Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba71b3f3-cdf6-4786-89eb-629b258ad834.roa
File:                     ba71b3f3-cdf6-4786-89eb-629b258ad834.roa (raw, json)
Hash identifier:          jCVU0dZ7Fgt3COS9HolkZhAZD0ZU1oklATXoHuecp/4=
Subject key identifier:   94:18:BD:AB:79:9D:59:C1:CF:1C:AF:66:FB:DE:14:AA:CF:5D:E2:81
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3221AC156A78D51E36F4101B5B17F6229E115A23
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba71b3f3-cdf6-4786-89eb-629b258ad834.roa
Signing time:             Sun 26 Oct 2025 01:00:33 +0000
ROA not before:           Sun 26 Oct 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        141.242.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:21:ac:15:6a:78:d5:1e:36:f4:10:1b:5b:17:f6:22:9e:11:5a:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 26 01:00:33 2025 GMT
            Not After : Nov 30 23:59:59 2025 GMT
        Subject: serialNumber=60a3a5cfe1923886ba85a7d1a9ab51543f258653d33403b3b1d0c0803082d6c5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:74:fe:7d:6a:bd:d9:85:2e:ef:10:2b:40:b8:
                    ee:91:c2:1a:cf:1b:b9:98:64:89:c6:77:69:cb:a2:
                    f2:cc:9a:b6:d4:8c:76:1c:d7:59:b5:f2:15:8b:6c:
                    24:87:4c:d9:72:86:75:c3:1a:f5:8d:8f:90:72:b6:
                    7a:8d:a9:d8:83:4a:20:95:45:3f:c1:6e:2c:1f:ac:
                    77:01:50:f4:d0:cf:07:7a:b1:40:41:a9:ae:38:b1:
                    b3:f9:6c:64:f6:1b:b1:9e:c5:b5:67:71:9d:15:69:
                    b2:23:d1:5b:cf:d7:84:f1:cd:26:28:6c:6d:f1:60:
                    59:17:10:ba:7f:a1:4e:51:9d:0e:3c:86:fb:9f:99:
                    2f:69:f4:6f:8b:93:86:4d:3a:12:46:ea:c1:05:3d:
                    88:33:56:df:9f:f5:fc:0a:81:80:96:92:6e:3a:ac:
                    d3:45:c9:f7:51:49:1d:3b:80:47:2b:af:6c:ef:0c:
                    68:90:bd:fd:22:9b:01:5d:71:f5:b8:17:98:7c:08:
                    55:8b:86:e4:fa:36:0a:ef:41:1a:19:72:e4:4d:ae:
                    8e:56:f5:10:5c:5d:6b:93:31:6f:07:c0:c8:e6:b9:
                    0e:04:da:bc:5a:07:1f:54:f6:b9:aa:0f:20:74:66:
                    4d:a9:77:0a:4d:9a:06:33:b3:3b:d8:2c:9f:ad:f5:
                    cc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:18:BD:AB:79:9D:59:C1:CF:1C:AF:66:FB:DE:14:AA:CF:5D:E2:81
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba71b3f3-cdf6-4786-89eb-629b258ad834.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.242.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5f:6f:ba:5d:33:20:4b:d2:97:4b:ae:01:e9:44:88:ca:c4:52:
         a3:dd:a7:8e:be:af:66:02:0c:bd:5c:6d:93:ea:35:f9:c0:ba:
         84:5c:a2:7f:6d:40:14:84:38:70:c2:c4:a8:78:c1:18:ba:b9:
         c0:d3:7d:b9:39:26:f6:68:cf:80:22:ca:67:97:ce:4b:a1:be:
         ef:70:5b:53:05:35:02:ed:0c:69:f8:f7:31:42:39:e9:b7:01:
         20:b3:6d:18:0c:84:28:72:52:d9:92:c9:01:5a:ca:e3:bb:05:
         ef:9c:30:64:bc:c4:5c:af:d8:6d:25:fd:fb:8d:d1:55:2c:b0:
         2c:e2:9a:37:aa:ef:04:5f:55:26:ad:b0:54:e7:7f:b8:21:a0:
         ee:eb:7e:87:2f:80:39:4e:30:ba:8b:44:bd:f6:1f:eb:18:86:
         81:47:86:ed:9d:11:57:d4:b4:84:52:f6:e9:2a:aa:6e:a2:74:
         12:b7:2c:ca:85:b3:01:a6:da:57:46:a1:dc:7b:50:45:18:5a:
         96:41:99:1e:ae:bf:ae:6c:ff:e7:58:25:e2:f9:9a:2c:4b:af:
         c9:0c:15:77:d0:cf:23:dc:23:8c:64:dc:0a:c4:76:aa:84:8e:
         3c:1f:a6:c0:95:af:50:22:14:46:44:24:78:c5:9c:dc:19:b6:
         c4:38:20:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----