Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae5b63dc-e0ae-4bed-8bed-50711d8863b5.roa
File:                     ae5b63dc-e0ae-4bed-8bed-50711d8863b5.roa (raw, json)
Hash identifier:          Sgwh53vctS47X2mrFZy+8yHXiSMPSsbOS46TlEMMT2w=
Subject key identifier:   18:B1:41:36:8A:C2:C1:3D:8D:3D:DF:3A:71:FF:05:5C:59:6C:61:3A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1E2C5C860404B7196187F8C1C850D293F937B98B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae5b63dc-e0ae-4bed-8bed-50711d8863b5.roa
Signing time:             Fri 31 Oct 2025 21:38:28 +0000
ROA not before:           Fri 31 Oct 2025 21:38:28 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        166.117.112.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:2c:5c:86:04:04:b7:19:61:87:f8:c1:c8:50:d2:93:f9:37:b9:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 31 21:38:28 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=131cb4e41b62e3b2bf7f6239bb3f48cfbadf0278717194f73f0cd16a1ac3813e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c6:6b:b1:1e:2d:08:a7:44:44:c9:b2:a0:0c:
                    a1:e3:aa:dc:ea:f1:b3:74:b3:dc:15:1f:97:65:fe:
                    bf:b2:fa:16:0f:f4:ad:28:0b:83:09:1e:df:17:b4:
                    bd:97:a4:87:f0:1e:0a:a4:53:e7:06:2c:d0:45:63:
                    e3:fc:1d:34:da:4f:f4:ff:69:1a:7f:0c:66:e5:d7:
                    38:22:6f:6b:dc:73:41:8d:fc:9b:58:e0:6f:d4:ad:
                    00:da:81:5c:48:34:4d:df:fc:53:96:6b:61:0d:de:
                    9d:f5:51:1a:24:86:8f:26:90:84:b4:b0:e7:bc:d4:
                    67:da:8a:8c:db:a8:72:3c:ae:53:99:b6:9e:3e:07:
                    e9:44:42:c0:50:0f:51:3a:f1:17:7e:d7:ad:56:2c:
                    58:29:84:9e:6c:a1:24:97:05:d1:5f:d2:e7:3b:1e:
                    ea:5e:8b:53:5f:60:85:dc:c5:7f:2f:87:f0:cf:ae:
                    6c:68:db:ba:54:ea:83:f4:4b:d7:30:bd:2e:90:87:
                    60:cd:f5:ec:d7:d7:66:9a:fe:54:b9:90:3f:0b:f0:
                    79:02:69:76:a4:b9:e1:ea:8a:13:5a:14:9a:2c:ab:
                    74:07:ee:09:50:ed:01:d0:09:35:a5:f5:fa:0e:71:
                    c2:68:43:37:f8:7d:d3:15:86:06:78:da:0c:01:5c:
                    e3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B1:41:36:8A:C2:C1:3D:8D:3D:DF:3A:71:FF:05:5C:59:6C:61:3A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae5b63dc-e0ae-4bed-8bed-50711d8863b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.117.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         98:1a:ed:a0:96:85:02:7c:00:5d:ab:93:e2:57:b9:a6:a9:95:
         69:f2:c7:a7:fb:50:6e:ff:e8:55:69:db:11:c4:3e:0e:23:50:
         4b:61:5d:96:13:dc:80:69:d6:02:b9:cd:09:9e:cf:53:0a:d4:
         02:21:12:36:3d:ae:15:51:14:5d:f4:99:39:75:7a:37:56:40:
         f0:6b:4b:62:10:6c:7f:56:90:2e:b7:1a:88:96:48:cf:38:68:
         b9:1b:04:01:2c:45:f1:e2:6d:0d:a7:a3:dd:01:a0:71:a9:14:
         50:99:d0:55:b6:41:86:e0:d5:c3:c0:31:77:da:5e:99:d4:de:
         4f:15:03:02:72:ac:99:f2:39:86:ac:7a:4c:7f:c0:8c:2e:59:
         1b:80:63:5d:9a:95:ea:37:ef:c8:65:3b:62:a4:0d:82:e4:71:
         5d:77:1a:8e:34:60:69:61:78:21:d4:3a:7c:8e:b0:e9:0c:14:
         59:e8:8b:c6:ce:53:c8:3f:ba:e1:67:e1:9a:22:ee:6c:9a:56:
         bb:0b:eb:a2:f3:b8:e4:2c:3f:8a:6c:d3:ee:18:ce:ac:ea:bc:
         f7:71:87:95:73:f9:18:45:ad:6c:7e:1c:ce:94:be:07:b4:44:
         29:bf:ae:99:d3:33:88:12:9a:5a:7d:db:dc:9e:e1:1a:4e:e1:
         aa:b7:80:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----