Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4f8f4c0-f0ba-4efa-b442-efd7012045a3.roa
File:                     b4f8f4c0-f0ba-4efa-b442-efd7012045a3.roa (raw, json)
Hash identifier:          DUK64HO542+knyy07TbDD46DcWSXGj9Mo54U6fIXgeU=
Subject key identifier:   6F:57:A6:4A:DB:4E:22:92:5C:64:16:56:A8:86:9F:58:B8:48:13:76
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7531DF8677DA0C2FED6AA3C7962348A6A63A509B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4f8f4c0-f0ba-4efa-b442-efd7012045a3.roa
Signing time:             Fri 31 Oct 2025 21:38:35 +0000
ROA not before:           Fri 31 Oct 2025 21:38:35 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        166.117.80.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:31:df:86:77:da:0c:2f:ed:6a:a3:c7:96:23:48:a6:a6:3a:50:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 31 21:38:35 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=83f4694a5222e629590684668939e223d23ab714e7636299409bd8439509fd9e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d5:7a:71:86:b2:b5:3d:72:0a:f2:3b:8b:e3:
                    56:07:35:0d:ee:8d:79:9f:a4:fb:03:21:7d:22:d3:
                    7c:28:45:f9:35:dc:1e:9a:87:c8:b5:f9:bc:5c:17:
                    fc:aa:54:24:1e:19:61:7d:d4:52:e4:14:b1:a9:9e:
                    f0:65:dc:07:bf:67:3f:36:60:fe:26:42:ec:7c:16:
                    03:20:51:4c:01:ce:79:43:b6:86:ed:df:6c:23:28:
                    6c:c7:f2:0a:03:90:24:f9:08:86:94:7a:41:e0:f9:
                    e6:3c:04:6c:4f:b1:d1:62:ce:ea:67:72:d9:68:5c:
                    5d:2b:d8:80:75:0c:e3:5a:4b:c1:3c:8b:9e:07:8d:
                    8a:7d:c6:ae:34:6e:d2:7c:ca:b4:7e:e2:a3:a8:c4:
                    7f:b7:2f:66:05:1a:08:58:e8:67:5c:2e:c0:26:94:
                    fd:9c:c8:6a:12:11:16:42:45:10:c1:a4:31:16:e3:
                    f4:b6:a4:e9:11:3f:ac:84:80:87:17:06:84:85:84:
                    29:61:5e:23:72:bb:50:cf:4c:da:5f:53:00:3d:90:
                    1b:7a:aa:76:05:80:26:f9:dc:f3:ba:a6:33:18:fd:
                    51:8b:f2:81:e2:f2:a6:e8:5f:67:33:3e:64:5b:17:
                    6e:e0:2d:a7:59:6a:ff:a5:e4:0f:f9:c1:e9:10:a1:
                    fa:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:57:A6:4A:DB:4E:22:92:5C:64:16:56:A8:86:9F:58:B8:48:13:76
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4f8f4c0-f0ba-4efa-b442-efd7012045a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.117.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         45:a1:70:da:19:3e:dd:52:7f:d3:a6:0e:70:54:7e:05:1b:00:
         cf:2b:fd:77:6b:cf:85:a8:bc:a6:bb:42:a0:3e:48:c1:f9:b9:
         62:12:7d:03:85:63:c9:73:0f:16:fb:d1:22:99:11:0e:5b:70:
         93:10:73:03:e1:4d:7e:1f:44:1b:0d:1e:c5:3b:cb:e2:10:ad:
         af:31:1e:c6:f6:9b:e6:27:19:2d:58:e4:ae:97:bd:f7:de:eb:
         9c:a8:df:09:d5:f9:09:f1:8e:e1:bb:50:98:34:77:f5:d8:26:
         1b:23:7f:cd:5e:5d:4e:da:38:6b:17:83:de:93:6f:f7:b7:5f:
         d8:57:a7:59:1c:9b:3c:a3:9e:8c:02:8c:99:43:fd:87:20:d3:
         24:f4:1d:a5:bf:ae:bf:01:5f:f4:53:e7:93:6d:41:49:21:08:
         43:30:f9:4c:fd:99:ac:e4:84:aa:f5:38:0a:cc:03:b4:f4:9c:
         14:3e:7e:74:e2:e8:1f:ff:1e:a0:f7:eb:4f:65:02:11:2c:ed:
         b2:c4:a3:19:47:a7:16:ec:c0:8c:88:57:31:e9:6e:97:33:df:
         b1:e9:f9:51:2e:a5:c8:9f:09:98:dc:7f:a0:5a:b8:20:15:52:
         2f:3e:02:fc:90:6e:31:38:68:a0:12:60:f6:98:bc:ef:7d:6d:
         d7:96:e5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----