Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ca0e5c9-3e44-405a-a5b0-f596fcb84b9d.roa
File:                     5ca0e5c9-3e44-405a-a5b0-f596fcb84b9d.roa (raw, json)
Hash identifier:          aD9Nj+jYjtjNS1SdN4ZQ60Ypf3c9QSuBQnMdllX6l/4=
Subject key identifier:   82:B7:13:55:3D:F7:18:BD:C1:14:C9:2F:AB:7F:51:64:95:40:86:06
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       51A904E5169D62CF7C4863708009DBD3E15F2EC3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ca0e5c9-3e44-405a-a5b0-f596fcb84b9d.roa
Signing time:             Sat 11 Oct 2025 00:39:59 +0000
ROA not before:           Sat 11 Oct 2025 00:39:59 +0000
ROA not after:            Sat 15 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        216.135.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a9:04:e5:16:9d:62:cf:7c:48:63:70:80:09:db:d3:e1:5f:2e:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 11 00:39:59 2025 GMT
            Not After : Nov 15 23:59:59 2025 GMT
        Subject: serialNumber=3c64d3e225f4e2216d2a06a6977931971a812e1fef44b0910c127431d36f99d3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:a7:ce:26:cd:4c:02:d2:77:bc:f4:e5:8e:09:
                    4e:ed:de:65:8b:f3:e7:3a:cf:70:f5:19:74:7f:77:
                    e8:77:99:05:0c:8b:ae:ff:12:41:d7:7d:58:b3:e5:
                    f8:08:64:5e:e6:43:d3:87:e4:26:ae:0a:65:40:84:
                    30:24:56:03:c3:d9:a1:e1:64:b6:d0:c2:99:1d:fe:
                    bd:f6:ef:41:7e:3a:78:90:bc:78:d7:a6:5c:c0:ed:
                    ed:d9:78:e8:11:1b:e6:ed:69:15:5f:d5:ea:2e:f7:
                    0d:7d:23:f9:0f:71:b7:c1:53:b6:51:25:4c:1c:30:
                    67:9f:9e:f6:30:4d:39:e5:cf:ab:13:19:9c:b9:91:
                    8b:b4:3c:64:b1:e8:22:e6:a3:b7:ad:54:10:04:60:
                    24:a6:96:b4:67:a7:e4:ed:83:54:ae:c2:d7:0f:b9:
                    e3:c4:af:82:65:47:45:05:d0:39:7d:c4:b9:15:0f:
                    43:f2:df:d7:64:e5:c3:13:d2:1e:2a:9c:ab:5c:82:
                    3d:0d:ec:8c:07:e7:1f:61:9b:55:ef:b3:fd:21:6c:
                    11:fd:6f:c8:84:0f:7a:09:ec:23:67:a8:f0:e9:d3:
                    c8:22:70:37:5d:f4:39:45:5d:ff:bd:d8:5b:36:f2:
                    fe:44:46:31:cd:26:4a:78:9d:43:ea:65:49:8b:98:
                    d7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B7:13:55:3D:F7:18:BD:C1:14:C9:2F:AB:7F:51:64:95:40:86:06
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ca0e5c9-3e44-405a-a5b0-f596fcb84b9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.135.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         38:2f:f2:eb:69:42:8c:7d:2d:05:47:95:76:d3:7f:1c:7a:9a:
         0a:ee:c5:a8:c6:46:b1:44:f8:64:40:32:0b:a8:ed:5d:e4:25:
         48:1c:07:66:d3:38:7a:a1:9e:ae:af:bb:58:d3:5c:c4:59:67:
         74:3b:95:78:01:3f:3c:b5:36:c8:8e:1f:91:72:a0:96:f1:10:
         87:4d:69:43:f7:4b:e5:0a:0b:be:84:5d:13:98:55:bd:92:a4:
         d8:5b:cb:9d:0c:ce:17:66:6c:c0:22:af:6e:aa:ea:a5:bc:ef:
         90:cd:61:b5:9a:fc:5c:79:16:de:d0:01:52:24:3d:c5:d1:a3:
         8a:5c:d3:58:43:45:dc:b9:e4:53:e1:99:9d:c0:85:e4:d8:37:
         93:e7:20:c5:f4:10:6e:16:23:2c:83:22:2d:53:51:33:d4:e9:
         45:f4:86:56:55:b0:54:3c:c0:c0:a1:d9:80:1d:c1:26:d4:a6:
         69:3f:63:f8:b5:81:1e:c9:92:a8:fc:d6:8a:fa:1f:31:79:77:
         2a:13:ec:58:3c:53:9f:b9:de:7a:d9:f4:16:cd:3f:0f:0a:e1:
         58:a3:32:22:4c:6b:31:07:29:be:cb:7f:49:d5:8d:4a:c9:0e:
         75:be:36:a5:0f:2d:4c:34:f5:8e:03:70:78:fd:53:ea:65:aa:
         52:9e:1a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----