Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7db05471-313d-42cf-86d0-866ce19bc5fc.roa
File:                     7db05471-313d-42cf-86d0-866ce19bc5fc.roa (raw, json)
Hash identifier:          fIU2F99rwhCatbzEBWAA4wubFwfww9Ckpop6GIDUvvs=
Subject key identifier:   87:70:59:50:8E:0B:A9:4A:00:55:35:75:1F:E5:1C:7E:F0:3D:E6:FA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0DBEE8B607A57402B0ECAA593B5ACA869232A4B5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7db05471-313d-42cf-86d0-866ce19bc5fc.roa
Signing time:             Fri 31 Oct 2025 00:20:42 +0000
ROA not before:           Fri 31 Oct 2025 00:20:42 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        13.128.80.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:be:e8:b6:07:a5:74:02:b0:ec:aa:59:3b:5a:ca:86:92:32:a4:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 31 00:20:42 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=9b37081173750c3ebec302c9fcf6be5a47a0a46b4805545da38c5d1d5b195af1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ce:8d:78:d9:70:79:fa:dd:74:7b:8e:e8:8d:
                    c5:71:0d:9e:b5:01:3b:d2:24:e6:74:3b:54:d7:3c:
                    e4:2b:ce:f9:c4:38:51:35:d6:e9:8d:34:58:ea:55:
                    f0:97:2d:43:b9:f5:c0:9b:e2:23:76:b8:4c:63:54:
                    5d:d7:b0:a8:25:17:94:e9:5e:2d:95:8c:78:e7:e8:
                    d4:cc:48:54:a9:85:8c:d1:88:de:5a:f1:23:af:d3:
                    96:8d:7c:e9:e8:2a:3c:55:7d:f2:25:f5:db:b1:ef:
                    30:99:82:28:75:25:35:21:35:c3:4c:1a:14:41:2d:
                    6f:66:0a:a8:08:3d:7f:50:c5:d1:d5:30:c9:e6:c7:
                    aa:8d:ef:8b:c1:f9:9a:bf:7d:e5:c6:d9:06:6e:ac:
                    ac:54:fe:13:25:b7:5f:b3:f8:a1:48:bb:ea:62:ad:
                    cf:06:2c:da:72:52:bd:07:c7:2a:5c:93:f3:57:e1:
                    30:7d:49:d0:54:b0:1c:aa:ab:97:e8:7e:79:8b:cd:
                    73:44:90:52:36:74:ea:b8:a6:9c:bc:6b:16:39:55:
                    9b:4d:fc:f8:a2:96:11:a2:60:bb:cb:c1:3d:d3:e1:
                    5a:c9:93:4e:0d:f3:10:c1:b4:83:5e:de:7b:80:96:
                    e7:05:bf:3b:92:e1:cc:36:65:3f:15:71:fa:63:38:
                    11:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:70:59:50:8E:0B:A9:4A:00:55:35:75:1F:E5:1C:7E:F0:3D:E6:FA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7db05471-313d-42cf-86d0-866ce19bc5fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.128.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         70:42:67:97:7c:eb:6d:1b:3f:4f:81:c8:6a:18:a4:c3:e3:8e:
         59:98:0b:e3:03:f7:40:fb:54:16:03:72:6b:91:9e:f3:fc:b0:
         f8:8f:b1:3c:b9:bc:9c:65:2b:c6:1a:02:84:c0:7e:d6:08:3a:
         07:13:bf:5b:fe:8b:90:e2:21:18:b6:c1:0a:01:6c:7b:d4:a6:
         87:e4:c0:3f:45:8a:42:48:7c:c1:12:6d:04:db:4c:7b:ab:14:
         68:3a:45:d4:1a:32:37:10:55:82:81:65:4c:50:99:75:81:31:
         36:79:96:ec:29:1e:fe:74:5a:e2:4f:d1:96:0f:00:15:16:34:
         9e:1b:db:59:6e:af:60:4d:f8:1e:8b:33:d5:ab:dc:53:83:9b:
         26:76:75:8c:2f:09:71:d5:b0:d5:33:b7:e2:a5:2f:0d:2b:85:
         fc:15:cf:9c:e4:41:a7:4d:62:f4:1e:41:f4:b2:df:1e:ca:cd:
         39:99:0f:33:36:a0:ad:26:e6:39:ff:90:c2:64:3c:99:83:ec:
         c0:ba:da:d9:95:a1:6a:71:f2:1a:57:98:da:17:d1:74:6c:1e:
         72:85:af:6e:bc:f5:15:19:29:23:3b:55:df:39:86:d4:c4:75:
         38:7d:7a:63:17:5f:a3:58:76:63:e7:26:b5:a9:18:50:48:60:
         b1:68:5f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----