Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eca8d020-6b05-4657-b554-a1e2c094a6db.roa
File:                     eca8d020-6b05-4657-b554-a1e2c094a6db.roa (raw, json)
Hash identifier:          GyLgvyDGOwFffyM6tPFH3MdCc6Ft2dCwcH3NO/cQUR0=
Subject key identifier:   F9:BC:F5:02:BE:76:C6:88:57:DF:EE:E4:48:C3:81:75:79:52:4F:CA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4F858E3C483E9BE3BF0FB85DD5575565FF7C3512
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eca8d020-6b05-4657-b554-a1e2c094a6db.roa
Signing time:             Sun 19 Oct 2025 02:51:34 +0000
ROA not before:           Sun 19 Oct 2025 02:51:34 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        69.0.218.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:85:8e:3c:48:3e:9b:e3:bf:0f:b8:5d:d5:57:55:65:ff:7c:35:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 02:51:34 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=b22a160ad0a28abd96ae273f918b07c3fe5170174e9d737746b882f0a65a558e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:65:06:8e:f3:9b:87:cc:b5:45:7c:30:c2:d3:
                    9a:f2:44:64:f3:a0:51:b3:a3:71:33:2c:cf:23:f4:
                    35:55:2e:0f:d7:62:f2:0c:1a:9c:96:12:57:d6:d2:
                    77:ca:79:67:b5:9c:bd:a6:e2:ca:65:9b:6d:7d:1f:
                    1c:4b:2a:de:61:65:85:45:d0:02:cd:91:e2:88:43:
                    bc:48:a5:17:cd:9a:8d:fc:d3:5e:e0:62:2f:db:96:
                    4f:3f:6e:ea:ae:dd:24:9e:79:e5:81:63:8b:2b:42:
                    ea:a4:f0:81:f0:9b:09:2a:55:85:2b:52:76:c5:88:
                    07:10:ec:27:68:7d:e2:e2:33:de:28:4a:59:a7:2a:
                    66:0e:af:96:90:eb:da:f7:a1:32:2e:67:f8:c5:e1:
                    10:2f:02:0f:10:e2:df:83:6f:1e:b0:61:51:22:8d:
                    6c:97:f4:ea:94:57:98:9b:72:b8:1f:d0:51:e9:cf:
                    2e:00:36:1e:dc:9d:a1:59:1f:02:ba:f9:14:ab:2c:
                    aa:f2:0d:68:b2:01:08:35:5b:2e:6b:75:87:d2:43:
                    ab:71:50:35:4b:00:fa:a6:7b:7a:eb:23:24:7b:d5:
                    ad:92:c3:db:ec:14:cd:00:bc:7f:d1:f4:15:ff:81:
                    1b:38:81:cb:fc:bd:01:63:15:52:23:ae:82:ba:18:
                    e4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BC:F5:02:BE:76:C6:88:57:DF:EE:E4:48:C3:81:75:79:52:4F:CA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eca8d020-6b05-4657-b554-a1e2c094a6db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.0.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:d7:ba:0f:46:66:48:35:40:de:51:71:f3:64:a6:71:1d:20:
         a4:b0:c5:73:1e:c8:5c:b1:a3:ab:fb:cd:b3:21:88:58:4c:62:
         bf:90:bf:1d:e4:75:1f:13:f1:5a:c0:7c:fa:50:62:af:8e:d0:
         72:06:75:97:c0:1c:02:a4:e2:c0:73:32:78:1a:9e:a2:e9:1c:
         82:87:7b:af:71:24:e3:73:8d:bb:b8:5f:ab:db:a8:1c:16:5e:
         46:cd:3a:f5:c4:4d:a7:a9:5e:7b:d2:79:91:d7:43:f7:38:b1:
         ac:5b:ee:9a:f0:dc:9e:ef:1e:f9:23:34:b5:f6:d4:8d:3f:ab:
         17:55:41:d8:78:7a:5a:d9:0e:3b:b4:3f:f4:7e:12:45:f4:44:
         0f:1b:99:f0:cb:8e:de:15:25:1f:8d:cc:e4:58:b5:42:63:e0:
         d7:8a:62:c7:fa:ce:26:70:60:2a:00:9b:07:6f:13:24:54:1a:
         5b:0c:27:e3:eb:79:3f:c9:29:48:eb:60:26:a0:36:32:c3:24:
         21:44:e6:e6:a9:b5:d4:4e:4d:ea:61:0b:c0:56:72:f9:d5:d7:
         3c:0b:56:43:06:7a:8e:ef:68:14:64:38:3b:5b:0a:54:f1:67:
         5d:7f:7a:c4:bf:9e:dd:85:4e:63:c5:3c:35:16:5c:df:12:3b:
         c5:61:b3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----