Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/701966ce-1565-40b2-a687-a900d9178f75.roa
File:                     701966ce-1565-40b2-a687-a900d9178f75.roa (raw, json)
Hash identifier:          7pHe0JHwhhljc6kHmHgns++toqKpCG4ELB2Yp0VJvdc=
Subject key identifier:   A1:ED:AE:AA:CC:81:9F:5C:82:0B:22:00:B5:46:1B:75:E4:25:61:E9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       40C48CB4276B8B622E001F3E4B98641BC559D2DC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/701966ce-1565-40b2-a687-a900d9178f75.roa
Signing time:             Sat 25 Oct 2025 00:31:14 +0000
ROA not before:           Sat 25 Oct 2025 00:31:14 +0000
ROA not after:            Sat 29 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        136.18.18.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c4:8c:b4:27:6b:8b:62:2e:00:1f:3e:4b:98:64:1b:c5:59:d2:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 25 00:31:14 2025 GMT
            Not After : Nov 29 23:59:59 2025 GMT
        Subject: serialNumber=fd3a5bf49f31f11d1c2d7fbeaf115af31621085db3283271c68f2d04549a7598, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:47:56:9a:25:0d:de:ce:4f:c4:d5:a8:6c:03:
                    99:e1:f6:93:df:97:e0:c2:5c:8c:a2:50:59:e0:35:
                    c0:af:9e:e9:4b:73:07:fe:c7:e9:eb:29:e7:44:36:
                    26:d6:15:69:8a:4d:b8:55:8f:4e:52:7f:a9:51:b3:
                    d5:c1:7f:e0:c0:6c:9c:74:c0:b3:34:a1:d1:cd:60:
                    3e:1f:45:e9:14:ff:8c:c8:9b:ad:4b:1b:a2:a1:98:
                    30:91:e6:c0:00:f5:1f:51:d5:6c:78:b7:64:61:a3:
                    73:f5:c4:d5:0d:f3:a3:c7:2e:21:d9:e0:6c:c5:4c:
                    3f:e1:eb:6c:9c:de:b3:da:f1:6d:eb:99:b6:cf:b5:
                    8c:03:20:6f:38:e2:cd:42:0c:d9:26:50:cb:c2:7f:
                    19:6e:aa:63:37:b2:0b:6d:cb:d1:bb:5f:f6:06:35:
                    b3:73:b4:68:00:88:3c:96:99:3e:45:1c:89:87:f1:
                    86:45:de:ca:e4:a8:2e:e2:2f:6d:0b:f0:1d:ea:1d:
                    95:ce:83:70:1f:02:cd:70:76:08:78:6a:46:1d:8e:
                    77:ed:fd:5b:41:16:10:d9:93:64:26:b1:e5:9b:5e:
                    cd:2c:bd:cd:26:7d:2c:40:88:74:a0:88:eb:6c:2f:
                    b8:8a:f2:8e:7b:29:a1:bb:39:df:8d:eb:61:23:50:
                    96:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:ED:AE:AA:CC:81:9F:5C:82:0B:22:00:B5:46:1B:75:E4:25:61:E9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/701966ce-1565-40b2-a687-a900d9178f75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:21:c0:9c:dc:df:ce:48:11:93:ff:03:25:06:25:5f:7d:e0:
         7e:4e:7a:5c:7d:a8:e1:b0:89:15:08:d6:d1:92:02:ea:18:73:
         86:a5:a1:13:b3:b3:3a:92:52:69:5e:71:26:40:91:9b:0e:d0:
         8e:5d:81:d1:65:94:8b:79:be:c0:7a:f2:9b:a6:be:ed:10:60:
         d2:83:20:73:64:45:46:91:d3:58:25:25:e9:8a:44:f1:ee:91:
         d7:15:fd:e3:14:de:da:a7:c3:4e:50:2a:c8:de:86:ba:e8:cb:
         59:e1:3a:77:18:05:4d:4c:34:0c:81:70:ea:fc:f8:42:92:06:
         18:5d:c3:ed:66:8d:9f:54:93:28:10:ce:ea:73:d3:b1:55:f9:
         a2:e5:04:20:83:68:40:22:b9:9e:19:72:44:1a:0e:79:5e:c7:
         e2:18:10:e2:ae:55:b1:2d:28:80:11:79:38:f7:6d:d7:77:07:
         13:89:4c:42:48:82:17:6f:9f:39:48:f3:ab:1f:5e:fd:cc:d9:
         fc:34:c1:dd:32:e9:f9:ed:8e:a1:1f:a8:e3:43:ae:ec:1d:55:
         f9:6c:4d:1d:6e:a3:43:7d:01:2b:76:ad:f4:a2:3b:84:14:7d:
         a7:55:53:00:9d:46:3f:b5:53:ec:4b:5c:c7:45:cc:91:e3:66:
         77:85:23:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----