Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df685df8-c937-4023-bed8-52f325b9b449.roa
File:                     df685df8-c937-4023-bed8-52f325b9b449.roa (raw, json)
Hash identifier:          bfb94x0XgGuy+pJc3AAdE+6+pPKeLwhXL/COfe9vm2o=
Subject key identifier:   3D:CA:C6:D9:78:F7:5F:B8:00:8A:59:AC:EB:2A:0A:81:5C:7C:17:F4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       714EEEE22D73B1B88B39CD6922F5A00952445868
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df685df8-c937-4023-bed8-52f325b9b449.roa
Signing time:             Sat 18 Oct 2025 04:50:46 +0000
ROA not before:           Sat 18 Oct 2025 04:50:46 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        216.39.136.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:4e:ee:e2:2d:73:b1:b8:8b:39:cd:69:22:f5:a0:09:52:44:58:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 04:50:46 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=114c947dae17cae739590b492442f36842c7f3e6e50d1281a76dda298297f669, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:70:92:b3:36:52:86:57:56:30:cd:38:51:50:
                    41:08:19:ae:e9:b2:e0:6d:cd:b2:df:24:da:04:1d:
                    20:47:14:98:cf:62:62:6a:e8:03:01:8b:42:d7:8b:
                    7d:2b:12:d8:b7:04:45:d5:df:6a:55:47:37:78:30:
                    e0:c5:b5:7f:9c:6f:07:8a:86:e7:5d:c0:ad:dc:73:
                    1e:6d:1e:83:8e:a7:31:37:b4:95:61:1b:98:82:5d:
                    49:15:54:31:8a:3a:bb:03:f7:4c:d5:24:e9:f1:1a:
                    b7:e1:00:fc:1d:29:c2:e9:94:03:4b:ce:0a:47:a4:
                    94:d4:b8:88:c0:6d:ba:da:5c:7d:55:98:c5:0e:22:
                    bd:dd:c3:c2:ad:84:9d:44:8d:da:93:75:96:b3:f0:
                    fa:cb:91:c0:f5:0d:47:a2:90:e5:d5:20:98:4e:53:
                    3f:fb:36:f4:4e:0c:97:36:77:0f:1e:17:bb:7f:1e:
                    db:72:2c:55:3d:26:da:12:2d:41:00:e3:b0:ac:ee:
                    1c:33:5f:fb:f1:47:b0:36:38:62:c4:67:b4:1b:91:
                    31:64:35:6f:20:a1:01:cf:55:6e:07:76:47:0e:9a:
                    81:e5:10:70:94:95:e9:2b:6c:f9:ce:5c:e1:8e:1f:
                    42:22:73:65:94:38:ca:0e:9b:10:7e:e1:30:f9:8b:
                    f7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:CA:C6:D9:78:F7:5F:B8:00:8A:59:AC:EB:2A:0A:81:5C:7C:17:F4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df685df8-c937-4023-bed8-52f325b9b449.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.39.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         62:79:74:eb:23:24:5d:5d:c6:29:f2:31:9c:9e:6a:77:44:dc:
         cc:d7:98:de:87:d4:b9:8f:c1:ba:dd:78:37:8a:0f:9e:71:e1:
         d4:c3:e3:a7:f5:d4:15:8c:72:bc:4b:75:dc:c2:28:7a:25:8b:
         96:df:04:eb:68:03:f0:08:c2:a2:65:a5:19:d5:69:8c:87:44:
         9e:00:e0:cb:c3:3f:63:aa:05:94:36:a8:ba:49:b9:37:7b:a4:
         2e:2f:1c:38:67:d7:4d:7f:c8:3e:56:0e:b7:ed:bf:4d:2b:b0:
         d9:85:93:5f:26:11:23:b7:46:49:ed:d9:0c:86:32:ab:9b:27:
         92:2d:ad:c9:b3:12:c6:c4:c0:bf:0a:02:57:1a:94:14:50:be:
         3c:77:b4:84:9a:68:c7:67:51:eb:41:29:2a:8b:db:83:33:1e:
         59:5e:79:79:f7:60:e1:a5:06:e1:e2:48:d4:36:6e:42:17:3d:
         3a:c9:0a:26:a6:75:d1:fa:b7:77:5a:36:b7:23:fe:fb:84:8b:
         2c:78:40:38:ae:c6:ab:9a:de:71:4c:87:a3:09:82:86:49:31:
         b9:7b:5c:93:0d:98:75:34:a8:17:43:e8:16:e1:33:ea:c6:37:
         27:16:29:e3:b9:a9:20:60:42:b4:21:47:55:b5:b5:73:c5:d3:
         14:7e:c8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----