Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6953702a-f8c1-4bc6-af6d-59ab3157d20b.roa
File:                     6953702a-f8c1-4bc6-af6d-59ab3157d20b.roa (raw, json)
Hash identifier:          h48o4NhGCNI3efAB/R05bC2wI2v4Ou9f7pSXgq6BY1g=
Subject key identifier:   92:DE:29:CD:E6:8C:4D:44:7C:85:0F:19:07:B2:64:9E:56:9B:02:BC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7366202545BCABE66F75EFB647F5E34FB00817FA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6953702a-f8c1-4bc6-af6d-59ab3157d20b.roa
Signing time:             Fri 03 Oct 2025 00:01:28 +0000
ROA not before:           Fri 03 Oct 2025 00:01:28 +0000
ROA not after:            Fri 07 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        136.18.4.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:66:20:25:45:bc:ab:e6:6f:75:ef:b6:47:f5:e3:4f:b0:08:17:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  3 00:01:28 2025 GMT
            Not After : Nov  7 23:59:59 2025 GMT
        Subject: serialNumber=33ff90c9bd3aacf4a9a2c587bb8c3c6819376a5a39d9f23830dabe698edbcaa5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c5:ff:86:43:2a:8c:e7:26:ce:12:f4:99:41:
                    dc:e6:54:9f:be:55:8b:94:b4:c1:87:b1:58:61:ec:
                    fe:15:f5:a0:51:a4:06:27:96:71:01:7b:f6:5a:be:
                    ab:2c:a0:42:d6:78:bd:f4:37:8b:b0:e3:a7:f8:ad:
                    5d:38:c2:82:2f:de:0e:5b:9b:e0:7c:14:a2:03:9d:
                    c0:ad:7f:be:ec:bb:5f:85:e5:13:06:13:f9:d4:97:
                    9e:d5:c5:9a:9b:55:4b:42:2b:47:e9:b5:f0:3c:40:
                    d9:d8:91:5e:a3:65:15:3a:95:21:1f:77:20:7a:b5:
                    7d:a9:a8:2c:30:69:02:d9:3c:9e:25:6a:74:d7:13:
                    63:3b:fd:46:7c:b1:36:bb:0a:4c:81:d1:d8:79:42:
                    64:4f:61:b1:f4:87:d9:ec:46:34:fb:ee:8c:2f:e9:
                    9d:00:6d:7a:09:d7:ec:02:6b:3d:b2:a1:e1:f4:6e:
                    70:1f:66:70:0a:e6:2b:0a:a9:c0:5d:a5:32:84:cc:
                    ec:49:a4:11:83:22:2d:c5:7b:1c:d4:e4:9a:21:94:
                    5f:82:65:79:9c:c8:4d:f8:49:a7:f5:03:df:82:9e:
                    c5:6d:18:d8:58:ad:f1:c4:38:53:28:11:9f:26:5f:
                    d2:99:63:14:1a:95:cd:ca:12:23:e0:d4:43:16:2a:
                    ba:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:DE:29:CD:E6:8C:4D:44:7C:85:0F:19:07:B2:64:9E:56:9B:02:BC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6953702a-f8c1-4bc6-af6d-59ab3157d20b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d9:67:1a:8e:7f:7b:d6:d3:9d:40:e9:25:d9:82:e7:ad:8f:3e:
         77:f7:07:5f:df:b9:89:05:4f:8b:3a:75:75:65:ae:7f:ea:03:
         f5:a9:85:62:61:59:d7:c9:ad:4f:fb:05:48:d1:29:bc:97:54:
         7f:f7:ad:be:a3:9d:1a:44:59:07:34:33:35:1f:54:e7:23:d6:
         12:d2:c1:08:5e:61:55:37:14:48:05:38:ca:f6:c3:20:81:fd:
         39:76:8d:ce:9e:33:81:fe:91:d8:55:f4:30:a8:7c:50:a9:a2:
         14:1a:df:ea:72:3a:66:5c:a5:20:06:e9:6c:c1:23:8d:4d:2f:
         5b:14:76:25:53:18:15:b4:1e:37:e7:e7:ad:f8:59:f4:47:86:
         6a:06:b7:f1:5b:00:8c:08:a0:b0:8d:06:d3:7b:fd:e5:35:2f:
         f6:bb:3a:14:1a:07:b0:ee:bb:6e:7d:80:36:8d:6c:83:33:51:
         ce:a1:00:24:b9:aa:f5:cf:a2:13:34:e2:79:b6:02:87:21:13:
         ab:f3:e1:3a:c2:76:2d:c6:8d:c0:2f:80:e5:c0:a8:c7:98:8b:
         cd:32:86:07:79:d9:e9:af:bf:75:d5:ef:72:2f:84:45:76:c3:
         0a:84:1b:60:40:ac:c3:16:86:87:db:5d:9b:c1:92:c3:dd:ef:
         b9:5b:4d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----