Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81878b4e-555a-43d4-b0a9-a77d4beb38d1.roa
File:                     81878b4e-555a-43d4-b0a9-a77d4beb38d1.roa (raw, json)
Hash identifier:          Xqt65hlBjlkL1nWsIdQHLTh4SsnW1IHeAbOZTN9Vx3w=
Subject key identifier:   C9:AF:73:1B:D4:47:2E:D1:C5:FE:92:1C:F8:D8:16:7F:CD:EE:71:98
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2ADA64869544CD64D6E5140EE77FF98CFD5AF3DD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81878b4e-555a-43d4-b0a9-a77d4beb38d1.roa
Signing time:             Fri 03 Oct 2025 00:42:56 +0000
ROA not before:           Fri 03 Oct 2025 00:42:56 +0000
ROA not after:            Fri 07 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        96.0.88.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:da:64:86:95:44:cd:64:d6:e5:14:0e:e7:7f:f9:8c:fd:5a:f3:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  3 00:42:56 2025 GMT
            Not After : Nov  7 23:59:59 2025 GMT
        Subject: serialNumber=55f24b40c55e3f1f80e70684578b49c7b1137487104685a3dfa2dcc42a6b4767, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c9:45:b5:c6:8d:b4:42:a5:97:81:4a:45:52:
                    f8:19:24:7a:90:e5:18:9f:1c:22:a0:a7:8b:05:d8:
                    35:9f:6f:22:69:f5:cb:02:4c:3d:5d:99:3f:93:cd:
                    c0:e3:e4:b5:ee:29:65:f5:12:5b:d5:16:bb:7d:1a:
                    f6:a8:bd:dc:18:d5:d0:d4:c8:28:1a:2b:2c:78:b2:
                    2d:7e:9a:2b:b5:33:9a:d6:40:5d:8b:c1:fa:23:fb:
                    a2:7d:88:62:f5:fb:f4:03:47:ee:93:4c:89:c5:7d:
                    6d:9b:ac:80:d7:44:6c:ae:b7:bd:c2:3d:58:94:d1:
                    55:de:3e:2d:43:20:6c:ae:92:6f:bf:f7:9a:00:23:
                    f6:70:2c:fc:47:ae:3f:29:96:ad:a9:31:63:61:de:
                    b1:1c:d3:3c:97:c2:cd:a6:fd:bc:ee:76:6e:7a:06:
                    99:3f:90:0d:6e:aa:36:83:2d:d7:76:15:c5:87:e8:
                    23:00:f1:ac:51:06:32:2f:4b:5d:69:9c:b9:d2:4c:
                    54:38:1b:b4:9c:c6:51:a8:64:aa:34:3f:c2:f3:7c:
                    21:67:ba:9f:54:83:e3:4a:d3:b5:fd:93:3e:9f:51:
                    e5:c4:bb:b2:8c:46:05:0e:72:ab:8e:95:5d:72:f7:
                    4f:cd:f9:a0:4f:64:72:a0:f5:a5:c9:d2:47:da:9d:
                    84:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AF:73:1B:D4:47:2E:D1:C5:FE:92:1C:F8:D8:16:7F:CD:EE:71:98
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81878b4e-555a-43d4-b0a9-a77d4beb38d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.0.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:01:5f:33:a2:16:8c:ef:03:2e:e8:f4:9b:8c:c2:df:dd:74:
         12:b7:cc:5d:03:25:04:94:d0:8e:30:d8:23:0c:33:ed:97:73:
         c4:98:f2:b7:b3:9a:57:a8:1c:29:10:df:b5:51:37:3f:4e:e8:
         17:af:79:7f:97:9e:60:d6:85:f5:57:e2:d7:f7:a3:60:79:05:
         11:9e:cc:89:a0:8b:c9:21:4c:eb:97:75:6e:0f:da:2e:8d:1e:
         74:ef:66:1f:a1:3d:9b:49:f5:bc:71:9d:20:6e:22:40:39:d8:
         83:5c:23:72:34:51:ac:4e:20:14:39:d2:0d:98:4b:be:f0:45:
         73:3f:28:60:45:ea:e7:01:7b:f6:92:0a:52:be:30:6c:81:8b:
         b7:fd:29:84:84:05:68:d3:9f:2b:56:ea:09:8f:bb:ec:c0:29:
         39:4b:a0:57:2b:08:6e:4a:84:6b:80:e0:08:82:a8:0f:93:cb:
         ea:b2:14:19:36:67:ba:18:79:f3:1e:4e:17:f1:44:99:75:91:
         01:34:e3:07:77:71:48:cb:34:0c:ee:2e:5c:90:49:0e:40:f2:
         d9:3b:cc:02:44:10:62:f8:56:4b:78:d0:a1:2e:79:f2:86:ca:
         56:4e:68:d7:55:af:6f:35:80:4c:2e:07:bd:ae:a1:bc:6e:ba:
         28:a3:9a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----