Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b85564a-7b8e-482c-82f2-955d84a48b12.roa
File:                     9b85564a-7b8e-482c-82f2-955d84a48b12.roa (raw, json)
Hash identifier:          L94xC2ZVqtTd8Ns//TAQgvoDycM2lMgDNZv8l+A1eHo=
Subject key identifier:   36:36:A0:3D:D9:80:8B:8C:FE:8B:04:88:BF:FD:C9:7F:53:6F:01:42
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       02972900E3E2CE07DB133B02123FB5650B7EC4F9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b85564a-7b8e-482c-82f2-955d84a48b12.roa
Signing time:             Sat 18 Oct 2025 05:20:06 +0000
ROA not before:           Sat 18 Oct 2025 05:20:06 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        32.247.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:97:29:00:e3:e2:ce:07:db:13:3b:02:12:3f:b5:65:0b:7e:c4:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 05:20:06 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=9767efeb3191eb8910785663138b6f16a334bd410c4662b612db427a3a90738e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:67:4c:46:be:43:3c:6d:6d:f7:fb:42:bf:c1:
                    10:26:3e:fa:c0:3d:e8:d6:64:06:6d:e5:d3:b6:38:
                    12:cb:de:fe:db:0c:1b:55:78:55:d3:76:9c:df:45:
                    3e:99:68:af:de:39:c1:81:c0:86:06:ba:79:59:7c:
                    2f:79:46:02:65:56:84:6d:d0:7c:37:08:73:da:ee:
                    db:0b:4b:29:9a:40:cc:4f:a4:07:46:83:5f:98:26:
                    27:75:7c:56:39:1f:33:6a:8f:86:21:e5:86:3b:ef:
                    78:3b:e4:1d:e8:1a:19:04:75:e7:c7:3b:81:6f:21:
                    db:bc:51:57:23:40:0e:9e:85:78:d3:0a:11:87:06:
                    5b:5c:0b:50:8a:3d:35:e3:af:64:ea:8b:80:a1:40:
                    ef:91:9f:77:98:bc:ee:93:36:ec:8d:f7:d0:4e:da:
                    65:ac:48:63:23:9b:c4:5d:3b:bc:2b:a3:f7:9b:53:
                    68:45:68:ec:1f:d2:dc:46:9f:94:99:57:06:f3:24:
                    d9:4d:95:fe:de:7e:59:7b:7c:ab:b9:1d:35:69:20:
                    a9:5e:87:4a:d1:b1:c1:a2:64:0e:e7:a6:be:bd:94:
                    0a:d7:91:59:61:12:6d:96:53:f4:91:d3:76:41:e4:
                    b8:d9:f5:a2:c4:f5:9f:f5:26:86:1c:10:a5:49:52:
                    43:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:36:A0:3D:D9:80:8B:8C:FE:8B:04:88:BF:FD:C9:7F:53:6F:01:42
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b85564a-7b8e-482c-82f2-955d84a48b12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  32.247.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         14:e9:d1:61:a9:73:55:d3:5f:c6:35:4f:ac:b4:c8:6c:e7:68:
         7b:fc:22:62:67:8f:64:c1:eb:39:a7:f2:56:c7:0e:ff:e3:9a:
         5d:1f:84:1c:94:4a:15:51:a7:f6:c9:3b:ec:3f:9e:94:84:1b:
         da:53:e5:7d:0e:4e:29:21:3c:c2:0b:f9:dc:bf:34:d7:d9:5a:
         98:40:8a:e6:5e:3f:88:fe:61:3b:9b:08:b9:c7:3e:67:62:5a:
         7b:f3:5e:36:95:8a:e8:d9:96:aa:34:21:38:61:b7:33:66:c9:
         a3:8f:c6:3d:51:fd:b9:0b:de:cb:2f:c4:14:7b:67:49:15:fa:
         59:4f:af:83:c1:68:30:bb:77:50:34:d4:53:a4:93:cb:b3:b9:
         5d:f2:ff:a9:f7:74:1d:76:77:84:25:4f:d5:8e:7e:ce:d3:74:
         41:cf:7a:9f:61:0d:99:00:0c:08:54:fc:c6:d1:06:ad:4a:91:
         f8:43:ba:90:b8:ef:e2:3a:0f:08:3b:79:e6:f8:63:ba:8c:9d:
         ce:7e:c4:82:6c:41:09:53:49:85:d1:82:0e:8d:a8:c8:44:84:
         4a:ce:5e:34:ef:54:06:8b:51:fb:72:7c:50:5d:78:9c:9b:be:
         d4:38:61:f0:ed:7f:18:94:5c:15:84:dd:62:06:c7:5a:1a:86:
         78:5a:62:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----