Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d92e2bca-8c01-4986-8940-5b6d746aa6f7.roa
File:                     d92e2bca-8c01-4986-8940-5b6d746aa6f7.roa (raw, json)
Hash identifier:          0x139VZ4Pa2id3D5GBlFHBeDhgUhLSyDyuK4Sw92FAk=
Subject key identifier:   36:4E:EF:A6:41:48:49:E0:AD:2E:3C:92:C0:55:B7:A3:01:DF:8A:C9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3370C29BA8891B9F6E4615A08FC952395C566B06
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d92e2bca-8c01-4986-8940-5b6d746aa6f7.roa
Signing time:             Sat 11 Oct 2025 00:38:42 +0000
ROA not before:           Sat 11 Oct 2025 00:38:42 +0000
ROA not after:            Sat 15 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        216.80.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:70:c2:9b:a8:89:1b:9f:6e:46:15:a0:8f:c9:52:39:5c:56:6b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 11 00:38:42 2025 GMT
            Not After : Nov 15 23:59:59 2025 GMT
        Subject: serialNumber=34650bd55fa39dd560aa0e50f1c80889c1b631909774eaa231ec2d8b40de7e31, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bf:86:d2:07:6f:45:5b:3c:32:4a:4f:92:aa:
                    ad:4d:62:98:28:42:4f:d8:8d:23:a7:d5:b4:e4:c5:
                    59:f2:e9:9e:1a:fa:db:9a:61:a7:4f:fb:15:7a:c2:
                    25:7d:cc:de:c8:26:02:3b:bc:c6:2c:a6:37:5e:2b:
                    ce:23:85:d8:f9:73:1e:be:d3:2c:d4:d4:f9:fc:c7:
                    ef:01:2f:30:34:2d:a2:d8:38:12:66:11:cd:ce:95:
                    06:b7:f7:07:90:56:68:44:3a:e5:9f:f9:2c:c6:03:
                    a2:3e:bc:f8:9b:a1:b7:fb:72:f9:d2:f4:25:f6:2d:
                    27:0c:61:ce:60:31:2d:c5:13:bf:fe:f3:a4:87:fc:
                    87:af:82:a9:de:65:75:35:34:05:34:fc:63:c9:c8:
                    e3:3e:1a:1c:7f:5e:f1:95:6a:9e:21:c3:f4:69:f3:
                    ab:30:35:55:4c:9a:90:b3:d0:32:ec:44:0a:f1:7f:
                    21:31:33:9b:98:9c:96:49:85:84:e0:53:7c:fb:cf:
                    0f:ea:df:6d:74:a0:52:6d:48:e9:ef:62:14:ec:d3:
                    76:3c:87:a3:a8:f1:24:07:2d:17:47:57:33:1e:90:
                    0e:a4:22:a5:ab:54:87:dc:a1:1d:79:48:76:23:27:
                    ac:d5:e2:91:59:eb:67:18:de:54:cd:b1:11:b1:74:
                    61:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:4E:EF:A6:41:48:49:E0:AD:2E:3C:92:C0:55:B7:A3:01:DF:8A:C9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d92e2bca-8c01-4986-8940-5b6d746aa6f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.80.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5d:6b:b1:f8:5f:49:66:a0:2a:10:ee:de:d3:ba:f8:08:67:b5:
         af:e5:88:d0:d9:3e:f7:3d:75:ce:c1:6a:f3:0d:87:5a:e5:22:
         6d:e0:7f:ae:de:41:4d:df:16:f3:1b:e4:df:19:c7:f4:c8:9e:
         fb:16:4c:9b:26:b1:e1:c6:28:a4:34:2c:d1:2d:cd:c1:a4:b4:
         55:7c:a3:ee:05:0c:56:94:fd:93:83:83:17:bf:19:a5:9b:07:
         f0:72:79:ef:46:8a:fb:57:50:84:69:39:b2:f6:65:fc:61:9d:
         7c:47:2a:85:f2:92:c2:6b:38:ee:75:8b:97:cf:53:c2:11:f2:
         f9:3a:6c:6f:4d:dc:51:77:fa:67:e4:25:1c:70:88:91:65:a2:
         56:6d:d8:89:bc:65:f9:05:88:76:68:f3:a5:c1:ff:81:60:7c:
         e3:b2:4e:94:3c:36:79:d4:35:b7:87:a2:41:f3:b0:ca:24:ce:
         a9:ba:dc:70:3a:1f:06:27:df:a3:88:17:ef:7f:61:79:37:a8:
         9b:a8:44:6b:c8:f4:b6:c0:29:50:49:53:7a:b0:7f:8a:d4:e6:
         2a:3b:cd:f7:3d:74:90:a9:f4:3c:43:f8:d1:3e:68:b1:b0:63:
         87:e5:dc:ae:c8:de:8a:28:b2:e8:9f:31:e8:cb:e3:b1:df:ec:
         65:45:41:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----