Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0442e16d-5452-42c4-a7df-67b82dea3ce7.roa
File:                     0442e16d-5452-42c4-a7df-67b82dea3ce7.roa (raw, json)
Hash identifier:          W/ucEis/2IbPN5PYWJ07sK7PiG2JTBA7UVPQ8IU7DTI=
Subject key identifier:   DE:66:D1:5D:4E:EE:1B:91:9D:EB:6C:E5:BC:81:01:C6:6C:AA:5F:17
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       016ED6A048541B16579212ECAA767FCD0511A7FB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0442e16d-5452-42c4-a7df-67b82dea3ce7.roa
Signing time:             Fri 17 Oct 2025 21:06:25 +0000
ROA not before:           Fri 17 Oct 2025 21:06:25 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        204.236.220.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:6e:d6:a0:48:54:1b:16:57:92:12:ec:aa:76:7f:cd:05:11:a7:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 21:06:25 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=d86e2084f8a2f8f9e0a788821a0e3b0bddd753fe7ed62a6358a2412a1403574a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1a:f8:86:ef:84:fc:b1:e6:3d:17:c9:1e:57:
                    10:4c:bb:60:fc:83:40:05:19:1f:6b:91:2f:33:e4:
                    67:77:78:64:e8:e7:63:c8:f3:cc:d9:80:9a:bd:f0:
                    95:7b:bb:b9:1a:7c:46:00:85:15:3b:44:19:69:d0:
                    e3:ef:6d:fe:b1:39:50:bb:67:73:e5:ac:47:16:9b:
                    1f:9b:40:92:cb:4d:17:d7:c0:f7:43:4b:08:80:15:
                    95:91:c3:94:e9:07:f6:59:82:77:8c:52:ad:e6:4e:
                    54:e8:06:d5:20:2b:29:90:bc:01:6b:72:02:7e:52:
                    63:32:88:4d:1b:6a:02:9e:70:cc:df:c4:0d:43:6e:
                    53:6f:fd:19:1a:38:bf:7d:4c:18:9c:52:b5:76:9c:
                    6a:2b:86:a3:2e:cb:49:45:b2:a2:12:b5:55:1c:d7:
                    d0:ee:4a:5b:e7:70:19:8e:59:ef:34:d0:4b:bb:39:
                    95:fa:87:89:73:d0:57:e5:28:a1:1a:ae:d5:55:ed:
                    90:2b:de:01:6d:7f:b0:ef:7d:2a:9a:30:a8:e6:dc:
                    7d:3e:7c:78:86:66:1d:0f:94:a9:bd:c5:e9:99:27:
                    ff:aa:27:08:cb:02:e6:82:13:78:80:f3:9b:aa:f7:
                    a3:9b:09:1f:77:8b:59:43:71:bc:46:e4:68:44:79:
                    b4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:66:D1:5D:4E:EE:1B:91:9D:EB:6C:E5:BC:81:01:C6:6C:AA:5F:17
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0442e16d-5452-42c4-a7df-67b82dea3ce7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.236.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:ad:13:16:a2:8b:ad:8b:c8:ea:7b:e2:80:4f:00:fb:48:82:
         7a:7b:0b:15:73:e6:d3:67:01:da:da:3b:b2:bc:00:89:bb:db:
         34:dc:31:d9:00:1f:de:03:87:8b:44:b7:4e:8a:79:4b:57:06:
         d8:d2:56:d4:d5:0c:83:1b:9b:c3:66:aa:a1:e3:44:96:10:a7:
         bf:c6:83:6c:c2:b9:d9:85:f9:18:3b:92:4e:fe:25:9c:36:7d:
         a5:86:4d:b9:c2:4a:0b:2e:53:61:e7:b8:b2:42:3f:5b:a9:d7:
         07:4d:f5:bc:de:64:28:4e:be:c8:03:76:3a:28:2b:34:51:88:
         19:a7:6c:a3:32:bf:96:c9:de:2c:a0:1f:2c:8b:17:d4:10:40:
         71:07:df:c9:bf:30:4b:fb:5c:cd:ba:a1:39:9d:6e:e6:b5:ad:
         a0:51:a6:6d:50:9a:95:7d:ea:e4:fc:38:76:8d:b3:1f:4f:7c:
         fd:07:b9:1e:ca:16:03:36:3d:6e:75:28:6a:9d:a4:77:df:f4:
         a5:a6:26:fb:8a:7a:2e:dc:85:33:c6:d4:87:d6:d6:ec:fa:c6:
         be:08:aa:44:2f:f3:51:31:d5:1f:aa:74:38:b5:c1:d6:d1:74:
         f0:ac:08:a7:30:de:87:57:86:d4:8e:20:82:ec:04:ff:89:b2:
         b1:af:37:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----