Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f81d4391-6252-4277-a9ea-2d420a7a6f20.roa
File:                     f81d4391-6252-4277-a9ea-2d420a7a6f20.roa (raw, json)
Hash identifier:          h6j4+ofYng16zVjlz+bBo07g3esogdRJwQuJg/7GFjE=
Subject key identifier:   0C:04:9F:FE:EE:AD:6F:2E:1B:27:01:B2:CE:08:9A:D4:56:3E:83:DC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5C39E3FEF5BB0744972B575D2D746347974541D3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f81d4391-6252-4277-a9ea-2d420a7a6f20.roa
Signing time:             Tue 28 Oct 2025 00:20:46 +0000
ROA not before:           Tue 28 Oct 2025 00:20:46 +0000
ROA not after:            Tue 02 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        165.178.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:39:e3:fe:f5:bb:07:44:97:2b:57:5d:2d:74:63:47:97:45:41:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 28 00:20:46 2025 GMT
            Not After : Dec  2 23:59:59 2025 GMT
        Subject: serialNumber=12fc890826ec2dd0ef475fd8fa44fd6a3e5bb6c3df8703ca4d2eca74b8b753d3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:46:ef:0e:28:e6:d4:eb:11:80:f1:35:a7:8a:
                    2a:e5:ea:52:8d:48:65:50:49:d2:4a:d4:c3:ef:81:
                    0c:45:e2:63:7c:51:76:e0:96:58:be:7d:f6:30:fd:
                    40:fe:07:ce:b4:ef:a3:a4:c3:e3:78:ad:b5:6d:ed:
                    17:ee:b4:c1:49:3c:7c:1f:db:08:36:0e:fa:4d:b5:
                    bf:c4:ba:b7:57:26:29:79:b2:65:3e:9a:9c:f9:a7:
                    06:e0:3e:cb:de:de:a7:f6:64:83:63:21:d2:7d:42:
                    5f:73:7e:c6:be:59:8d:db:22:aa:90:8d:a4:16:8b:
                    ca:8b:c3:e4:f7:92:10:0c:ad:29:33:b7:34:bf:d9:
                    e3:9a:94:b1:b9:47:91:00:c4:45:47:1e:d7:cc:4c:
                    41:59:54:d8:d1:c2:01:41:f0:fa:f9:c0:28:6b:f5:
                    34:6c:e0:8e:99:b8:aa:78:8e:d6:4a:94:62:fe:bb:
                    1c:98:03:fe:0e:be:55:8f:5c:6f:97:c8:34:14:69:
                    ac:f7:4d:12:ac:19:37:ff:f3:1b:eb:9d:8b:0d:e7:
                    9d:8d:3f:10:b6:7c:ae:dd:96:19:26:5d:4a:e7:f7:
                    03:9d:53:a9:28:3d:b6:71:79:a5:4e:ad:a3:af:a8:
                    22:9f:7f:89:52:6c:73:cd:58:3e:86:06:19:78:82:
                    ee:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:04:9F:FE:EE:AD:6F:2E:1B:27:01:B2:CE:08:9A:D4:56:3E:83:DC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f81d4391-6252-4277-a9ea-2d420a7a6f20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.178.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bb:72:17:e6:7b:4c:60:53:1e:a5:4b:a1:22:93:d7:95:5c:96:
         17:fe:8a:43:b1:0d:99:aa:ed:22:b7:3f:f5:55:d9:1f:0d:64:
         fd:30:d1:47:27:6e:8d:e5:21:42:4f:b9:a4:c0:e6:33:7d:4f:
         2f:e9:b0:44:7c:19:7d:eb:ff:2d:c2:da:2d:32:cd:6e:3f:40:
         94:e0:c2:51:12:d7:fc:cd:f7:f3:d3:de:6e:3b:95:0e:da:75:
         5e:f8:da:3f:37:44:35:3f:3a:56:b5:f5:56:a8:f0:2d:94:66:
         ca:87:43:e8:0e:3f:16:22:10:48:e7:6e:b3:b1:b1:97:6b:97:
         33:b6:84:d1:f7:8d:be:08:93:2c:7d:1c:3d:45:4b:03:db:83:
         e4:89:52:96:ee:d0:b0:c3:27:59:ef:88:ff:b8:2c:48:c8:d7:
         91:76:22:f5:4c:d3:58:ed:7d:28:31:b6:88:63:b5:f5:09:a0:
         b5:75:e0:f5:14:a5:08:67:d9:2a:67:7b:04:ae:aa:cc:1b:73:
         66:50:9a:53:01:3b:fa:fe:fd:2d:c7:cc:bb:de:fb:1f:b3:b4:
         25:97:2c:ba:46:79:39:3f:85:f0:fc:8b:e5:8c:ce:49:af:b8:
         67:de:12:5f:b9:f1:59:5d:df:78:9b:d3:97:c9:88:21:fb:ac:
         a1:23:61:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----