Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ada0f91-4f35-4189-b9db-6208680650ff.roa
File:                     9ada0f91-4f35-4189-b9db-6208680650ff.roa (raw, json)
Hash identifier:          +0KJu5M623LvnbdsQTBy2EFCh2HxEbaqa3iyj8TMclE=
Subject key identifier:   CE:33:9A:24:8F:C1:A6:C3:5F:A7:A9:02:83:E7:6F:73:FF:37:0D:DE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5F3703F5FBC93302E0F41A089EE5C3EF7585D2A0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ada0f91-4f35-4189-b9db-6208680650ff.roa
Signing time:             Tue 28 Oct 2025 00:01:00 +0000
ROA not before:           Tue 28 Oct 2025 00:01:00 +0000
ROA not after:            Tue 02 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        136.18.2.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:37:03:f5:fb:c9:33:02:e0:f4:1a:08:9e:e5:c3:ef:75:85:d2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 28 00:01:00 2025 GMT
            Not After : Dec  2 23:59:59 2025 GMT
        Subject: serialNumber=548830c86406f602584c274032eb9e27aadbaa29f4d99eff1edc6e83314ac0db, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ba:01:14:51:4f:49:91:64:a0:11:a5:de:a4:
                    0d:2a:3c:03:f4:92:39:55:8a:62:8a:6e:22:70:7c:
                    76:93:b7:0f:a3:8e:c4:db:14:5b:c1:f1:9e:da:a9:
                    a5:d3:a5:f5:3a:fb:f6:d0:35:54:1e:20:d7:c0:e7:
                    dd:17:12:62:ab:4f:b2:0b:89:68:54:62:6f:d9:d1:
                    97:9a:79:77:49:16:4a:22:8e:94:a6:2a:16:e5:07:
                    2e:e4:dc:8b:7d:e6:8c:a1:e1:c0:80:35:8c:8e:3f:
                    68:fa:4f:da:bd:e5:97:20:b9:44:f0:89:7a:ce:86:
                    ce:21:b3:59:65:a0:16:61:20:13:28:67:54:be:fd:
                    0d:92:93:03:3a:bf:f6:b8:db:dc:ce:e7:0f:32:ed:
                    3b:e1:ea:9c:27:1e:66:84:d1:3f:4f:99:84:c7:d8:
                    70:f1:0f:89:f2:96:c9:a2:3b:cf:83:7e:25:c7:1e:
                    c0:a8:45:a0:ad:96:f5:f6:97:8a:77:3d:1b:7c:40:
                    6f:21:e5:79:87:b7:74:cc:74:b5:f8:ba:c1:a8:58:
                    1a:7e:15:0d:67:9c:85:67:80:fc:71:4e:83:f4:4f:
                    eb:99:d5:40:4e:64:c3:38:88:4a:9f:34:02:3c:3d:
                    57:65:48:d4:b6:2c:8a:c2:eb:16:d8:3b:ac:df:68:
                    b0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:33:9A:24:8F:C1:A6:C3:5F:A7:A9:02:83:E7:6F:73:FF:37:0D:DE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ada0f91-4f35-4189-b9db-6208680650ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:15:15:9a:88:21:be:46:3a:03:d6:a9:3f:66:41:06:cc:06:
         4f:b3:47:f0:a9:28:1f:6a:ae:4d:17:7d:2e:b6:59:5f:99:6a:
         ef:26:01:5c:f2:08:d5:2a:d1:d2:32:e5:a3:22:8d:ba:95:12:
         4a:75:0b:70:98:33:90:eb:27:3f:ad:76:38:6d:9e:10:23:91:
         9f:fe:bd:3a:39:d4:2f:fa:29:3e:b3:cc:c7:89:1f:ca:5b:03:
         db:4b:85:41:f3:a7:62:e4:81:ee:56:9c:b8:62:44:4d:14:02:
         f2:8d:e2:d1:15:b4:69:98:fa:c8:4e:87:29:fe:1d:f3:62:c4:
         0c:b1:ba:b4:17:1a:94:8b:ba:cd:9b:40:c8:da:5a:62:27:94:
         88:57:3a:48:65:c6:f9:58:6f:f8:e9:17:9d:9c:7d:31:f7:9d:
         9b:c5:da:96:95:93:b8:74:3a:15:59:42:13:70:84:cc:a9:4c:
         15:3d:4d:c7:12:73:15:53:1c:33:d3:99:58:62:69:c1:6e:9e:
         f0:eb:06:a9:35:ed:2e:3c:c5:21:fb:4b:13:07:39:f1:b3:1b:
         43:7d:33:66:f2:54:8a:49:63:a5:ef:3b:f9:02:79:bd:2f:51:
         83:38:ef:06:9a:74:c8:45:a6:5b:a7:9a:be:64:b4:6b:f7:59:
         61:9a:51:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----