Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acc7b570-fe00-44a4-ab2f-06f3e8044509.roa
File:                     acc7b570-fe00-44a4-ab2f-06f3e8044509.roa (raw, json)
Hash identifier:          U5A0EHMg9aunk1eHWwlDYFeEa8sAzpxesFTZS5hxv24=
Subject key identifier:   0D:F0:02:73:A1:2B:7A:4F:8A:F0:DA:76:46:7D:96:FF:A0:C4:8A:6D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       683E3C62EBFA85AB1B7E97E43137FF11C358514B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acc7b570-fe00-44a4-ab2f-06f3e8044509.roa
Signing time:             Tue 28 Oct 2025 00:10:06 +0000
ROA not before:           Tue 28 Oct 2025 00:10:06 +0000
ROA not after:            Tue 02 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        216.248.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:3e:3c:62:eb:fa:85:ab:1b:7e:97:e4:31:37:ff:11:c3:58:51:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 28 00:10:06 2025 GMT
            Not After : Dec  2 23:59:59 2025 GMT
        Subject: serialNumber=9384d62085e585a311900a090c76edcf1fad868014bdaeba36f534a5d252d020, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9b:7b:e9:18:b5:14:76:74:b4:de:09:27:61:
                    23:32:f9:c5:07:c7:7b:83:b4:1c:dc:99:51:68:c4:
                    99:51:a7:3b:a0:a1:70:11:c9:9f:0b:5d:40:3f:32:
                    e6:59:ec:7d:ad:c4:b5:77:94:57:47:db:ff:d9:2d:
                    8a:c7:35:28:7a:c0:1f:4f:b8:95:32:c8:3b:da:42:
                    43:c7:cd:64:69:94:2e:96:c0:32:fc:56:93:ac:95:
                    25:6c:fe:61:8d:02:0a:bf:fe:1d:f6:10:d4:11:8d:
                    16:78:87:5d:b8:23:c9:75:71:cf:7d:80:55:5f:4d:
                    01:b8:bc:6c:93:48:ae:0a:66:4a:5e:2f:b7:f7:ff:
                    33:22:73:c4:4b:7d:fa:fc:5c:c1:72:77:3e:6a:85:
                    d1:c4:0f:72:60:03:20:de:05:14:25:ab:cd:9e:08:
                    6e:cf:1a:1f:ad:68:fd:7d:ce:2e:89:48:16:da:3c:
                    37:b9:56:0d:c0:c1:23:82:65:f3:6b:ed:b7:e1:e6:
                    37:55:55:ce:cd:ef:6b:91:42:25:c5:61:71:ae:05:
                    31:04:f3:04:cf:9f:bf:fa:55:aa:69:89:55:f8:2a:
                    77:94:82:8b:5d:f1:42:21:32:64:ad:cf:02:a1:fe:
                    12:05:73:2b:62:bc:66:2b:9d:63:0c:fe:62:62:5d:
                    1f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F0:02:73:A1:2B:7A:4F:8A:F0:DA:76:46:7D:96:FF:A0:C4:8A:6D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acc7b570-fe00-44a4-ab2f-06f3e8044509.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.248.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4a:73:e6:b1:e0:9a:3d:ad:8e:eb:a9:a1:c5:dd:c7:f3:74:01:
         28:7f:3d:88:20:2e:61:11:3a:d1:02:f4:ad:e8:69:c0:72:02:
         20:ec:0e:d7:06:af:4a:e6:95:6f:c4:33:62:8f:ec:5b:95:71:
         4e:65:2f:b0:79:91:80:d0:87:8a:aa:c6:2b:59:52:5b:2e:81:
         ef:e0:30:80:f4:ad:17:1b:8a:5f:95:8a:70:c5:74:75:fc:c8:
         e6:63:13:61:8a:0f:e4:61:f9:38:c0:97:5d:78:43:1b:3f:06:
         54:ae:48:c7:8e:7e:37:72:0c:0c:af:f1:11:0b:64:80:f4:f4:
         b4:9c:74:94:82:1f:52:a9:d8:bb:d3:79:94:90:0e:b6:32:9f:
         0a:6a:1f:21:65:b3:20:5f:67:cf:cf:76:5a:95:69:30:04:11:
         7c:5b:d8:f3:52:eb:bd:b2:37:f7:12:a4:13:76:86:eb:1f:1f:
         54:f6:85:9a:1c:06:3d:90:37:24:fd:76:ce:39:3f:30:ba:c5:
         c0:6a:7c:69:1f:c2:5e:32:f4:93:f2:f1:b9:46:8f:16:24:31:
         9b:8f:34:07:37:65:b5:7b:52:ee:e8:6f:4f:2c:b8:7d:39:b3:
         bb:b4:2b:82:aa:af:84:ac:a9:06:5a:7e:fa:4a:41:43:9a:da:
         80:be:87:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----