Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf9d8dd0-e7aa-4698-be38-aecd8be5af6b.roa
File:                     bf9d8dd0-e7aa-4698-be38-aecd8be5af6b.roa (raw, json)
Hash identifier:          KwmDTtc5OxvVLrooicpB9v02O+b8rnTg7I9EQJQpG9g=
Subject key identifier:   E0:68:A6:55:46:BD:94:4D:5E:66:63:72:EB:91:8D:0B:86:68:6C:D3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0BA056A071770EFC0009A8A7373DA7EDD7125F19
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf9d8dd0-e7aa-4698-be38-aecd8be5af6b.roa
Signing time:             Sat 01 Nov 2025 00:10:08 +0000
ROA not before:           Sat 01 Nov 2025 00:10:08 +0000
ROA not after:            Sat 06 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        184.72.128.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a0:56:a0:71:77:0e:fc:00:09:a8:a7:37:3d:a7:ed:d7:12:5f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:10:08 2025 GMT
            Not After : Dec  6 23:59:59 2025 GMT
        Subject: serialNumber=ad7748ae0dce8a928a564d97bce0be4cd2767c1b0cd099f154d1d6f25eea4e9e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e1:58:b1:ba:2b:48:39:c9:d4:d2:3a:83:8e:
                    58:b6:fd:ff:b7:f9:69:90:73:fb:11:0b:35:12:7b:
                    61:af:55:a6:c0:04:d7:a9:be:1e:8a:3e:b7:28:ce:
                    1a:88:da:5c:e2:70:66:a8:09:6e:f7:bd:25:37:2a:
                    b5:b6:36:ba:22:74:70:14:ec:10:7c:49:ec:e7:46:
                    30:68:20:62:07:e7:96:33:12:c8:04:af:4a:06:33:
                    2a:c1:fa:2a:27:fd:5f:d2:fe:4c:15:99:33:49:25:
                    9f:3a:3e:ad:13:8f:5c:59:47:45:9e:5f:62:17:27:
                    65:71:23:f5:79:28:fa:b2:cb:f0:e4:c0:f1:56:3c:
                    f4:df:de:b6:11:00:f2:fc:67:ab:c3:b8:9f:e2:a3:
                    bd:c0:95:ad:f7:9d:3f:9d:0d:e6:eb:f4:6f:a4:e9:
                    57:9e:52:e7:3b:79:52:bb:5d:a2:8c:d2:44:33:91:
                    fb:b3:fb:dc:2b:0d:4c:c8:a8:1e:1c:c5:5b:45:3f:
                    67:1b:ea:cc:c0:1d:40:6c:c8:b9:53:1e:9d:1c:7b:
                    a8:99:28:28:5a:1f:cb:39:ca:86:bc:90:67:35:2d:
                    be:bc:c1:8a:c6:39:e6:ce:ee:36:91:19:09:5f:36:
                    1a:4d:c6:c6:62:b5:63:7e:29:83:21:a7:f8:39:01:
                    40:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:68:A6:55:46:BD:94:4D:5E:66:63:72:EB:91:8D:0B:86:68:6C:D3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf9d8dd0-e7aa-4698-be38-aecd8be5af6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.72.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         64:3f:c2:9f:99:f3:5d:23:b3:20:ea:15:9f:66:bb:73:ab:a4:
         a2:a2:91:a7:d5:a6:5e:4a:31:e6:c6:03:6a:fa:32:80:90:eb:
         9f:5c:db:4c:33:a7:99:84:66:71:7e:38:d9:6b:1b:f3:09:27:
         58:3f:d5:11:11:72:6b:b6:59:55:5a:97:76:94:04:d1:03:31:
         83:d7:cf:83:d1:23:fa:a4:65:0b:4f:3b:21:bc:a6:01:f9:8a:
         39:53:7b:19:90:e1:2d:c0:cd:98:c0:24:1b:51:40:8c:dd:a8:
         27:4a:da:a9:ae:26:25:7f:d7:d9:98:90:10:02:13:dc:59:72:
         12:58:5c:ac:3c:f6:13:66:3f:30:d9:08:6a:cc:09:1b:74:9e:
         77:56:7a:fc:3a:7d:f9:ea:62:c0:b1:53:99:7e:f8:7a:19:18:
         c9:32:06:d4:1c:5c:24:f2:00:e6:0b:86:2a:41:f5:33:7c:07:
         36:74:12:7a:f7:52:8c:8b:41:72:b7:6d:81:ec:0b:62:58:c5:
         1c:aa:9c:cd:02:03:07:36:e1:43:c9:e3:5d:c0:a5:f6:de:59:
         3b:8b:7b:ef:a7:bd:b0:b3:a2:d9:82:6a:82:65:a2:da:50:00:
         05:4d:17:02:a7:52:4b:fd:4e:d5:b7:e1:4e:d3:b9:bd:e9:b0:
         a9:1b:e0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----