Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bb5d3f8-13ac-433b-bcf8-dd440d7dacaa.roa
File:                     8bb5d3f8-13ac-433b-bcf8-dd440d7dacaa.roa (raw, json)
Hash identifier:          UB0KnOBpTU/lXk/qTI0ZowplWUV9i8A+UXVLMhwCiDk=
Subject key identifier:   AD:4F:C9:78:D6:46:A5:D2:85:A3:D1:47:2B:48:EB:3B:74:7D:82:E7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7DB6ECF787AD5AE166996B94C2B880B19D083B17
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bb5d3f8-13ac-433b-bcf8-dd440d7dacaa.roa
Signing time:             Tue 28 Oct 2025 00:00:07 +0000
ROA not before:           Tue 28 Oct 2025 00:00:07 +0000
ROA not after:            Tue 02 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        209.178.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b6:ec:f7:87:ad:5a:e1:66:99:6b:94:c2:b8:80:b1:9d:08:3b:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 28 00:00:07 2025 GMT
            Not After : Dec  2 23:59:59 2025 GMT
        Subject: serialNumber=0b81c64611e13e1cf95da543b7268203ef071e04545e633698e881ee592e56aa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:01:e0:d5:1c:8d:03:e5:08:88:90:7b:35:12:
                    e8:f5:12:4c:5a:13:27:05:00:2f:4d:e5:3b:d9:13:
                    91:0a:b3:a1:3b:d8:33:a6:07:41:76:ef:07:32:71:
                    28:39:7e:4d:9f:5c:28:dc:09:85:a4:14:ef:e1:f5:
                    a0:ce:24:36:29:43:d4:de:8d:65:f3:68:2f:8a:e6:
                    ab:f9:d1:a8:bc:00:3f:18:fc:10:db:eb:56:0a:a9:
                    bf:4e:c1:49:7b:36:b4:b8:36:8d:f1:06:72:4e:7c:
                    5e:de:a7:f1:fc:39:20:d2:29:f1:59:87:c5:3e:3f:
                    2b:01:64:c3:f9:3a:80:0b:75:11:7f:ca:17:ab:b9:
                    9c:02:c6:6e:3e:6d:22:da:1d:57:9b:a8:aa:ba:cf:
                    d9:a6:12:40:33:ac:3b:5f:47:00:86:0b:20:21:0e:
                    a8:75:8c:22:36:15:99:4b:79:ea:69:9a:9d:6f:95:
                    ae:7c:5a:04:4c:7a:92:a8:0d:94:0d:15:9e:e2:96:
                    63:3b:23:96:49:f5:ac:fb:dc:21:e8:e9:f4:4b:31:
                    3d:bf:a0:7c:a2:87:20:3b:75:af:d8:fd:8c:97:ef:
                    cb:79:26:fa:89:90:b4:f2:aa:e4:9e:1a:30:57:37:
                    11:64:fa:03:69:fb:e1:a4:f3:62:5c:bd:db:8d:fa:
                    ec:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:4F:C9:78:D6:46:A5:D2:85:A3:D1:47:2B:48:EB:3B:74:7D:82:E7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bb5d3f8-13ac-433b-bcf8-dd440d7dacaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.178.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         3e:44:9b:4a:64:fe:32:87:14:3f:e2:17:d6:5f:3c:de:d6:94:
         5f:8c:b2:c8:1d:47:63:c1:97:e1:7e:af:5d:93:96:0f:b3:87:
         c0:06:0a:6a:cf:12:ad:5c:2a:35:d0:a9:f2:d5:75:92:31:e6:
         ab:14:37:7f:d9:f0:87:2a:fb:4a:70:32:a1:68:15:3d:d3:ba:
         09:bc:8c:ce:85:85:02:63:3c:b7:4a:04:f1:d2:c6:f9:56:c6:
         44:13:7d:b6:9b:c4:70:a8:00:1b:18:1a:f0:e3:fa:df:a6:6a:
         bc:a0:4c:57:41:8c:92:41:eb:c2:ad:82:90:52:eb:ba:b3:9a:
         4f:98:9c:12:8b:41:40:f0:76:32:c9:c1:9a:76:4b:2a:3c:68:
         31:7d:2a:a6:6e:4a:18:d7:50:14:15:b5:4b:d9:98:68:ff:7f:
         64:74:8e:48:e8:14:00:ac:6c:29:11:4b:da:89:4c:fd:29:d9:
         9a:6a:d1:37:04:7d:b2:05:e4:0f:30:98:48:ef:c8:21:40:79:
         9d:ed:32:3d:ea:d5:4a:f3:ef:d4:dc:52:3e:38:90:79:01:e7:
         c5:56:cf:4b:36:91:2c:b5:70:a5:21:0e:8c:be:e0:1f:1e:b9:
         db:75:cb:29:6a:31:63:c1:fa:8d:85:d2:71:e0:33:ea:a6:14:
         84:64:ce:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----