Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/4735d6a5-b185-4b15-b64f-0d5131ea71b5.roa
File:                     4735d6a5-b185-4b15-b64f-0d5131ea71b5.roa (raw, json)
Hash identifier:          nlVADDNGE7+ZKgb+kgvT07XWUk96FLbvjKsv+7d2UVo=
Subject key identifier:   A7:BB:0C:AC:3B:E4:4C:B9:17:9C:FA:7F:2F:2E:73:EE:68:4F:8B:83
Certificate issuer:       /CN=309861f0554a6994e186a70cdf8487e32031ffee
Certificate serial:       738F94F09FDB83B056875869D9EFF500AE89ADCB
Authority key identifier: 30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/4735d6a5-b185-4b15-b64f-0d5131ea71b5.roa
Signing time:             Wed 04 Nov 2026 17:12:37 +0000
ROA not before:           Wed 04 Nov 2026 17:12:37 +0000
ROA not after:            Tue 02 Feb 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        146.162.16.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:8f:94:f0:9f:db:83:b0:56:87:58:69:d9:ef:f5:00:ae:89:ad:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=309861f0554a6994e186a70cdf8487e32031ffee
        Validity
            Not Before: Nov  4 17:12:37 2026 GMT
            Not After : Feb  2 23:59:59 2027 GMT
        Subject: serialNumber=7ad6b3b9ff60852f0238ba5adbda3da760b4615a776250114010e5b75dd9b185, CN=4004ffc2-d53c-4b2c-831b-89e215f51105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:92:a4:da:bb:00:6f:02:0c:98:c4:72:c5:fc:
                    f9:f7:5c:6b:a6:70:c4:42:11:06:dd:9f:bb:66:3b:
                    59:63:69:ad:e1:c1:01:c9:e8:8d:c4:39:e9:b6:78:
                    b8:c3:d1:4e:29:20:f3:28:db:62:10:2e:a5:a2:5c:
                    1d:21:fb:96:cd:e9:eb:d2:5e:0d:fb:99:92:cd:66:
                    61:b1:74:c3:b7:10:8d:0c:d2:7e:90:33:9a:4d:7a:
                    27:d0:97:cb:8d:48:16:6e:e8:06:ed:37:0a:9f:c9:
                    2c:b8:ba:52:52:ff:66:79:ed:37:e9:24:20:34:1c:
                    52:cc:ab:06:fa:85:d4:08:6e:6c:81:e6:23:a4:b6:
                    d8:5d:13:e6:94:1c:b2:d0:f3:d6:76:8b:73:1b:39:
                    7c:49:dd:88:27:27:6e:eb:24:8b:d8:92:51:86:d2:
                    a6:e5:30:3e:c3:9b:70:b4:57:78:64:23:25:37:ef:
                    21:af:d5:3f:0b:0d:17:ec:3b:16:ee:e3:c1:2b:ed:
                    4c:76:1c:9b:7f:b3:a8:09:2f:32:e3:ba:cc:af:fb:
                    6c:8c:5a:ec:e3:80:a1:78:74:4c:fb:b0:92:5d:0b:
                    8c:3c:2d:f4:04:33:e4:3f:c8:83:ae:99:96:26:e4:
                    6f:de:f6:e6:3b:76:a2:2c:bc:f1:6d:20:41:22:74:
                    88:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:BB:0C:AC:3B:E4:4C:B9:17:9C:FA:7F:2F:2E:73:EE:68:4F:8B:83
            X509v3 Authority Key Identifier:
                keyid:30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/4735d6a5-b185-4b15-b64f-0d5131ea71b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.162.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         19:cc:8d:1c:c2:da:17:57:0a:c7:cc:65:fa:bc:43:e7:06:05:
         26:94:1d:94:56:c1:c9:61:09:0a:3e:48:58:e7:58:cc:c2:b1:
         a5:dd:be:1c:55:bb:f7:6b:f3:c0:b9:e0:f3:a2:57:7b:5d:93:
         ce:57:1c:0c:13:c5:0a:50:fa:b8:7b:7e:49:37:7b:99:fb:60:
         59:b5:4d:cd:e0:ec:64:60:8a:c5:d9:e0:60:37:eb:58:9b:6b:
         f9:a1:8c:41:ad:fe:dd:9a:b4:0b:8a:e4:3b:98:51:e8:f4:01:
         20:c3:dc:24:71:71:d5:1a:3b:c0:6f:49:57:1a:71:cc:0d:bd:
         e4:b9:75:78:bd:6a:f8:42:77:49:24:f3:b5:e4:8f:72:70:0b:
         60:64:90:51:18:11:1f:62:e4:f1:1a:ab:9d:28:34:7d:b7:4a:
         b7:74:52:8b:78:a2:b0:52:c1:34:c8:9c:18:aa:0f:5c:ee:7f:
         56:e4:86:e8:75:c0:ac:10:ef:6d:59:cc:a1:5d:c2:7e:37:92:
         46:ba:52:72:8f:44:89:44:5a:3a:d3:08:52:e6:7f:6a:25:31:
         9d:c8:e3:af:62:5e:72:4c:41:d9:87:14:5e:09:65:5d:7b:39:
         98:af:36:0a:d5:44:54:46:6d:1c:a7:38:d7:d8:a0:64:33:20:
         eb:46:cd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----