Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/dd7b850d-7406-49fd-83c6-2404f7a4895a.roa
File:                     dd7b850d-7406-49fd-83c6-2404f7a4895a.roa (raw, json)
Hash identifier:          t2I3xMEzXx4LaxXfgDm1XYKwXJ4TnzRvpP0qqh7pxfY=
Subject key identifier:   BC:79:3E:99:B8:25:3C:57:30:A7:57:A4:A5:36:7C:FD:54:F1:EC:7F
Certificate issuer:       /CN=309861f0554a6994e186a70cdf8487e32031ffee
Certificate serial:       6F03FF7599C3578BB75E85087F948A88FC444F3E
Authority key identifier: 30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/dd7b850d-7406-49fd-83c6-2404f7a4895a.roa
Signing time:             Wed 04 Nov 2026 17:13:19 +0000
ROA not before:           Wed 04 Nov 2026 17:13:19 +0000
ROA not after:            Tue 02 Feb 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        146.162.24.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:03:ff:75:99:c3:57:8b:b7:5e:85:08:7f:94:8a:88:fc:44:4f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=309861f0554a6994e186a70cdf8487e32031ffee
        Validity
            Not Before: Nov  4 17:13:19 2026 GMT
            Not After : Feb  2 23:59:59 2027 GMT
        Subject: serialNumber=c1bf860109e50c7de3ab46ad7b94200fe40f262a11eee665a32a504dd312ef90, CN=4004ffc2-d53c-4b2c-831b-89e215f51105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:99:14:36:9e:31:2d:0a:5c:97:61:f3:38:3d:
                    76:f0:d6:ef:dd:b2:cb:64:06:1b:b1:51:c9:3a:c4:
                    81:b7:cb:9f:76:b8:0b:4f:86:5c:f8:8e:69:be:62:
                    0b:b9:a4:4e:6c:89:8a:51:12:aa:be:c1:ff:66:9e:
                    d8:8c:d0:f4:f0:93:cd:93:f7:b7:39:c4:16:08:27:
                    c0:b2:29:d9:df:46:8d:54:dd:2f:ec:49:22:64:a7:
                    61:ab:de:70:9d:77:60:1b:23:e0:be:61:8c:37:32:
                    50:f2:2b:5d:51:57:d6:49:31:53:d9:ae:01:fd:5d:
                    32:b8:a6:3e:59:60:80:00:7a:63:4b:e6:99:5f:b7:
                    e4:39:20:08:da:10:da:fa:2f:2c:76:f6:41:4c:a5:
                    f8:60:04:3d:65:27:09:98:51:d4:7b:28:09:e8:14:
                    76:61:66:d2:3a:80:ee:f9:0a:75:57:51:d0:73:6f:
                    3d:fb:01:15:a5:08:46:d6:b0:b9:58:c6:d5:86:b8:
                    63:26:48:78:67:bc:23:94:c4:2b:04:11:c8:94:3a:
                    34:8a:88:b3:27:2b:a2:04:60:51:46:ed:68:b3:2c:
                    ee:83:7c:c4:14:cd:c4:f0:87:c1:8a:a9:72:ef:f6:
                    ca:8c:ba:68:72:86:2b:a7:c1:1c:2b:93:6a:2f:f1:
                    fc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:79:3E:99:B8:25:3C:57:30:A7:57:A4:A5:36:7C:FD:54:F1:EC:7F
            X509v3 Authority Key Identifier:
                keyid:30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/dd7b850d-7406-49fd-83c6-2404f7a4895a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.162.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:03:98:f7:b3:fd:00:dd:80:16:d8:a4:c9:8c:26:a3:ce:43:
         61:9e:f3:24:d1:be:6e:d7:c0:1c:c8:8d:e3:8b:be:5a:a0:5d:
         e9:4e:ab:49:ba:52:f4:78:e0:d1:77:4d:98:9d:a8:f8:ee:c8:
         b8:da:b0:0d:26:02:a3:d4:0d:07:90:d0:1f:9e:86:d8:86:5b:
         13:bf:18:36:7e:f4:78:f4:7f:2b:74:7b:d2:82:c4:0f:84:b2:
         95:1c:04:0c:b2:ba:dc:92:82:38:e6:e2:39:95:b5:5c:a8:9a:
         f5:bb:20:97:10:5f:89:9f:b5:b6:5e:ad:2c:55:eb:60:92:fb:
         59:db:fc:3a:7b:7d:b8:54:2d:ff:a5:fe:68:3b:f5:22:73:46:
         de:e5:58:40:7c:f4:28:32:77:23:c8:6e:7e:b8:fb:ce:45:b3:
         98:00:b5:2d:cd:f0:54:37:63:42:02:0c:7b:1b:43:05:83:be:
         a4:17:34:31:4c:d2:a3:92:03:7b:b9:6f:78:d3:aa:25:01:7a:
         80:f3:ee:4f:18:68:53:28:55:b1:8e:a1:aa:a9:b0:bd:a8:17:
         07:1e:13:cf:0f:79:51:bd:78:88:6a:7b:d5:c0:d5:d8:9e:77:
         40:d5:de:bb:92:00:a4:f8:1a:08:f2:2e:82:f2:16:ca:5f:09:
         39:f7:9b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----