:0d:a4:37:
                    fb:4c:29:84:0c:2c:21:d3:ac:62:14:a7:b3:97:79:
                    45:60:3a:c3:9d:27:70:9c:6c:b4:05:7a:ae:9e:77:
                    15:da:aa:1d:0c:ca:82:c1:ae:7c:10:48:0b:20:0a:
                    a8:03:63:7b:51:22:d1:02:8a:a7:8d:0f:be:8c:c0:
                    70:ed:82:1d:fc:bf:aa:ab:64:e4:67:ae:14:e9:c2:
                    ca:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:81:AB:4A:90:F2:DE:CD:C8:80:2A:AD:3C:E4:AA:3A:79:F5:1D:8F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11d86d5e-caf4-46bd-b962-a2c43ad0f565.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.230.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         11:e4:97:6d:3a:67:ef:cf:45:9c:37:3f:0b:89:81:59:7a:c6:
         f2:81:ce:1b:41:b5:70:f3:ac:8d:a1:a8:de:b2:44:af:75:3b:
         42:0d:ad:07:ff:f7:e9:0a:e9:53:9f:c9:eb:fe:d8:39:da:84:
         0e:e8:43:57:30:26:68:b5:e9:16:6f:74:f2:1a:69:f4:a0:8d:
         b7:b2:dc:64:4b:c2:2f:d3:09:dc:82:62:fa:3b:76:fe:54:17:
         f3:30:f0:a1:f3:32:0a:ef:13:e0:eb:14:7e:3e:f9:62:7c:f4:
         31:bc:78:9b:eb:e7:95:06:b1:6f:1a:76:74:5e:93:a1:cf:0e:
         95:a3:92:da:5f:62:eb:af:c8:ce:da:eb:24:66:60:45:8b:df:
         06:16:5e:20:7b:ba:20:65:2c:a9:d0:e2:56:59:96:76:e1:5d:
         da:c7:6c:1a:bf:2e:26:e4:00:9d:87:a0:a6:0e:a9:bb:25:28:
         1d:49:6b:c8:61:64:16:4f:d4:8f:99:a7:2d:77:8d:32:b1:4b:
         e8:ef:3d:f2:40:9e:e4:7d:d2:ab:f7:75:c0:e6:47:52:e6:79:
         2b:fb:94:af:ad:c9:a8:e3:eb:f6:87:7f:7f:a0:7e:31:d5:00:
         e8:a8:db:28:6e:49:e9:5f:31:bc:ac:a7:63:69:ef:14:5a:e3:
         4a:0d:2e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----