Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/129f38c8-24c1-4584-b095-a873e227d87a.roa
File:                     129f38c8-24c1-4584-b095-a873e227d87a.roa (raw, json)
Hash identifier:          PoqsApEMfGYnp7lRcCKSYwL/BkVi9ajE7PRGCZ+4YYY=
Subject key identifier:   C6:10:08:E1:33:1B:43:11:88:7A:E6:54:29:A0:E3:AB:A9:59:9D:B0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6C180D1F1D905542A0F1BF7912E0E715BB9B35C5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/129f38c8-24c1-4584-b095-a873e227d87a.roa
Signing time:             Mon 27 Oct 2025 00:00:07 +0000
ROA not before:           Mon 27 Oct 2025 00:00:07 +0000
ROA not after:            Mon 01 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        195.4.88.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:18:0d:1f:1d:90:55:42:a0:f1:bf:79:12:e0:e7:15:bb:9b:35:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 27 00:00:07 2025 GMT
            Not After : Dec  1 23:59:59 2025 GMT
        Subject: serialNumber=7d89dc7dd12c9ad457f6173c370c231726e4faa19fa7844d341da20daf775b6c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bb:df:33:2a:56:31:0d:cf:38:cb:f3:d5:0a:
                    96:7c:4d:96:02:d6:ac:48:6e:9e:4b:24:fa:91:a5:
                    4b:c8:b9:dc:13:8b:e0:42:1f:a4:2e:a5:2f:05:5b:
                    6c:c7:32:5b:d7:39:cb:fa:74:2f:6e:25:a7:7b:a4:
                    84:53:53:77:67:3b:89:e2:30:33:34:93:b9:59:3d:
                    65:bf:85:66:86:b7:96:75:d6:94:05:d6:75:f8:b3:
                    48:da:8c:13:9a:05:e4:ce:2a:55:80:c0:db:49:fc:
                    a5:1f:bd:65:0a:99:3c:20:3d:63:d9:61:a0:aa:8f:
                    17:fa:de:40:a5:ca:c5:3b:38:c2:5f:91:d0:7d:1b:
                    48:7b:d7:f3:2f:33:74:fa:c9:30:cc:37:cc:f7:95:
                    07:de:7d:17:39:ea:5f:64:51:ac:e5:d9:1e:ba:e4:
                    37:61:c9:29:81:76:9c:c9:99:99:68:be:bd:c2:4e:
                    1d:8b:c1:05:95:c4:ab:61:2a:24:ac:60:fe:fd:5a:
                    eb:a1:4c:34:7f:08:5f:b4:88:6a:0f:61:7b:f6:5d:
                    df:d1:21:d1:af:65:02:a8:04:e9:6b:bd:31:cb:3c:
                    e9:7a:87:1d:d2:58:6d:27:99:68:bf:02:c0:b3:7f:
                    c4:ba:0e:e4:76:0e:bd:17:76:f3:04:6b:60:ad:97:
                    d6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:10:08:E1:33:1B:43:11:88:7A:E6:54:29:A0:E3:AB:A9:59:9D:B0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/129f38c8-24c1-4584-b095-a873e227d87a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.4.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:eb:c7:b2:ba:ea:6e:03:3b:1a:03:29:da:64:50:8a:6c:91:
         d6:18:c3:5d:6f:1a:62:61:17:92:67:fb:fb:eb:42:2d:cc:01:
         7d:3d:78:c7:bb:ca:ad:14:fc:a8:12:09:38:93:0a:2e:9a:bb:
         82:46:51:3b:d2:ab:0e:ed:ea:aa:04:a5:79:a2:68:e5:71:b8:
         98:58:1b:a1:80:4e:7e:43:01:cf:7c:1d:09:df:80:c0:9a:e7:
         5b:68:6d:56:03:6c:f9:5c:72:b6:5d:1d:87:2b:aa:2e:8f:92:
         51:3f:f9:a9:50:d0:c8:1a:63:ab:89:01:c4:8c:05:36:4c:2e:
         16:65:45:d2:23:d9:02:e7:64:48:41:40:58:0e:54:e5:f4:01:
         2f:34:4f:21:21:20:5d:55:8f:12:42:6a:53:cf:83:a8:04:eb:
         da:36:62:ee:be:b6:c7:9a:71:bd:90:37:dc:43:15:98:0c:10:
         2d:c3:d5:75:67:25:93:c0:50:a7:f0:6f:85:9c:1a:ba:c1:84:
         52:39:28:f7:db:cf:86:06:5e:c0:79:b7:52:66:a4:83:f7:d8:
         26:8e:d2:9e:26:4b:8f:b6:88:04:81:75:16:cb:bb:0c:12:7a:
         44:7c:07:60:81:fb:dc:35:9b:0b:d4:4e:79:1f:25:78:1e:b5:
         30:e1:7a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----