Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9521470e-60a8-4627-854b-23346de593e3.roa
File:                     9521470e-60a8-4627-854b-23346de593e3.roa (raw, json)
Hash identifier:          ePdQqksRFLjGMpZFcqrh6s/XoacRd/1ChfBCWPud7M4=
Subject key identifier:   D8:E1:0E:46:8B:F8:25:FA:59:91:DD:8A:2A:7B:61:6B:C5:BB:2F:24
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6DE0AB2A2B938A29C72817D5FFC4835F5CD6CC04
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9521470e-60a8-4627-854b-23346de593e3.roa
Signing time:             Sun 26 Oct 2025 00:51:20 +0000
ROA not before:           Sun 26 Oct 2025 00:51:20 +0000
ROA not after:            Sun 30 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.219.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e0:ab:2a:2b:93:8a:29:c7:28:17:d5:ff:c4:83:5f:5c:d6:cc:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 26 00:51:20 2025 GMT
            Not After : Nov 30 23:59:59 2025 GMT
        Subject: serialNumber=a2d0b9ea9f5dedfe80e28ca8d3b66b08244992797e622f78bffd90575af384d2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8c:cd:8e:da:6b:e4:2a:3b:cc:12:b9:81:d0:
                    8c:30:e9:27:3f:66:13:68:a7:2f:0a:8e:56:a0:d6:
                    fa:fc:72:a9:32:a6:1f:1f:f3:87:e9:a2:3c:6c:5e:
                    26:30:5e:19:31:c0:26:af:d1:d7:a7:96:00:ce:76:
                    ac:4d:f5:bb:03:8a:67:d1:c8:45:4b:60:2b:ba:73:
                    03:a4:89:95:6d:05:60:6c:df:c6:7f:24:05:81:02:
                    22:df:a6:8f:3a:a8:e6:c9:f6:76:00:99:95:19:2b:
                    76:65:20:d3:ce:7f:cb:ef:3d:8a:f3:aa:c8:39:ae:
                    77:f5:40:9a:a6:ab:78:2b:3c:03:46:aa:d9:c4:92:
                    5d:62:7a:7b:4e:0f:c3:65:c1:6a:fe:af:d9:08:3d:
                    1d:a6:53:ee:67:e5:23:05:8d:2c:95:95:82:28:a1:
                    8a:14:dd:f8:8e:3b:a3:64:bf:54:5a:02:93:64:1c:
                    0f:b8:26:63:46:be:27:6e:b5:81:3c:df:e8:da:a5:
                    c6:13:6a:74:8f:eb:42:ad:8d:c3:ff:43:30:01:6f:
                    08:67:dd:0b:59:eb:ff:95:28:cd:c1:1b:e9:64:7e:
                    5f:d5:b6:8f:57:07:04:06:48:bc:fd:fa:cd:63:9f:
                    ca:f4:b1:99:dd:c9:8a:c3:75:91:90:f3:03:78:94:
                    68:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E1:0E:46:8B:F8:25:FA:59:91:DD:8A:2A:7B:61:6B:C5:BB:2F:24
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9521470e-60a8-4627-854b-23346de593e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.219.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a4:79:43:6b:3d:fe:b9:6b:7a:d1:27:8b:de:c3:a9:c7:46:00:
         12:53:ab:7c:72:69:cc:ef:29:cc:09:49:3e:a9:a8:db:ad:9a:
         4c:2e:02:68:bd:05:97:d7:ae:6f:bc:42:8e:c8:46:9a:c2:5d:
         9a:f7:a5:76:ca:2d:46:80:ef:d3:da:ab:1a:74:15:73:62:fe:
         db:85:ed:5f:19:90:4f:96:da:12:86:a2:03:47:a8:1d:f5:37:
         07:3a:5b:95:0e:f5:73:2e:d2:4a:3c:9d:a3:59:06:8c:ca:2d:
         ab:88:85:88:6d:57:07:8b:f2:13:43:68:e7:a5:d5:77:c2:cb:
         12:19:c1:5e:77:a5:8a:9e:9b:15:c3:2d:47:ec:f4:65:94:b5:
         88:7f:b5:5e:52:04:bb:db:43:f6:6b:a0:c0:34:16:a4:8e:76:
         a1:3b:3d:53:8a:3e:ab:1f:24:17:e4:c5:65:39:b8:50:d3:e4:
         87:35:e2:72:10:20:ef:72:9f:11:f7:ed:d8:3a:7b:9f:ae:f5:
         5c:5b:d4:22:30:8d:a4:ac:7a:97:56:0a:23:95:a6:ae:a2:a7:
         40:f8:f2:e0:91:cf:c5:fb:4c:6b:a5:58:32:b8:16:06:43:df:
         20:a7:c2:62:b1:9f:55:49:c7:6c:36:2a:c4:8c:2f:6b:cd:f4:
         65:ea:1f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----