Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0feab138-4c08-4231-8ce0-8948b0920e06.roa
File:                     0feab138-4c08-4231-8ce0-8948b0920e06.roa (raw, json)
Hash identifier:          fIMRCDDV3WxJg6XzOBNP2RAUmwRPJbxfV9yCNfbEfRw=
Subject key identifier:   3D:15:00:36:4C:07:D8:52:7A:DC:A0:E7:7E:20:36:85:23:77:34:0E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       51C78752BAE9D742B4DE801C039A795A6AD81A85
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0feab138-4c08-4231-8ce0-8948b0920e06.roa
Signing time:             Sun 26 Oct 2025 00:01:03 +0000
ROA not before:           Sun 26 Oct 2025 00:01:03 +0000
ROA not after:            Sun 30 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        209.173.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c7:87:52:ba:e9:d7:42:b4:de:80:1c:03:9a:79:5a:6a:d8:1a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 26 00:01:03 2025 GMT
            Not After : Nov 30 23:59:59 2025 GMT
        Subject: serialNumber=e7040ccf1174430d46e7c7a517733410802d4c0928b621aef2cefb291e800e31, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e9:1a:ea:74:55:1a:d3:98:47:79:a9:8a:9f:
                    5c:38:82:c3:a6:8d:f4:e5:4d:a4:91:ee:26:d3:24:
                    18:53:7d:6b:92:71:d6:6e:37:7b:5a:ad:3a:19:f6:
                    72:b5:23:2e:65:9d:a9:46:75:c8:05:02:7f:54:c1:
                    da:4c:28:ed:a0:55:9f:4b:29:90:fd:db:57:4b:6b:
                    2a:da:82:80:0e:90:b1:84:f0:47:07:d0:a5:fd:80:
                    09:91:dc:f5:0e:a1:bf:d3:af:43:15:92:83:68:2a:
                    74:71:32:d9:01:bc:00:ac:6a:43:5c:de:fc:46:d8:
                    10:57:80:c5:2d:be:89:29:e2:27:fc:78:f7:5b:0b:
                    2d:41:61:b5:42:b1:30:2b:59:4e:19:e3:c6:d9:0a:
                    c2:c7:e4:44:2f:11:a3:74:ec:59:e2:71:27:97:c3:
                    e0:9a:b5:9b:e0:49:41:b2:3d:d7:0a:45:89:76:00:
                    21:1f:2a:f6:35:6c:18:6e:bf:4f:1a:f3:1e:65:32:
                    55:4a:8b:a9:cc:86:21:e4:3a:f2:75:2c:56:7c:69:
                    46:19:a3:a9:8b:63:34:52:69:74:9d:2e:2f:fd:04:
                    46:d3:89:04:34:b5:2f:50:59:31:40:55:a7:88:5f:
                    2d:55:07:f1:2f:a9:1c:56:9f:3d:36:cf:50:cf:d7:
                    dc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:15:00:36:4C:07:D8:52:7A:DC:A0:E7:7E:20:36:85:23:77:34:0E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0feab138-4c08-4231-8ce0-8948b0920e06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.173.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5e:d6:c8:18:99:b3:36:08:1b:50:d0:dc:8b:38:f6:ad:2a:70:
         bc:08:f9:e1:38:80:27:29:df:c4:d9:50:05:64:bd:d2:17:50:
         61:40:aa:81:43:89:bc:90:84:13:cd:aa:8a:f8:54:a6:a0:b8:
         9f:a9:f4:66:11:b8:c0:78:16:34:e0:10:2d:41:6a:45:e2:e7:
         83:1c:47:16:18:f8:92:66:97:fd:93:9a:bf:db:b0:76:bb:b5:
         ef:a6:21:81:ab:31:ed:84:81:4d:54:d1:a6:5b:f7:7a:77:f3:
         79:a4:17:f1:87:7a:4a:99:dc:2d:b2:56:1e:ed:0d:95:ac:4e:
         dd:52:20:81:5c:fa:18:14:ca:6d:f5:d8:44:9a:1b:15:f1:cf:
         e1:f1:ec:8e:b3:ca:3a:52:5b:82:4d:8a:f9:45:61:fd:60:07:
         00:d1:2b:43:60:a5:05:a0:91:6a:80:9b:d6:79:2d:d5:85:2f:
         ca:8f:72:a7:fa:5e:cc:1e:ca:5e:3a:45:e6:00:c3:e8:8b:08:
         fb:59:e1:b9:31:6a:1e:74:67:47:a0:43:e6:e8:07:eb:a3:64:
         87:f3:c0:2f:7f:43:6b:f7:e7:c7:04:0c:73:38:bb:63:a6:ff:
         90:08:c8:68:5f:31:fd:16:b5:79:28:75:fb:1d:2a:36:87:7e:
         91:56:2d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----