Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d98cd23-1c47-4e92-97d3-1cc1b17b82a4.roa
File:                     7d98cd23-1c47-4e92-97d3-1cc1b17b82a4.roa (raw, json)
Hash identifier:          Kbimip5r4aAiUw2WKK7cy1TcbxlSnZBANxGuj6RNH64=
Subject key identifier:   B4:AE:07:46:87:F6:17:80:22:B7:B1:D0:0B:84:1D:E1:F8:FD:34:93
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       358E8B74C66CA5585DBDAE78A22CEA52893A2BA9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d98cd23-1c47-4e92-97d3-1cc1b17b82a4.roa
Signing time:             Fri 17 Oct 2025 20:20:07 +0000
ROA not before:           Fri 17 Oct 2025 20:20:07 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        204.236.218.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:8e:8b:74:c6:6c:a5:58:5d:bd:ae:78:a2:2c:ea:52:89:3a:2b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 20:20:07 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=84340eb19eec94236d18baaab6846fa9be2e5f9d20db11042540cff7a2b2a817, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:da:24:b5:82:c4:4d:19:63:5d:dc:5f:e9:f8:
                    7b:3d:87:f6:53:52:3d:46:00:28:96:66:58:0d:bb:
                    a8:31:93:08:2e:5f:3b:78:92:65:bd:72:18:ce:3c:
                    bb:e8:36:9b:13:17:29:f4:7b:d5:77:cb:11:24:f8:
                    9c:8b:32:a9:63:ab:16:97:69:6a:32:f6:f9:17:f6:
                    c3:d4:3b:bb:8d:24:ab:42:5c:bc:39:d9:18:c9:ff:
                    b0:a3:d4:e6:63:85:e4:92:f7:5d:08:ff:4d:92:fd:
                    15:c3:4e:df:72:1a:7d:11:ed:c7:8b:4e:13:fe:ed:
                    11:04:6d:59:c8:39:69:1f:c1:97:bf:b2:cd:c7:18:
                    f0:05:4f:c1:01:55:39:c4:68:c3:fe:38:43:5b:11:
                    40:43:a0:45:ac:e5:a1:de:8b:8b:dc:f9:1d:d8:0d:
                    a5:94:00:bd:f8:6e:7a:80:6e:6d:2b:c9:45:0c:0c:
                    9e:2d:17:20:c0:7e:a0:a8:08:68:8b:c1:71:ed:77:
                    3a:4a:17:51:9a:1d:58:1f:d6:be:a7:1e:1a:c5:e3:
                    ad:44:02:59:a4:3d:03:ae:da:01:27:6c:f8:a2:f2:
                    61:81:67:7e:6d:d9:58:ae:a3:e1:cb:72:14:6b:59:
                    23:5f:26:9c:7e:df:11:44:4d:78:5e:14:f9:ed:4e:
                    b5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:AE:07:46:87:F6:17:80:22:B7:B1:D0:0B:84:1D:E1:F8:FD:34:93
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d98cd23-1c47-4e92-97d3-1cc1b17b82a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.236.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:52:ac:f9:8b:df:06:ce:42:72:3c:5b:ea:93:e7:b2:de:ef:
         68:88:ea:58:d0:eb:e7:eb:6c:cb:98:4f:68:8b:36:e4:48:bb:
         56:f8:37:af:69:7a:c6:f6:94:a5:d9:48:f0:a2:03:7f:31:bd:
         e3:20:f0:39:44:a4:f9:71:89:78:01:a8:36:2a:3e:cd:29:3e:
         c9:84:60:af:4c:1b:49:d1:12:9b:05:10:23:26:aa:2e:23:e6:
         4b:4f:c0:5a:02:1c:f9:78:31:9a:68:a2:30:95:28:96:06:13:
         72:ca:0a:2e:93:88:af:90:c3:2c:8e:b2:d0:08:4f:72:a0:b4:
         ee:33:eb:aa:a2:10:88:a6:85:44:0b:0a:8e:ce:fd:06:8f:d7:
         2d:43:5b:fc:2b:54:74:4a:c8:07:74:8e:41:38:bc:40:ed:93:
         fa:bf:d1:74:d8:aa:53:60:f0:9f:85:b9:8d:77:39:ae:e1:f8:
         0e:96:ab:f5:3a:62:50:e9:ba:75:93:e0:be:55:c5:7d:2d:fa:
         8c:0e:84:11:f9:d8:64:be:ff:bc:f5:b0:cc:a1:be:17:fe:76:
         cd:a8:78:b4:af:9f:95:0f:70:7e:65:75:e8:99:16:03:9e:53:
         00:d8:53:aa:48:77:b8:0e:d7:e7:fa:26:4c:f1:6f:ae:7c:89:
         b1:16:8d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----