Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c945adeb-498d-4dd9-a0d9-070f5757c8f3.roa
File:                     c945adeb-498d-4dd9-a0d9-070f5757c8f3.roa (raw, json)
Hash identifier:          VURrFS2TfPi3cKV/e2kbdhNqqz6lA5rSRb7OQTFUUyY=
Subject key identifier:   F8:65:E3:8C:70:72:9F:9B:3B:10:D9:61:F5:AF:B5:6C:53:FA:65:CB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3AC4A5D3BEAEB6037D674A6FA661F13E7E50FFBA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c945adeb-498d-4dd9-a0d9-070f5757c8f3.roa
Signing time:             Sat 25 Oct 2025 00:31:14 +0000
ROA not before:           Sat 25 Oct 2025 00:31:14 +0000
ROA not after:            Sat 29 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        130.21.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c4:a5:d3:be:ae:b6:03:7d:67:4a:6f:a6:61:f1:3e:7e:50:ff:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 25 00:31:14 2025 GMT
            Not After : Nov 29 23:59:59 2025 GMT
        Subject: serialNumber=1be75da005a2957e525008be4b0efd1cc732151afeecf919ba5152ecb410b6fa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:da:a0:55:2b:ea:08:eb:78:ba:90:94:59:68:
                    ff:26:16:f6:1e:8e:a7:8a:60:cd:05:fc:55:23:b4:
                    0d:ca:eb:c5:cd:fd:0f:ef:0e:3d:d4:4a:e3:04:2c:
                    27:c8:2d:ad:18:5f:00:4d:b9:af:76:88:de:d7:8f:
                    d2:6d:65:de:ce:0d:08:e4:42:4f:28:2f:64:af:52:
                    bd:5d:26:03:43:d5:5b:f1:78:ee:eb:1c:34:0a:37:
                    ae:0e:55:2c:1c:19:f1:23:37:b8:d6:29:5e:8a:74:
                    1e:8d:58:bd:4a:a9:fb:cc:28:1f:f2:f1:36:a4:19:
                    c8:d7:cd:1b:50:15:e5:d2:ed:82:bb:94:54:db:e8:
                    f9:52:1b:07:f5:82:40:86:d3:cd:28:17:7b:55:30:
                    b2:be:74:8a:72:eb:5b:2c:46:c0:b7:92:c6:ec:8d:
                    12:4d:a3:80:1e:0e:45:76:84:1e:0c:d8:4f:28:9f:
                    e4:44:77:b2:c5:75:92:ac:92:53:d4:53:df:11:f2:
                    79:1e:86:1d:c7:d6:ef:2c:7e:a4:93:2d:4b:32:dd:
                    46:ec:66:86:f7:0e:5c:29:66:c0:28:ce:ab:3c:0f:
                    bc:6d:ef:8b:42:22:1f:f2:e0:06:a7:ae:b5:34:76:
                    f0:c0:bf:76:b2:0b:30:be:c8:75:84:32:ae:be:36:
                    0d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:65:E3:8C:70:72:9F:9B:3B:10:D9:61:F5:AF:B5:6C:53:FA:65:CB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c945adeb-498d-4dd9-a0d9-070f5757c8f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.21.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         67:d1:12:7f:33:d6:d4:22:eb:fb:2a:cb:04:fb:b1:24:ff:6c:
         65:52:1f:a5:d5:bb:64:31:f2:aa:76:88:62:30:12:d0:2d:f0:
         67:8f:06:35:84:d4:25:74:1c:13:04:9a:08:99:14:6f:64:81:
         2a:5f:48:b2:36:01:5d:29:ed:6b:65:9c:5a:2c:85:89:97:fe:
         c5:35:99:a8:e0:38:19:d8:1a:03:5f:a5:9c:58:66:63:6e:7c:
         1f:ef:d3:b3:c5:24:ae:d1:8f:03:58:4d:30:00:f6:b5:46:f8:
         73:b0:4d:e7:7f:3c:ff:d2:42:15:d4:e1:41:a5:04:f5:6a:65:
         9b:68:6c:2d:6b:d5:1c:6c:3f:a9:a4:be:9b:3a:4e:a6:da:10:
         68:60:3d:92:5f:c8:d9:eb:d9:48:48:6a:c8:cc:fa:5a:d2:57:
         5e:d4:f8:09:f5:bc:d8:b4:01:e1:66:3e:76:54:a4:f8:f9:4d:
         36:86:24:3a:64:17:cb:e7:f8:b0:c1:1b:99:e0:cc:dc:30:c0:
         1b:9e:83:22:15:8d:64:5f:75:24:03:03:af:28:27:74:00:88:
         d4:9a:f7:e7:19:7e:c1:73:08:a9:b1:00:73:6a:c1:0e:e8:40:
         9d:e0:8c:06:8a:4a:ea:37:6f:24:48:b7:32:ac:2e:54:1d:08:
         67:4e:d8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----