Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86ef4bdc-4721-4e14-81a3-9b9f9374a046.roa
File:                     86ef4bdc-4721-4e14-81a3-9b9f9374a046.roa (raw, json)
Hash identifier:          mKpsqa9aBbMlkECzLJ+6O7l+eL9BB3N/iwxb3+jOdJQ=
Subject key identifier:   BA:3A:6C:57:EC:2C:68:DB:89:A7:7E:5C:4B:DF:56:16:F6:47:AF:6C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       25B96CBF8A46E82E0F7EC0B01C49818012BDB931
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86ef4bdc-4721-4e14-81a3-9b9f9374a046.roa
Signing time:             Sat 11 Oct 2025 00:41:54 +0000
ROA not before:           Sat 11 Oct 2025 00:41:54 +0000
ROA not after:            Sat 15 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        64.190.122.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b9:6c:bf:8a:46:e8:2e:0f:7e:c0:b0:1c:49:81:80:12:bd:b9:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 11 00:41:54 2025 GMT
            Not After : Nov 15 23:59:59 2025 GMT
        Subject: serialNumber=7b8de0757b7d06870f1a222793d6680bc800fe0f8954261a46dc98a8495e3b22, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d1:7b:19:e6:14:03:0d:86:c0:a1:c1:52:39:
                    1f:fe:fa:42:cd:1f:e5:e3:48:48:55:a4:10:2d:97:
                    82:2c:26:cb:84:be:64:76:d9:aa:8b:11:36:b0:2f:
                    f7:c3:64:13:6e:e5:2c:28:be:a5:61:15:31:ac:97:
                    fb:ca:19:24:09:26:09:a6:ba:b4:b0:03:71:bb:94:
                    f2:c5:90:6d:da:d6:8d:ca:1e:e8:da:9f:17:d7:7c:
                    ec:fc:da:cb:60:89:da:bd:88:b8:38:59:9b:b7:51:
                    5b:e7:2d:fd:4a:38:e9:f5:d1:5b:b3:80:78:e5:3b:
                    83:e1:66:61:84:8d:d8:1e:f0:b6:78:78:3d:b1:2d:
                    17:ce:1b:b9:8e:35:1c:98:19:84:56:f0:89:76:af:
                    09:f6:55:89:7f:a0:7e:2c:84:e4:9c:dd:a5:8c:31:
                    02:af:35:43:4f:9c:21:f2:1c:9b:ff:50:70:58:d5:
                    89:2d:a7:67:90:b1:78:17:5c:61:40:e5:b9:27:6d:
                    cc:ac:51:84:8b:a4:46:b2:57:39:99:03:59:41:55:
                    ca:ae:fb:73:40:b1:ac:38:df:81:d4:6c:1b:21:c5:
                    c3:38:6d:bb:6a:81:92:d2:1d:cb:83:34:18:4f:ed:
                    39:d7:fb:19:7e:13:98:de:bf:ab:71:37:8d:94:b9:
                    16:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:3A:6C:57:EC:2C:68:DB:89:A7:7E:5C:4B:DF:56:16:F6:47:AF:6C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86ef4bdc-4721-4e14-81a3-9b9f9374a046.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:f7:5c:12:1c:f0:e3:97:48:ea:03:9a:24:12:77:a0:ee:bd:
         81:f2:97:9b:33:e5:34:05:c9:f9:f4:15:7f:27:bd:22:80:81:
         b5:f6:95:a0:9e:d1:6d:16:7d:7d:56:f5:0a:40:e4:9a:ad:8a:
         a9:8e:b8:d6:8d:5a:4e:93:34:1c:1f:5d:c4:34:4e:4c:71:e7:
         5f:1d:de:23:d9:0a:a8:62:51:4a:4c:f7:0c:f9:00:a7:88:26:
         8b:20:c2:9a:14:79:08:70:c9:8f:73:12:c9:04:f8:f0:84:6b:
         5c:1f:f7:1b:29:ae:c7:49:31:86:8c:d7:39:7b:4d:62:40:78:
         99:97:b8:8f:1b:5a:3b:f8:be:ea:e5:42:7a:65:6c:85:34:14:
         77:94:c6:e5:e5:d1:e3:05:6d:fd:27:33:24:5d:78:e3:53:9d:
         50:f2:2a:d8:12:5d:6b:7f:33:36:a3:a6:90:c8:7d:be:a4:dd:
         35:0e:08:87:c8:d3:3d:43:37:f3:75:7a:60:06:a7:6f:c6:13:
         f9:78:41:01:19:07:27:08:7d:a8:67:b3:90:df:35:b1:4c:b9:
         82:39:94:fa:fd:31:7a:41:10:b1:97:78:c8:09:ae:5c:c4:72:
         70:5e:04:d7:72:c4:c9:6d:09:df:65:20:2c:ec:8a:95:20:eb:
         af:98:c8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----