Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d87c2975-c322-4a99-8af6-32b0d3aa8fe8.roa
File:                     d87c2975-c322-4a99-8af6-32b0d3aa8fe8.roa (raw, json)
Hash identifier:          xceD9kCqrqEwN37km4+dIjjqZQB+oIMZIowrq1N5WFE=
Subject key identifier:   CB:63:82:91:B1:89:93:01:D6:58:4E:3B:DE:D2:88:ED:62:AC:75:2A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0F950CCF8DAEF93B2CF7EAB1003E66055CBAEE38
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d87c2975-c322-4a99-8af6-32b0d3aa8fe8.roa
Signing time:             Sat 25 Oct 2025 00:31:19 +0000
ROA not before:           Sat 25 Oct 2025 00:31:19 +0000
ROA not after:            Sat 29 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        192.43.176.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:95:0c:cf:8d:ae:f9:3b:2c:f7:ea:b1:00:3e:66:05:5c:ba:ee:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 25 00:31:19 2025 GMT
            Not After : Nov 29 23:59:59 2025 GMT
        Subject: serialNumber=52555709bd956cfec0a336fb22caa8a9cebb011b55516acecbcfeaa579c60fda, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c1:26:d8:67:35:ce:94:f9:e5:4c:2e:90:ba:
                    ac:dc:94:be:c5:35:0a:d7:cb:3f:65:b1:e7:32:66:
                    41:31:90:21:e4:52:23:a4:4a:9e:84:96:5f:fe:ce:
                    15:a5:1b:06:30:79:5f:b3:78:39:91:30:08:04:b7:
                    5c:c4:4e:91:7f:54:5e:a8:ee:09:b9:e5:1e:29:1b:
                    b0:82:01:01:db:e6:ea:ab:1a:2a:ea:da:cd:e5:7d:
                    73:7f:29:8b:f1:33:f5:2a:6e:80:5c:32:44:e2:7b:
                    94:32:7d:a5:65:22:2e:0e:4c:c1:be:50:18:2d:95:
                    53:e8:9c:ec:1f:7a:aa:26:bf:a9:dc:c3:2b:65:1a:
                    28:10:66:41:10:b0:39:b9:fa:fa:bc:cf:58:70:43:
                    28:6f:65:0c:74:05:f1:e1:34:93:8f:fa:fd:6b:08:
                    01:84:9a:9c:24:eb:20:d7:93:b5:85:95:09:2b:95:
                    d1:69:09:2e:46:70:75:e2:ee:d9:f0:20:d0:72:8f:
                    bc:f3:bc:90:ae:cf:35:6c:93:31:32:08:2c:ff:ff:
                    80:92:ee:3b:08:10:54:f2:3a:3b:8b:cb:04:f8:72:
                    84:41:70:f4:ca:f8:13:c9:41:ec:72:7a:a6:13:78:
                    bb:6b:4d:55:79:37:7c:91:81:81:21:df:13:b0:20:
                    ef:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:63:82:91:B1:89:93:01:D6:58:4E:3B:DE:D2:88:ED:62:AC:75:2A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d87c2975-c322-4a99-8af6-32b0d3aa8fe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b3:3f:78:e0:72:80:7f:a9:e7:ab:79:dd:df:a0:85:0e:07:60:
         f2:bc:5e:17:6a:30:8e:08:fb:44:07:21:a4:bc:cc:5a:98:fc:
         32:dd:d4:ff:18:87:a1:35:82:19:d4:4b:24:32:01:8c:b7:ef:
         f0:dc:69:52:34:a8:09:c8:6e:0a:5c:fb:75:41:96:bc:5d:8b:
         12:28:91:03:00:5e:7f:44:60:4f:ff:47:38:03:6d:92:5c:b9:
         e8:d2:88:21:96:0f:4a:61:7c:8e:5c:2e:f8:c2:9c:20:50:a5:
         40:21:70:e0:43:16:dc:63:26:63:56:5c:ae:bd:6f:ef:a8:be:
         dd:a4:13:f3:d7:86:e6:75:18:91:d7:0d:86:83:a8:e8:41:b9:
         e9:a2:55:be:f2:46:32:37:28:75:78:8c:56:f5:2c:9d:49:e8:
         c8:15:5e:ff:ef:98:f5:f1:74:3c:17:92:50:7b:73:39:2e:27:
         5e:11:ed:a7:81:20:f6:4b:ee:9d:4f:ee:4f:71:1f:e5:d0:3b:
         29:b0:70:44:87:3f:fe:2e:b4:af:cc:01:f7:1a:ee:c0:46:07:
         e8:ca:9b:7f:d9:8b:9b:f3:e6:59:45:73:ad:6a:1f:c9:1e:e8:
         76:de:31:66:de:a8:d8:2b:9f:30:01:da:fb:bd:88:31:47:ec:
         e1:25:fc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----