Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/591acf32-d365-4f92-a730-b14202d5b086.roa
File:                     591acf32-d365-4f92-a730-b14202d5b086.roa (raw, json)
Hash identifier:          eAnvq/MwdSkzU+N4q0E0kMPhg8aMDnKg+o9MSvTPDQU=
Subject key identifier:   CD:8D:E4:18:C1:19:C1:5A:26:58:15:07:AD:1A:53:D7:2F:21:55:D5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4DE7F68CF24FE89B0646492FB0DDB733B5715503
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/591acf32-d365-4f92-a730-b14202d5b086.roa
Signing time:             Fri 26 Sep 2025 00:01:42 +0000
ROA not before:           Fri 26 Sep 2025 00:01:42 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        129.224.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e7:f6:8c:f2:4f:e8:9b:06:46:49:2f:b0:dd:b7:33:b5:71:55:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 26 00:01:42 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=cfd550ab77e0948f28e4d58fde7a5ef0a6ebdf686c45db82a1b5b03a6c3e69fb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e4:c1:80:dd:1c:af:20:d8:9d:b4:ca:69:a8:
                    9a:af:41:b3:ed:03:45:11:48:44:00:66:09:55:2a:
                    55:7b:f8:55:35:6c:3b:b5:e2:35:dc:0f:68:00:bc:
                    e5:a6:91:af:e1:01:cb:e9:cf:f3:04:ff:94:c6:34:
                    e8:0b:0d:d2:f0:99:9a:e5:d1:4d:69:02:b3:1e:ce:
                    40:ab:be:bb:05:b4:9e:9b:15:ac:40:56:b7:f6:c6:
                    59:17:a9:c4:34:70:db:24:7b:b9:8e:59:b9:4e:ca:
                    64:4e:fa:b0:4b:bb:e5:c9:e1:90:1e:6b:c9:f3:f0:
                    4e:93:f7:55:24:d4:3d:bc:ca:b4:d9:ff:f0:93:9f:
                    65:72:88:20:ee:ef:53:61:f5:7f:81:b8:7a:5e:d4:
                    59:5e:77:87:c0:0b:ac:5f:ea:7d:7f:d0:8b:9a:89:
                    78:ee:77:c6:b1:73:8a:87:18:f8:07:f6:0b:39:80:
                    76:32:b9:ca:b8:ba:36:02:6f:bd:ce:0d:17:dd:22:
                    7f:af:5e:a9:78:6d:11:11:c6:ef:80:59:15:af:fb:
                    1a:35:41:1b:70:42:f7:52:bc:8a:84:04:97:ef:ea:
                    13:7b:a4:93:d8:9f:75:5a:c6:06:77:57:00:c1:37:
                    99:7e:c0:3a:51:af:00:35:aa:b9:0e:b7:e6:88:89:
                    d9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:8D:E4:18:C1:19:C1:5A:26:58:15:07:AD:1A:53:D7:2F:21:55:D5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/591acf32-d365-4f92-a730-b14202d5b086.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.224.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a0:57:48:f1:59:7a:cd:11:6e:11:72:5b:8e:c6:09:9c:fc:ca:
         ce:8b:a8:f7:6a:b0:8d:0a:4f:ef:03:46:70:b5:d4:f1:26:a4:
         9c:46:65:d2:20:46:71:5c:1f:48:c5:2b:87:c6:13:a6:5f:30:
         18:5a:84:e1:fa:8d:af:79:55:40:66:08:ac:f3:fd:7e:ea:2a:
         53:b5:2b:58:d2:85:cf:7a:40:c2:52:fb:2f:2a:fe:07:fe:e7:
         0a:d3:56:e1:ac:77:09:8a:a5:54:0c:16:52:04:5f:4b:70:0c:
         cd:82:20:4f:07:23:6d:c2:89:cf:03:6d:3a:05:44:69:b3:8f:
         57:1e:e8:5b:42:a1:80:45:4d:92:65:c6:31:e6:d0:90:d3:fb:
         53:92:77:74:7b:a7:f9:4c:86:78:94:90:a1:46:97:22:f6:2c:
         f9:0b:f6:01:3f:0d:e6:8f:c5:fe:48:e2:96:dc:3d:1b:4e:5c:
         23:cc:9c:67:e4:45:1e:b7:33:36:df:38:1b:f4:28:86:31:04:
         81:45:1f:fe:d0:3e:e9:10:75:93:9c:29:42:81:6f:2e:e0:51:
         00:9b:62:eb:99:ac:18:0c:2a:bb:6d:4a:b7:f3:f9:ff:a3:12:
         58:88:db:bd:a5:c2:33:c7:f3:fc:b5:81:b5:13:ea:66:f7:3c:
         9a:17:ac:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----