Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03003920-cbea-43f1-870c-84e084be150a.roa
File:                     03003920-cbea-43f1-870c-84e084be150a.roa (raw, json)
Hash identifier:          1GsXKtxlA3pjVNLPz9Ku3L3J9kvxf6HGenbouI0/JEQ=
Subject key identifier:   9C:0C:2B:AD:6C:69:80:B5:DE:BE:1C:11:17:B8:C9:37:1E:FC:FA:E5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0F0A16D92A5F2AB7E28950A1BFA7767E72656252
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03003920-cbea-43f1-870c-84e084be150a.roa
Signing time:             Sat 27 Sep 2025 00:41:39 +0000
ROA not before:           Sat 27 Sep 2025 00:41:39 +0000
ROA not after:            Sat 01 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        64.252.101.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:0a:16:d9:2a:5f:2a:b7:e2:89:50:a1:bf:a7:76:7e:72:65:62:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 27 00:41:39 2025 GMT
            Not After : Nov  1 23:59:59 2025 GMT
        Subject: serialNumber=435a618b00db4c96a039300fba460e4c01a876e43dd7c6ac2858d1970916b7af, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:db:99:28:b0:78:53:2b:c1:cd:aa:59:87:f4:
                    ba:ac:65:69:5c:25:66:c6:50:04:ec:a1:43:0c:ee:
                    01:5e:7b:27:6d:6f:af:69:b9:36:5d:af:e7:d9:df:
                    23:02:7b:92:09:e6:71:04:7e:e5:38:75:18:a0:87:
                    ef:72:e2:7d:37:1b:3f:77:e6:0f:a6:b4:34:d3:aa:
                    37:28:53:04:b2:d3:a8:df:35:49:29:1d:4c:86:3f:
                    70:df:aa:2e:f7:67:47:46:ed:18:d3:35:3e:3a:73:
                    12:11:89:2c:a1:4f:92:05:b6:1c:f7:7e:5d:6a:fa:
                    1e:c4:e8:c3:3c:1c:3a:8d:02:da:4c:73:fc:5d:c4:
                    43:7f:54:04:76:54:3a:7e:b4:80:7e:52:18:3a:e2:
                    b8:99:e7:34:1f:09:c3:47:ed:f4:18:a2:e9:a8:6d:
                    1e:e5:6d:44:61:c2:f9:16:69:1c:27:61:63:ef:68:
                    94:21:ec:17:fb:85:9f:fc:07:b4:4f:97:d4:ed:1b:
                    8d:ff:25:38:66:b6:95:83:1f:dc:21:34:de:36:ef:
                    1b:0b:63:b0:9e:30:15:aa:e7:a2:e7:27:f3:b9:1c:
                    fd:ed:2e:fe:5b:a0:7d:b1:30:1d:f3:10:0e:b9:bb:
                    b8:8e:83:ea:0c:e8:d4:5a:cb:dc:32:f2:08:31:8e:
                    a3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:0C:2B:AD:6C:69:80:B5:DE:BE:1C:11:17:B8:C9:37:1E:FC:FA:E5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03003920-cbea-43f1-870c-84e084be150a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:d7:22:41:23:0c:6f:e7:46:96:eb:d1:94:09:07:99:f4:c4:
         a9:3a:a0:17:4a:7e:6d:ae:7e:fa:be:d7:b9:f9:84:f4:93:b3:
         3f:3a:a6:90:87:c1:f5:a3:cd:53:8b:9f:6f:a0:68:98:41:50:
         78:d3:5f:34:36:a4:a2:d4:c6:d2:a8:d2:9d:99:3f:a5:6b:4a:
         c1:67:ac:62:61:4f:74:85:fe:a1:8a:56:68:8d:b4:e0:f7:73:
         01:ca:0e:d9:ac:dc:da:cf:8c:83:b3:98:1f:95:89:68:83:29:
         03:1a:7d:ef:bc:f9:44:88:b5:d7:57:61:91:59:cf:6b:cf:87:
         5c:a9:c9:58:27:b1:cc:37:99:fa:c2:00:8a:dc:0c:f0:9f:f9:
         5c:b3:57:c0:48:e5:01:20:c1:94:d6:55:e4:d0:ac:0c:13:c1:
         da:96:31:f4:5a:e7:e4:d4:a4:e3:af:b5:e5:64:e2:ed:44:94:
         47:66:5c:36:1d:42:df:8e:fe:ee:c2:8b:e5:01:e0:34:05:4e:
         8f:e8:fb:f8:6d:10:cc:c8:5b:65:8e:aa:75:c7:56:61:34:c3:
         02:54:7a:0d:3a:5f:b5:22:1b:15:58:dc:20:53:44:fb:fb:a9:
         23:96:8c:09:69:91:a0:a2:3a:42:68:47:a4:ad:7c:0a:8f:94:
         87:ae:83:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----