Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74a71eb5-552b-47b3-a41b-bfdd426d49cc.roa
File:                     74a71eb5-552b-47b3-a41b-bfdd426d49cc.roa (raw, json)
Hash identifier:          h4ggr3RgaRGXxjOP1fI2nywjBoW/2D3wf2m0vCCwkLY=
Subject key identifier:   83:E8:57:DA:38:AD:98:3E:1D:D9:FC:5B:CC:BF:11:B3:E4:03:E2:9D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6C5F54F0E74BAD034985B042ED50DDA62D48FE7A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74a71eb5-552b-47b3-a41b-bfdd426d49cc.roa
Signing time:             Tue 07 Oct 2025 00:11:48 +0000
ROA not before:           Tue 07 Oct 2025 00:11:48 +0000
ROA not after:            Tue 11 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        136.18.132.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:5f:54:f0:e7:4b:ad:03:49:85:b0:42:ed:50:dd:a6:2d:48:fe:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  7 00:11:48 2025 GMT
            Not After : Nov 11 23:59:59 2025 GMT
        Subject: serialNumber=30f6ddb488dfa949b37d225f6c9639734db819971869a3d6b1c040cf2feabc9a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9c:45:37:60:d3:1e:d8:2a:47:02:30:b1:f1:
                    a0:68:44:50:8e:6b:4f:8b:6a:8a:58:49:ea:77:76:
                    c9:d3:77:91:0e:5a:5d:f2:4d:8c:b9:a4:72:fa:29:
                    25:1b:79:b3:5f:c9:4d:0b:01:94:38:c1:be:20:b5:
                    2f:24:08:9e:de:6c:77:b3:b1:5c:75:fa:f1:f9:f5:
                    bd:6c:9e:d7:43:fd:51:be:19:0a:06:62:92:5b:83:
                    05:23:64:03:12:4d:52:20:a4:dc:b9:27:33:fc:37:
                    c8:49:c6:9e:f7:a9:35:d0:2d:14:8b:e2:8e:54:21:
                    52:cf:56:58:7b:39:f4:bb:1d:df:81:45:45:b1:68:
                    99:89:52:fa:0c:f3:06:68:c3:53:95:c7:e7:f4:8e:
                    f7:e2:60:0f:c2:b7:92:6d:e1:ce:60:94:a8:c3:f7:
                    ed:70:b1:92:6c:d5:54:5e:ca:cf:23:80:77:9e:e7:
                    83:6a:9e:c0:93:d2:96:18:d6:6e:fa:36:b1:77:44:
                    44:23:60:86:cb:e6:de:81:3a:a0:c9:af:70:d3:76:
                    3e:c1:5c:aa:b7:b5:b7:29:ed:d2:0d:af:b4:45:c6:
                    71:a9:8f:6d:6a:a3:59:34:37:e7:2d:ea:d5:a2:2c:
                    a2:d1:4a:be:23:6f:7c:02:83:3d:31:f4:65:54:82:
                    ee:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E8:57:DA:38:AD:98:3E:1D:D9:FC:5B:CC:BF:11:B3:E4:03:E2:9D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74a71eb5-552b-47b3-a41b-bfdd426d49cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:f5:07:ad:f3:ec:a4:df:db:c6:3d:c1:d2:b0:7c:e5:98:5d:
         da:6e:8b:f2:85:b1:c9:db:82:57:f4:c7:2d:58:86:01:91:ff:
         85:e8:8e:a8:7d:1a:87:60:f1:c3:47:bc:dd:9d:25:b2:3f:37:
         18:a8:fe:c5:84:03:f9:b5:8b:63:92:a4:21:b2:6d:e9:af:ad:
         84:44:3c:a8:4c:8d:92:8c:9d:fe:79:94:7f:19:c4:b9:96:52:
         95:4f:4b:9f:fe:83:5f:89:2a:5d:39:a8:80:74:bf:7b:d1:1c:
         13:36:aa:eb:de:b4:1f:8c:5c:d0:28:49:23:81:1a:59:97:17:
         44:e7:0d:ea:63:6c:b1:18:11:56:b9:09:26:eb:0e:c2:21:a4:
         b4:9f:cc:d0:74:7f:41:bf:86:44:5f:13:37:f6:dd:85:1c:a1:
         3a:2e:b3:8e:5b:59:28:fc:b5:0f:af:35:42:78:86:9a:a3:42:
         c5:e2:b4:d7:4d:b3:38:fa:83:33:d4:43:0e:dc:91:09:f6:a6:
         41:41:79:2b:99:8a:ac:7a:a8:06:32:b8:54:b2:9e:5e:37:4a:
         8e:91:8d:79:ce:17:ed:c4:7c:18:dc:e6:28:55:9d:c0:c5:60:
         8d:94:e6:16:3a:78:d0:7b:4f:8d:05:d7:96:43:5d:13:08:19:
         92:ae:31:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----