Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2c2b85a-6726-4ea2-96e4-d34c1231c263.roa
File:                     b2c2b85a-6726-4ea2-96e4-d34c1231c263.roa (raw, json)
Hash identifier:          lM3Qi+CKGjPXgL2yfh/KVQnhpA84PK5cWJQUVg2u7ZM=
Subject key identifier:   BB:38:F9:2C:40:DD:04:4F:67:5D:71:C1:87:9F:5A:39:1A:D9:29:4E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       552624DA973C86E67C3D894ED068704FC3EB5017
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2c2b85a-6726-4ea2-96e4-d34c1231c263.roa
Signing time:             Wed 01 Oct 2025 00:42:34 +0000
ROA not before:           Wed 01 Oct 2025 00:42:34 +0000
ROA not after:            Wed 05 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        64.91.192.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:26:24:da:97:3c:86:e6:7c:3d:89:4e:d0:68:70:4f:c3:eb:50:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  1 00:42:34 2025 GMT
            Not After : Nov  5 23:59:59 2025 GMT
        Subject: serialNumber=7d08fe3a9ae4662ae3ac8102d07a9deaab44abaf4d9eb5b5504d874d1bda6a7b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5b:b5:8e:7c:9b:06:10:88:6e:04:f1:74:32:
                    5f:eb:3a:47:15:79:49:da:96:c4:09:22:c1:f4:96:
                    ff:a4:ed:83:1c:53:8b:ae:2c:c5:6d:4a:06:5d:63:
                    1f:27:f4:0b:e1:b0:5d:3a:15:26:98:2d:17:e9:e9:
                    cb:58:1e:52:38:6a:20:82:8f:93:0c:57:cf:b0:7d:
                    0e:81:11:8c:6c:b1:85:a3:26:87:0d:c4:ab:99:0a:
                    64:9c:47:6a:44:7d:b7:c2:a9:eb:7d:56:5b:d8:53:
                    aa:45:87:fb:30:d1:d1:be:72:9d:83:0c:35:9a:64:
                    24:0e:a4:f9:7d:40:ef:b1:9d:dc:da:38:8f:b9:96:
                    b4:7e:08:7e:d9:3e:b2:27:85:60:4f:c0:9f:2a:af:
                    df:aa:03:57:fd:8d:4b:fa:6c:8d:d9:14:f6:71:dd:
                    ef:79:51:fc:08:6a:c6:b8:42:22:2e:3f:1f:9c:5f:
                    a8:e1:d7:03:47:04:69:7c:11:f5:ff:c3:7b:59:ff:
                    24:15:49:69:fc:92:fb:aa:41:be:69:e0:28:84:18:
                    c9:c5:86:41:a1:c4:e5:ad:27:f9:b1:68:2a:bf:fd:
                    34:6f:ef:8c:8b:cc:03:d7:c4:99:1b:af:bd:80:45:
                    46:9d:be:83:1d:b3:d4:55:f6:75:8b:0a:40:42:02:
                    ae:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:38:F9:2C:40:DD:04:4F:67:5D:71:C1:87:9F:5A:39:1A:D9:29:4E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2c2b85a-6726-4ea2-96e4-d34c1231c263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.91.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         52:69:31:a3:87:59:e8:f2:d4:b3:99:d3:65:a2:5a:c3:89:1b:
         18:e7:14:4b:a6:23:89:7d:53:26:b0:26:d3:a1:d4:fd:6d:19:
         19:63:53:c2:64:b7:19:27:f1:71:7e:4b:65:a8:2f:f4:6d:55:
         e4:b1:39:0b:e8:ae:67:b6:72:27:e0:ff:f6:9f:ff:96:c9:5c:
         e9:06:a9:14:42:f1:4f:4e:15:c7:76:33:2d:c8:da:1c:b0:39:
         87:88:21:ee:c9:ba:93:6d:68:66:fd:c4:bd:cc:25:2a:ee:f1:
         22:e0:13:9a:14:61:bd:1b:7f:86:83:4c:1c:34:48:79:fa:03:
         40:3a:ce:c4:dc:a7:a7:c2:62:15:48:f5:69:1a:47:55:04:a3:
         f3:18:ca:36:0a:a3:10:93:dc:15:b3:7f:5f:be:02:8a:ca:28:
         64:75:43:55:ca:c0:37:d5:b8:55:67:d2:ff:1e:4c:d5:31:ac:
         b1:d7:dc:df:96:ac:c9:9e:be:33:f1:b1:dc:bd:43:a1:85:ad:
         45:82:a3:6e:cd:fb:c7:ce:f0:3a:a8:b8:e9:e5:d0:97:22:38:
         4f:65:44:58:97:b5:4b:78:9a:ea:19:e3:92:4a:5e:86:be:81:
         26:aa:3d:44:13:8d:b5:a7:06:8b:2e:36:20:b8:25:b6:7b:b1:
         ba:41:12:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----