Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91d5664a-8248-46da-9cb9-0b09e0fab78e.roa
File:                     91d5664a-8248-46da-9cb9-0b09e0fab78e.roa (raw, json)
Hash identifier:          fVAO+v/Q4DzbOm03Hz71vwdzOpTHU3lx0YN+4XLpXU4=
Subject key identifier:   AA:6D:75:7E:58:AB:BF:69:0F:7D:55:BA:F4:B0:76:1A:81:05:C1:8A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       26488A6F9FCDD60841BDD485A7230BABDCDF8C14
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91d5664a-8248-46da-9cb9-0b09e0fab78e.roa
Signing time:             Mon 06 Oct 2025 16:21:06 +0000
ROA not before:           Mon 06 Oct 2025 16:21:06 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        44.216.200.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:48:8a:6f:9f:cd:d6:08:41:bd:d4:85:a7:23:0b:ab:dc:df:8c:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 16:21:06 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=39f2e92b4613c88b00414924a9fc1dba45be2cf919087608583172bdcfe58c21, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:3b:dd:f6:fd:14:c4:e3:73:7e:26:7c:b0:23:
                    17:54:7d:8c:5a:80:53:0b:ba:39:42:f7:62:c8:c3:
                    fa:5b:55:db:7c:5a:dc:c5:39:ca:af:5f:f5:d1:59:
                    c1:cf:f1:88:e1:ab:ae:7d:12:b1:6d:26:70:7e:e1:
                    f4:ad:70:ba:78:ba:6e:9c:61:a9:b3:88:6a:a8:50:
                    9c:5b:13:10:ab:2d:a6:2c:cd:ec:24:ea:ea:29:27:
                    39:75:7d:2d:85:39:ee:43:78:84:34:80:ff:e2:98:
                    2c:3a:97:7a:a9:21:73:56:c6:03:44:33:90:c9:6c:
                    28:fa:ca:59:6a:7f:a1:2c:57:81:b3:1d:80:ce:51:
                    a2:41:f1:0e:f6:b5:df:68:5e:dc:c5:2b:c8:49:8f:
                    a2:39:ca:eb:62:4e:76:33:71:20:a0:e1:46:7c:eb:
                    5c:da:4b:91:dd:a3:d3:47:05:7c:29:eb:d7:f7:68:
                    03:9f:67:af:af:84:ac:62:42:3e:5a:ee:b9:06:92:
                    e8:60:35:80:fc:dd:19:31:cf:96:e8:19:3b:b6:5e:
                    f9:10:ca:4d:9f:cd:86:a4:cd:c7:85:95:bf:61:73:
                    34:6a:19:02:15:b2:bd:2d:94:29:f8:5b:f2:3e:1c:
                    41:1b:3b:51:d0:37:75:ee:22:24:72:71:bf:ee:83:
                    ff:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6D:75:7E:58:AB:BF:69:0F:7D:55:BA:F4:B0:76:1A:81:05:C1:8A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91d5664a-8248-46da-9cb9-0b09e0fab78e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  44.216.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:10:68:1e:cd:51:7d:3e:b4:a5:66:9b:f7:b7:fe:0d:d2:5e:
         91:ef:bf:24:da:2f:8f:1f:94:34:1f:e9:cc:d6:bf:22:f9:4a:
         c4:24:88:be:94:08:65:88:90:9f:ae:66:9f:6c:a0:2f:f6:97:
         6d:60:36:73:b5:f6:e0:90:4b:c2:06:57:69:ae:f9:b3:05:fb:
         95:9b:93:5c:03:4a:6b:d8:12:0f:f6:c1:bc:93:52:70:fa:fa:
         7e:c1:bd:8d:a4:c8:97:f7:73:45:21:bd:ae:26:b5:f5:57:1b:
         b1:ee:71:a8:6f:1e:12:7b:26:0c:e4:60:60:e5:57:38:cf:bf:
         ea:cb:0a:02:ac:3c:e7:3c:49:4b:b5:11:4a:5f:3e:84:2b:b6:
         00:32:19:ca:e8:a0:22:49:b8:5a:6d:2c:2e:4e:56:98:a8:cd:
         82:9e:f0:59:f7:82:7f:4d:d4:e8:b4:a3:91:aa:f6:26:1d:a3:
         bd:c5:32:91:9a:0b:cb:b3:ae:87:fc:69:bc:18:29:36:63:ee:
         7d:48:70:46:a0:b5:2b:46:8e:3e:ef:3f:39:1d:a1:dd:8f:45:
         d6:56:98:ce:3a:cd:f9:52:bd:3d:0c:3e:ab:d6:20:04:90:fa:
         30:2c:91:2f:16:23:1f:10:25:d4:be:75:8b:0f:0c:d7:63:a8:
         77:b3:07:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----