Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6dee5376-32e7-4adf-a1a0-57aedac04f93.roa
File:                     6dee5376-32e7-4adf-a1a0-57aedac04f93.roa (raw, json)
Hash identifier:          nzhZuP5xQ4TuZ9c1Mp7bGQVepdAwIePLI3y7qbuMgvs=
Subject key identifier:   92:C0:73:E1:A4:B3:12:8D:AC:3E:98:F5:D5:E1:7E:D3:0F:2B:EC:B5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0484CE11903AD31E34D394EA61E78238FA47A89B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6dee5376-32e7-4adf-a1a0-57aedac04f93.roa
Signing time:             Fri 17 Oct 2025 20:10:15 +0000
ROA not before:           Fri 17 Oct 2025 20:10:15 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        216.252.144.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:84:ce:11:90:3a:d3:1e:34:d3:94:ea:61:e7:82:38:fa:47:a8:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 20:10:15 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=58430560b6e7fecf8a60630186f024b7da3252fc17fc3adcfbfa4cf91f51daa1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b3:3d:76:68:05:3a:ca:25:48:bc:1f:70:a3:
                    43:4d:87:63:b7:37:43:e9:fc:88:ac:43:53:24:72:
                    b2:bf:c2:f8:65:ab:d6:c0:d0:b3:d4:70:2e:5e:9e:
                    7f:22:70:4c:30:80:3b:dd:a5:0b:f2:57:be:42:f9:
                    e4:5e:a8:14:a0:c0:cb:ca:6f:2a:cf:a7:8b:0a:d8:
                    74:62:91:85:6f:b8:dd:5b:8e:44:a6:53:f0:3b:58:
                    9f:f9:63:99:20:92:4b:b4:45:d5:3d:d2:8d:01:37:
                    3c:28:87:b7:ae:01:27:87:ac:75:34:f2:0a:51:3d:
                    8d:cd:1e:21:f7:49:e0:ac:ee:1a:ca:38:bd:12:75:
                    77:f5:28:9c:03:a9:f7:43:43:1e:92:a0:60:7a:bd:
                    f5:b7:17:87:18:a2:42:12:0e:46:b0:ee:36:c4:24:
                    47:e8:c3:4b:e3:ec:b4:4b:e6:fc:ee:ec:db:3a:fc:
                    c6:1e:b1:27:67:e8:1e:30:6c:d4:ef:0a:43:c9:1f:
                    5b:9b:89:ab:bb:be:b5:b6:94:c5:e9:eb:80:d0:89:
                    05:f6:7f:31:fc:16:ac:e5:77:f0:ad:93:cc:68:09:
                    b7:09:77:f6:87:c9:81:fe:da:5d:fa:f3:4c:fd:94:
                    20:08:72:70:b1:75:88:2d:e2:a1:51:49:40:06:3f:
                    ea:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C0:73:E1:A4:B3:12:8D:AC:3E:98:F5:D5:E1:7E:D3:0F:2B:EC:B5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6dee5376-32e7-4adf-a1a0-57aedac04f93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.252.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         19:45:c9:e1:c0:c9:66:22:fc:7b:2f:5a:f8:83:b3:c1:3d:0a:
         03:fe:b8:d2:37:d7:21:56:6a:8b:de:70:0a:a5:e9:87:00:90:
         7e:20:80:e8:f1:ee:5d:9b:e1:4a:41:02:33:7b:0c:65:5a:27:
         03:af:b8:4f:74:a8:b5:80:05:5d:e9:bd:b7:b6:8e:bf:b4:64:
         e4:85:03:af:26:c8:f2:15:50:3c:c8:af:7f:6e:13:5f:15:6f:
         67:72:02:fb:2a:d6:2c:e1:76:c7:84:09:c8:ad:d1:7d:05:9b:
         ed:27:15:aa:f3:73:8a:69:b7:d9:8c:e7:68:40:b2:97:d4:3b:
         40:9d:2d:81:ee:de:28:91:80:d3:0e:0f:b1:9a:e7:98:db:03:
         85:6c:a7:ea:a7:ba:94:7b:04:7f:80:4b:d8:89:4f:4a:ed:9c:
         af:b6:f0:8f:46:98:1c:62:dc:95:1f:6e:e6:5f:6b:61:03:50:
         30:a2:75:74:24:ce:93:4f:bd:96:7c:16:c2:0d:df:29:73:b4:
         f5:2e:cc:8e:a8:90:d1:1e:ed:95:6c:9a:c3:37:53:53:65:38:
         5b:87:fb:2e:28:fa:3d:53:03:e4:e1:7e:23:e7:b0:e7:83:5c:
         69:2b:69:99:09:d4:be:56:88:a2:d0:9f:1d:a6:3b:71:a4:aa:
         df:8e:f1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----