Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc7fea6f-91cb-4b9a-8d72-70a2aa14ba8a.roa
File:                     bc7fea6f-91cb-4b9a-8d72-70a2aa14ba8a.roa (raw, json)
Hash identifier:          zrjZ3mVAVcnXoRFdzCbSas4Yll7nKn1EU3vKKFKdkcI=
Subject key identifier:   20:7A:37:22:69:46:34:93:71:D3:7B:CA:2D:A4:C3:00:DF:DD:20:F7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6D2E2646B57DE5D8CE7E21F550A881920B29C447
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc7fea6f-91cb-4b9a-8d72-70a2aa14ba8a.roa
Signing time:             Tue 14 Oct 2025 16:40:34 +0000
ROA not before:           Tue 14 Oct 2025 16:40:34 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        64.252.164.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:2e:26:46:b5:7d:e5:d8:ce:7e:21:f5:50:a8:81:92:0b:29:c4:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 16:40:34 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=9d506ae2705376e2cf40ec725ded6efef71815f1f22aa8d850b4eb2992d945e5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5c:b6:7b:78:c6:94:85:8a:a3:08:87:d8:ee:
                    84:a8:c3:87:eb:7f:8f:99:d2:f2:be:aa:10:45:77:
                    c1:07:12:ee:de:ae:ef:8f:62:5f:8e:13:2a:82:7f:
                    ce:a9:3b:23:b1:5e:24:41:01:ed:86:aa:c0:4d:8e:
                    9c:34:55:b6:2d:ef:57:d9:47:f7:a0:eb:d4:e4:d8:
                    0e:64:2c:10:42:53:65:98:01:96:39:8a:96:1a:04:
                    7b:92:91:be:ea:c6:50:70:f2:3e:e0:f3:c2:af:da:
                    5c:6b:3d:13:87:f7:56:56:f5:30:c8:52:b1:04:75:
                    7d:05:8c:a8:da:15:36:9a:11:b9:4f:66:ab:8e:70:
                    c8:5c:bb:65:77:66:92:fd:f1:7e:84:e0:83:52:45:
                    c0:3a:7e:7c:57:11:ed:03:60:02:f4:1c:e8:bd:0c:
                    94:69:8f:88:cb:d2:20:cb:4b:70:8c:0b:55:56:50:
                    20:05:7d:67:e8:44:63:46:f6:f1:8e:7f:00:74:df:
                    0a:cf:89:e4:0a:30:db:b2:4d:e3:5e:71:32:52:b5:
                    2b:cd:1e:b3:e1:d6:2f:4f:90:01:7a:1e:40:03:d2:
                    de:14:6a:a4:63:3d:79:fc:c8:c4:02:ce:ca:c9:75:
                    bb:ae:d1:a8:cf:9b:48:4b:c0:9e:15:3d:ee:0b:c3:
                    6a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:7A:37:22:69:46:34:93:71:D3:7B:CA:2D:A4:C3:00:DF:DD:20:F7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc7fea6f-91cb-4b9a-8d72-70a2aa14ba8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:b5:41:a9:79:c6:aa:34:1f:0f:ba:28:2f:09:59:0b:f8:6e:
         b4:bb:25:7e:82:47:be:b3:59:d0:23:8d:f1:fd:79:9b:06:7d:
         29:f7:fa:7f:70:e4:8c:ae:c2:1c:74:b0:59:cf:aa:21:8d:f2:
         31:73:c1:7c:0f:7c:09:e9:d1:12:60:40:bb:21:a5:e7:bc:4d:
         85:96:b3:cd:5d:9a:5f:79:49:79:e0:d2:21:cb:8b:00:97:b9:
         bc:51:ed:b4:e3:96:de:d3:d2:80:17:a4:25:31:3a:2d:3f:e4:
         aa:8a:c0:00:bc:73:6c:fe:51:07:37:81:07:17:fd:bc:c9:62:
         52:f3:b1:bb:61:4b:ec:09:3b:77:22:de:a1:a8:01:b6:ed:9c:
         69:44:15:ec:64:09:b7:d6:6b:d7:dd:30:70:ff:10:f5:40:35:
         5d:ad:ec:22:5a:80:80:7d:d3:c7:66:d4:a0:77:63:2f:dc:44:
         13:24:c0:34:fa:66:7d:9e:ee:b2:89:dc:2b:90:31:24:42:af:
         60:9c:37:3d:a0:13:d5:0c:bb:dd:16:a9:31:0a:c8:42:c5:ac:
         2e:27:37:7e:fb:cf:7f:fb:c0:8d:fb:5e:f8:f7:63:6f:6a:e6:
         03:23:7c:ea:5c:9a:72:95:c2:fd:f6:98:35:42:38:f3:c7:9d:
         30:17:45:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----