Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c7c07ee-0917-41f8-997b-d5253ad56cb3.roa
File:                     7c7c07ee-0917-41f8-997b-d5253ad56cb3.roa (raw, json)
Hash identifier:          4wqsRYrusOqdnkhQaDtH/xRqEO8Q877ZPze9G9BkOjQ=
Subject key identifier:   93:3C:3C:A0:EB:8D:DF:28:6C:B6:C0:73:01:E4:E2:44:DF:21:4D:91
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       25E87A9F673906C43675EBBCE8F19E92734408E0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c7c07ee-0917-41f8-997b-d5253ad56cb3.roa
Signing time:             Fri 24 Oct 2025 00:12:09 +0000
ROA not before:           Fri 24 Oct 2025 00:12:09 +0000
ROA not after:            Fri 28 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        137.160.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e8:7a:9f:67:39:06:c4:36:75:eb:bc:e8:f1:9e:92:73:44:08:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 24 00:12:09 2025 GMT
            Not After : Nov 28 23:59:59 2025 GMT
        Subject: serialNumber=9b5bf6fa240fe9708cae754bb22a0836fb3ccdf658b2038d2ab7d74f77742eb1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:80:92:c1:f9:5d:48:54:74:a3:85:f8:97:92:
                    a6:e0:2d:66:2d:35:7b:82:e4:54:cf:9c:db:7e:23:
                    b2:48:76:b8:bc:67:c7:9e:2c:1d:7a:62:b9:44:bb:
                    7f:8b:bc:49:2c:a8:eb:0b:86:cd:02:82:4a:dd:af:
                    f5:13:6a:45:88:1c:8f:d7:66:ef:eb:15:9c:39:7b:
                    2b:bf:e0:73:db:f1:4f:c1:a8:d4:56:99:46:83:08:
                    27:19:43:20:cb:dd:59:aa:fc:e3:5b:63:7a:74:e1:
                    e9:98:d5:8e:12:6d:cb:57:d2:f3:7f:52:08:2c:89:
                    2a:dd:74:88:9c:9e:07:80:ae:4b:f8:9c:79:cc:0f:
                    97:36:a6:16:fe:58:32:f4:33:7c:f9:0d:be:74:63:
                    ac:f1:c9:f0:6a:55:81:5b:8d:42:9a:9a:9e:49:c9:
                    4b:49:14:44:49:b8:b9:76:36:0b:5a:2d:de:34:a9:
                    26:81:57:fa:77:cb:b9:0d:d3:2e:b4:9c:df:d3:ce:
                    55:c4:f7:85:92:13:37:2d:69:97:f6:b0:fb:52:33:
                    41:f5:91:05:8b:f1:3f:a7:85:52:95:6b:3b:41:4b:
                    9f:19:4d:1a:55:9b:96:9e:bd:4c:a9:97:49:e0:56:
                    be:54:5d:c2:e4:b6:f8:78:6d:78:9a:79:55:09:cf:
                    70:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:3C:3C:A0:EB:8D:DF:28:6C:B6:C0:73:01:E4:E2:44:DF:21:4D:91
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c7c07ee-0917-41f8-997b-d5253ad56cb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.160.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bb:5a:d4:38:8a:a5:81:96:3c:b7:d3:d9:fa:9e:34:71:8b:82:
         1d:e8:04:ce:c3:61:60:aa:9e:43:52:4a:73:78:7c:c8:c2:fa:
         96:ed:00:c4:da:df:3e:01:1d:08:48:c2:79:90:18:a4:2b:5d:
         a0:87:0d:86:03:11:3b:8a:9f:f8:c0:fa:7f:6a:01:06:af:2c:
         98:be:81:c7:b6:f5:d3:ee:42:ae:af:6d:ae:9b:77:da:5c:88:
         a6:d0:4d:50:65:52:a0:eb:4f:1d:68:41:5f:e0:7f:5c:39:c0:
         fc:10:83:cf:6e:09:c0:a1:a0:74:4a:01:ff:42:ab:f7:f4:4b:
         92:7f:74:87:30:2b:5b:ec:51:7a:a1:d0:37:04:23:9b:e3:f0:
         1c:33:02:46:62:a6:b7:ba:b4:59:7a:47:2c:51:ad:71:38:04:
         70:30:5d:2e:7e:d1:4e:a7:ab:1f:10:6b:b4:a3:5f:2d:4d:8b:
         ae:7b:29:51:6f:54:b5:b5:53:5b:ec:87:59:12:2a:51:5f:c1:
         c3:39:06:6f:c0:87:cc:e3:0b:e1:2e:e9:56:2f:a5:af:91:c9:
         69:31:97:e8:2e:e1:ca:72:b0:82:d4:7c:67:42:9f:75:37:ee:
         cb:cb:b8:f0:4e:c4:36:1f:34:ef:44:6f:4e:6b:92:b7:db:8c:
         43:c5:f3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----