Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38bc1d9a-dc0a-4557-8f0c-45df0c392516.roa
File:                     38bc1d9a-dc0a-4557-8f0c-45df0c392516.roa (raw, json)
Hash identifier:          ARRMHZTbNumzAtdxy15bu1Sso7Xk2mNu82jlzoRzhEU=
Subject key identifier:   EE:D9:AA:BB:B0:55:CE:FB:15:99:A7:37:4D:94:09:6A:A8:22:B8:D9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       493210655FC6ED775CF3492CBE57F0B3FFC58140
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38bc1d9a-dc0a-4557-8f0c-45df0c392516.roa
Signing time:             Fri 26 Sep 2025 00:42:21 +0000
ROA not before:           Fri 26 Sep 2025 00:42:21 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        86.112.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:32:10:65:5f:c6:ed:77:5c:f3:49:2c:be:57:f0:b3:ff:c5:81:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 26 00:42:21 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=a4ffd357dc90b699e3b69e93197c2cef4a05f7edfc0593fb47aaa7912e1db9bf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:94:3a:b5:5c:ce:d7:f9:0e:77:ac:1f:ab:74:
                    4f:d0:96:7b:55:0f:83:af:d6:73:3a:bc:9a:ae:20:
                    ce:74:bf:37:30:9c:a7:90:69:05:54:78:ea:bc:13:
                    f0:09:66:37:c3:24:68:f6:37:e5:b3:01:13:95:37:
                    71:40:0b:8d:89:5a:d8:e2:ff:be:e1:02:33:47:a2:
                    e5:b0:f4:3d:82:4c:e8:8f:ec:b4:f7:fe:f4:48:4c:
                    31:46:f8:74:ee:73:fd:35:b1:99:13:86:98:b4:de:
                    c3:e7:5e:2c:41:05:77:10:93:6b:9b:e1:44:b7:92:
                    bb:32:7a:33:a6:67:dc:50:9a:8e:44:d1:7a:28:5b:
                    57:b0:da:8e:3a:df:c6:f7:42:fe:03:a6:0d:ba:b9:
                    45:df:79:84:e8:89:40:fd:39:2a:71:56:d8:24:65:
                    8b:2c:5b:64:65:d9:39:af:a7:dc:43:ab:f4:0f:59:
                    e6:51:88:80:24:9b:7e:37:c4:84:d6:07:99:3b:5d:
                    08:3e:25:93:29:0a:7a:25:6b:6d:46:b2:c9:3f:27:
                    b4:b1:3b:aa:84:c8:f3:82:a8:15:59:e6:fc:5d:58:
                    fa:a1:03:5b:c2:d9:cd:72:1c:7e:54:ff:13:bc:39:
                    e7:a1:7a:13:4e:5f:5c:66:45:44:26:de:bc:28:de:
                    78:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D9:AA:BB:B0:55:CE:FB:15:99:A7:37:4D:94:09:6A:A8:22:B8:D9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38bc1d9a-dc0a-4557-8f0c-45df0c392516.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.112.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         a3:b0:2b:48:ee:d6:75:49:54:60:59:bb:6b:c3:a8:6b:6f:9d:
         74:95:32:eb:44:a9:3b:6a:64:dd:c8:92:f0:86:73:a9:45:8c:
         b4:32:01:d5:03:8d:3f:eb:fe:f6:20:9e:4c:6d:4f:41:ea:e0:
         d8:40:56:02:6b:aa:b6:23:b5:03:19:52:6f:30:1a:a4:f6:70:
         5b:a8:a8:63:19:0d:e9:82:6a:e0:ca:52:78:4c:34:e5:65:85:
         c7:0e:ad:8c:83:95:92:d2:9d:df:b4:91:af:15:cf:83:92:18:
         ad:cc:e6:de:e9:1a:1c:36:5f:35:bd:dd:b4:11:ca:59:32:80:
         a6:c4:84:87:a4:5c:e4:e0:fc:4f:72:99:14:95:c8:f0:67:90:
         e7:f6:2a:61:05:3d:a0:8f:6f:fe:41:f5:72:f0:d4:79:55:8b:
         6a:a3:a4:0e:da:60:91:82:f6:e6:ac:78:51:14:8d:4f:ad:f4:
         ee:72:f9:b7:5c:90:ac:16:37:22:e3:ce:7f:f4:d6:84:c2:cb:
         36:b8:36:d0:a5:3d:84:a8:70:a4:d8:85:1c:06:83:93:50:37:
         e4:2a:e9:71:71:64:75:ed:a4:62:5a:b0:bf:f9:81:9b:6b:9e:
         9f:a1:dd:ba:15:ce:95:5b:34:74:ce:c1:44:fd:34:42:43:44:
         fa:7c:b5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----