Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/faed96f8-fca4-40e1-8ba4-49ed9b1fbde2.roa
File:                     faed96f8-fca4-40e1-8ba4-49ed9b1fbde2.roa (raw, json)
Hash identifier:          CLrM4pBbaqE1NtfZIQOAD/3h+aKHS60kS3NZ0Ed3lmM=
Subject key identifier:   97:29:D2:92:C3:AC:F1:07:76:06:A6:6C:43:37:42:7A:DE:2B:A2:97
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       02C069E7DF04682D9B7FD66C5FBD54BCBCB55691
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/faed96f8-fca4-40e1-8ba4-49ed9b1fbde2.roa
Signing time:             Sat 04 Oct 2025 00:39:04 +0000
ROA not before:           Sat 04 Oct 2025 00:39:04 +0000
ROA not after:            Sat 08 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        216.36.48.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c0:69:e7:df:04:68:2d:9b:7f:d6:6c:5f:bd:54:bc:bc:b5:56:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  4 00:39:04 2025 GMT
            Not After : Nov  8 23:59:59 2025 GMT
        Subject: serialNumber=80d29dbff50e66b8bdb5ea56bb1a8f33fd39810ee93fc4cfdcc08fccf7c9c43f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:da:95:3b:a2:c0:7b:5f:f2:f9:18:d1:89:
                    e8:33:9e:59:f2:16:c3:38:f0:47:b8:ac:61:f2:f5:
                    a7:31:ef:e4:49:70:77:ef:08:04:44:ea:50:81:f7:
                    ec:5a:28:46:37:8a:11:39:e3:30:38:d6:f3:f8:cb:
                    8f:7a:62:00:5c:7f:f5:83:c4:ad:ae:22:9e:29:74:
                    57:b4:e6:e2:64:d0:48:ca:07:b4:27:ae:2c:8e:5f:
                    7e:75:52:c6:63:d2:35:03:49:8e:6b:87:b9:05:57:
                    ba:0a:b8:29:d7:7f:38:5b:2c:32:22:e3:c1:ea:0d:
                    63:a7:68:57:6f:44:f5:8b:bc:0d:ab:75:66:28:4d:
                    19:18:ca:b1:76:ce:be:ba:54:93:5c:8a:b9:05:fe:
                    6b:eb:df:d4:00:c4:ef:63:3a:25:09:55:7b:37:72:
                    4e:5e:4a:4b:a2:45:ae:8f:d2:e2:0f:7d:c0:97:b4:
                    c4:0e:f2:ff:96:a9:4a:81:90:e5:21:97:43:e5:52:
                    ee:4f:be:69:7c:cb:00:8f:de:e5:7d:b6:a7:f2:28:
                    0b:81:07:3a:b4:44:1d:59:b2:52:93:ec:42:be:e0:
                    a9:da:1d:94:08:70:f6:bc:6f:8a:01:78:a0:38:c3:
                    de:6b:e4:e6:e5:56:58:d4:5b:c5:a0:d3:e8:b9:b2:
                    74:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:29:D2:92:C3:AC:F1:07:76:06:A6:6C:43:37:42:7A:DE:2B:A2:97
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/faed96f8-fca4-40e1-8ba4-49ed9b1fbde2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.36.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         14:45:f9:83:05:89:e8:80:01:02:cf:c0:ef:93:3a:ad:92:ba:
         67:ee:92:8c:c8:9c:5b:7c:ff:78:33:b6:2f:c5:80:c4:81:cf:
         5d:6f:a9:5d:d2:10:9d:03:d0:63:a3:36:2a:99:01:48:25:9c:
         19:c2:fa:4d:62:d4:c4:ce:82:44:5a:50:53:14:27:a1:63:75:
         1c:24:de:1d:01:98:1a:68:b4:dc:8a:56:3d:3a:23:8b:b8:49:
         84:b9:97:d6:9d:44:5a:f3:8b:7c:72:cb:a4:49:ab:3a:89:f2:
         ad:01:0f:7e:f2:1c:7e:e3:cc:a3:a4:0e:2e:d6:89:79:6a:19:
         8d:71:77:fa:7e:b7:99:9b:29:c9:fe:84:b7:23:87:92:fe:7f:
         54:5e:ea:9e:08:39:db:46:fb:ca:cb:4b:d6:ac:1b:7b:f6:ba:
         a2:dc:16:f2:c1:3c:ec:51:53:16:90:27:73:33:f0:e0:9f:ce:
         61:b6:7a:17:f2:69:4a:b6:b3:41:78:dd:7e:f7:dc:be:4c:9a:
         06:1e:5a:78:71:f5:1f:85:89:53:c2:39:e8:88:df:11:9b:dd:
         02:05:89:8c:ed:01:d5:f5:50:b1:91:83:2e:be:1c:bf:bd:5e:
         c2:eb:ad:42:85:63:58:06:2e:ce:11:37:a4:3b:78:86:53:13:
         02:4d:e3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----