Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a9e27ee-b1b7-4c8e-b5cf-0cffc63886bd.roa
File:                     3a9e27ee-b1b7-4c8e-b5cf-0cffc63886bd.roa (raw, json)
Hash identifier:          J4BholKpkzf2xrO5e+m/Nyyd3xr0xvKi2qe2LvHdbKM=
Subject key identifier:   9C:C2:D9:76:6A:54:99:35:A5:DF:59:F1:F9:DF:20:24:D0:7E:16:2B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       036695B36FBF6777790E6B1C473BDC0AE3E15740
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a9e27ee-b1b7-4c8e-b5cf-0cffc63886bd.roa
Signing time:             Sun 19 Oct 2025 00:41:28 +0000
ROA not before:           Sun 19 Oct 2025 00:41:28 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        192.31.212.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:66:95:b3:6f:bf:67:77:79:0e:6b:1c:47:3b:dc:0a:e3:e1:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 00:41:28 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=52f6ebcf3ee04bf928e52d7ca184e6a0c81c616190ed64a216337d81d6fd40d4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:74:da:5b:f2:1a:d4:fe:7b:dc:0d:e6:7f:b1:
                    8f:b9:98:80:96:f0:77:d0:87:17:d2:04:91:9c:43:
                    e7:0a:90:6a:75:25:78:05:6d:56:52:01:64:62:e6:
                    a0:57:dd:8b:36:ac:17:54:fd:8c:63:8e:f2:e9:bf:
                    b1:85:8d:a6:a4:47:2b:ab:7e:36:23:5b:b8:d1:49:
                    c8:46:3d:57:09:db:88:b7:15:02:3d:e9:c1:46:c5:
                    de:a8:e3:0c:86:fb:b1:f4:ea:b4:72:95:69:e7:79:
                    08:e7:ec:5c:e3:79:38:9f:c5:12:3a:4a:67:a2:e0:
                    60:6b:9e:73:9c:b5:c0:da:4d:e4:34:71:0d:53:b2:
                    7f:16:3c:6c:f7:b6:34:41:a0:ff:ac:01:c3:05:2d:
                    df:55:6f:bb:5c:55:45:96:7f:f8:02:ec:83:5a:ad:
                    03:ec:89:9c:d6:89:48:8d:91:ed:ca:93:71:2b:a7:
                    d8:ba:61:aa:bb:ad:1f:bf:af:38:21:7a:55:fc:df:
                    e6:55:06:98:1e:9b:41:b2:8f:cc:75:5f:cd:41:c5:
                    f9:d7:03:b2:76:99:21:6d:60:54:59:9f:e9:5e:01:
                    71:1f:d5:2f:cb:d0:c9:57:86:11:57:72:9b:dc:18:
                    38:c5:d5:23:0f:43:d1:65:38:9d:48:98:1f:48:f4:
                    75:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C2:D9:76:6A:54:99:35:A5:DF:59:F1:F9:DF:20:24:D0:7E:16:2B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a9e27ee-b1b7-4c8e-b5cf-0cffc63886bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:8f:4f:8d:fe:4b:3e:b8:12:12:ef:05:b4:61:4d:07:8b:e9:
         7d:c4:f6:a9:35:e7:fd:71:cd:a5:31:b8:ff:3a:be:39:b3:85:
         c2:ee:b1:c4:5a:11:1b:05:f2:4a:1f:5c:5f:5f:4e:04:1e:79:
         33:a7:e6:a6:2c:81:c7:60:97:ae:9d:d0:e9:3a:b3:5d:b7:e3:
         09:1a:12:fa:e4:42:d2:28:f9:ab:91:a2:f6:ae:eb:24:a2:20:
         90:78:2f:57:8e:5c:b8:10:d4:8e:9f:73:a9:36:9e:d2:6c:0f:
         ba:c5:32:c3:39:f2:1a:2d:66:78:8f:99:9e:d4:79:30:a1:47:
         8c:c4:f2:0d:fe:5e:a1:c8:58:7d:cb:19:26:6a:b8:e0:f0:2e:
         26:26:1e:eb:0a:b2:42:a0:53:0b:5a:97:b6:f0:c0:66:9e:8a:
         85:e7:cf:c4:e2:73:7c:3f:83:25:00:f0:ca:17:28:c4:80:54:
         f7:86:1d:05:e3:61:61:97:11:c9:e1:d8:98:e0:b3:c5:6f:90:
         3b:3d:5d:d8:0f:70:60:f6:d8:12:10:bb:ac:7c:5e:19:ff:61:
         b3:9d:bc:7f:43:8e:56:c7:3c:a4:49:fc:41:aa:e9:72:6a:74:
         f5:97:30:3a:02:04:8a:9b:67:24:17:89:b7:7d:de:4b:61:cf:
         75:2c:84:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----