Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d870782-8129-4f82-82eb-4102943f73d6.roa
File:                     3d870782-8129-4f82-82eb-4102943f73d6.roa (raw, json)
Hash identifier:          DaYa5lRCgw1ZD8HS30NUP5rHWSDEK0TQVNk1MmbDxZ0=
Subject key identifier:   D1:BF:38:EE:8C:A6:3D:D4:7F:84:54:2E:2C:8D:A7:0B:DA:BD:CF:11
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7CDBB83291B12C25BE6ED4FC063C7D6AB19E0FF9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d870782-8129-4f82-82eb-4102943f73d6.roa
Signing time:             Sat 11 Oct 2025 00:39:55 +0000
ROA not before:           Sat 11 Oct 2025 00:39:55 +0000
ROA not after:            Sat 15 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        208.118.0.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:db:b8:32:91:b1:2c:25:be:6e:d4:fc:06:3c:7d:6a:b1:9e:0f:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 11 00:39:55 2025 GMT
            Not After : Nov 15 23:59:59 2025 GMT
        Subject: serialNumber=0920f767d8b3fc439d3dfc7bab27bcb08ec8a1ccb59bcf8d7ca12983b551a2a8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e1:08:f5:c5:a0:ff:9c:f9:69:bf:af:33:62:
                    c9:b8:eb:0b:c9:f5:ea:cd:49:d4:12:bf:90:fd:36:
                    21:20:c3:6e:f8:9f:3c:8c:32:17:3d:86:e7:34:31:
                    8a:41:60:71:16:82:66:76:d3:b3:f9:c3:82:82:95:
                    45:d0:93:5c:a2:7a:45:82:8b:25:f7:fc:21:83:d4:
                    b2:b0:b3:3c:f1:5d:9a:17:1e:19:dc:92:cc:36:18:
                    1a:d6:39:62:e2:b0:6b:67:e9:7d:24:12:4c:01:64:
                    54:f3:53:8e:b4:52:f6:b0:12:ee:41:a7:fe:04:76:
                    7e:5b:a1:01:3b:90:94:bb:5f:e3:62:6f:1a:52:8f:
                    3c:25:92:d0:4a:97:fe:85:ad:33:a5:88:b1:bc:44:
                    4a:23:50:26:83:c7:2b:d3:95:c4:ff:f2:01:f0:40:
                    57:d1:5b:ca:07:3d:51:4c:42:2a:37:57:16:77:f6:
                    f5:fb:39:c7:36:17:60:3b:12:a3:30:fd:16:80:04:
                    a4:f2:7f:41:74:6a:86:fa:7f:25:74:6a:fb:83:74:
                    85:97:dd:58:d5:d9:92:d2:3b:01:15:bb:b5:87:1c:
                    85:e8:ce:f9:2a:d8:c9:c2:54:99:fa:a7:8b:77:44:
                    09:d9:ec:25:a5:f4:0e:ca:98:ed:bc:19:1b:73:9c:
                    cc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:BF:38:EE:8C:A6:3D:D4:7F:84:54:2E:2C:8D:A7:0B:DA:BD:CF:11
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d870782-8129-4f82-82eb-4102943f73d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.118.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         24:be:78:d5:a6:3b:08:84:02:51:aa:27:ca:b9:88:d4:65:32:
         6b:79:08:a3:6a:b7:dc:5c:3a:cb:74:57:0a:bd:00:84:19:c0:
         dd:10:9d:23:b4:5c:18:9d:0c:01:c7:f6:05:49:d2:83:30:0e:
         ce:97:9b:67:db:42:6c:ce:2b:e3:69:50:e9:aa:3b:e9:4f:b1:
         b1:d8:9d:65:89:c9:df:79:30:df:06:92:1b:d2:0b:f5:27:4e:
         e0:85:67:0c:f7:b5:f0:98:0a:fb:19:32:0d:ef:75:c7:9d:72:
         55:74:87:c0:d6:00:8f:48:cb:e7:8a:62:1e:cf:cd:b1:3a:d0:
         4e:07:a6:bb:1f:bc:19:54:8d:f8:e8:e2:68:2b:0b:81:bc:ba:
         17:21:92:14:73:49:50:b0:39:69:c6:88:dc:1e:f0:1f:c8:e5:
         67:55:86:b7:ab:a3:14:5d:3b:da:b7:32:19:69:23:d0:6d:21:
         4e:09:4d:c5:fa:fa:83:b5:ce:44:f6:46:80:9c:fc:92:f1:43:
         ca:f9:80:22:2e:15:47:70:db:eb:f7:8c:c0:db:23:d6:4e:28:
         0f:da:3f:47:85:07:51:2d:be:24:84:67:e8:59:87:7c:41:7b:
         f9:38:af:8e:28:cd:72:92:c6:15:32:77:b7:8b:ca:44:b5:09:
         d9:3d:af:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----