Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47451a7d-9c77-4016-a3e5-88cd310f0fdf.roa
File:                     47451a7d-9c77-4016-a3e5-88cd310f0fdf.roa (raw, json)
Hash identifier:          ybCMGFaQtaQZwnSfbdR+Xy0u31gbRmzyIxJULqPD+tw=
Subject key identifier:   3F:AE:85:7E:D9:9A:7E:A8:67:04:E3:25:5F:13:AE:2D:37:23:67:38
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       05DB82B97B6D89EDD094FEEC877B2E69C0EABF07
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47451a7d-9c77-4016-a3e5-88cd310f0fdf.roa
Signing time:             Sat 01 Nov 2025 00:30:09 +0000
ROA not before:           Sat 01 Nov 2025 00:30:09 +0000
ROA not after:            Sat 06 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        192.210.48.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:db:82:b9:7b:6d:89:ed:d0:94:fe:ec:87:7b:2e:69:c0:ea:bf:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:30:09 2025 GMT
            Not After : Dec  6 23:59:59 2025 GMT
        Subject: serialNumber=bf317fcc1eb20506edfaf32b9ce59c80973cb180491fcb3ecaca87308dd938ef, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:57:14:b1:7c:33:bc:68:2a:2f:03:6a:2b:c0:
                    39:d3:e2:3e:44:c9:97:44:f6:1f:b7:de:06:ea:83:
                    43:08:d8:66:84:1e:4c:da:15:c5:ab:ca:de:bd:8f:
                    eb:cd:7a:91:eb:d3:6f:eb:3a:74:be:46:fb:95:b6:
                    a1:3a:29:09:b3:1c:54:51:d4:11:be:fc:73:ac:41:
                    80:b4:fa:91:6e:de:87:20:35:9b:a8:66:85:13:28:
                    68:21:7e:5f:65:24:f9:d9:ce:10:71:15:ca:22:38:
                    7b:17:16:2a:89:03:b0:e1:be:0d:be:f0:25:4e:91:
                    ed:48:5a:20:a3:90:ec:aa:32:4a:39:b5:07:eb:0b:
                    c4:4b:73:de:8d:2c:b5:c4:c9:57:77:29:3f:15:6d:
                    96:69:06:3e:55:5a:92:57:57:16:7c:ad:19:70:c9:
                    cd:da:15:31:eb:eb:f9:c8:93:97:28:5c:f1:49:c5:
                    17:dd:d7:c9:36:e0:f1:5a:a7:ab:6a:6d:ad:68:41:
                    57:64:0d:17:45:35:8c:ce:68:5d:7a:cb:1d:93:c4:
                    ce:1b:b4:57:93:73:63:00:82:77:4e:6c:e9:ff:d5:
                    0e:3d:c8:74:4a:83:0a:0f:bf:b6:eb:e2:3d:7d:71:
                    dc:c6:de:c7:fa:b8:0c:87:78:3a:50:cd:9b:a7:fc:
                    f8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:AE:85:7E:D9:9A:7E:A8:67:04:E3:25:5F:13:AE:2D:37:23:67:38
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47451a7d-9c77-4016-a3e5-88cd310f0fdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.210.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d1:cf:62:cc:e6:83:9f:0c:c4:f2:d6:30:e5:34:19:a4:3a:3c:
         b9:c1:28:0e:47:2c:c0:bf:9f:7b:f9:30:21:21:bb:6b:de:57:
         6b:7d:01:30:cc:e6:22:77:a4:72:1c:3b:96:36:de:b9:6c:db:
         e4:e6:eb:c3:5f:fb:81:6b:63:3a:0c:f4:f8:c9:73:9a:53:5a:
         fa:59:45:a4:60:a5:e2:22:2c:65:12:94:16:40:fd:bc:20:57:
         e2:8e:df:bd:54:a4:13:85:1b:66:bc:39:a8:78:f3:c0:61:58:
         36:39:a9:31:53:c9:05:83:0e:0a:7a:ed:91:5d:77:43:94:96:
         30:14:7b:f0:e1:73:b8:42:a0:81:a7:35:48:07:33:49:86:dc:
         db:b7:aa:20:3b:25:0e:f0:76:86:6f:b9:95:8b:26:2f:22:bf:
         48:28:33:ee:e4:05:8f:7c:e9:8e:98:aa:ba:0e:47:96:9f:d7:
         ce:de:b5:63:a3:54:ef:60:3e:32:cf:c3:fa:42:2b:bb:55:63:
         ee:ce:42:9a:58:c1:2e:6d:b6:7e:fa:5e:56:aa:cc:58:2a:98:
         9b:fd:2c:fb:a8:e4:1c:80:69:67:2c:8d:e1:98:10:52:53:56:
         b2:2f:55:ca:52:1a:c9:22:13:a6:ed:3a:5d:f0:56:39:09:57:
         b6:ba:37:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----