Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da27c9bf-316a-4fc6-8246-9d760f3eb66e.roa
File:                     da27c9bf-316a-4fc6-8246-9d760f3eb66e.roa (raw, json)
Hash identifier:          vhS5OxIopH4n2jJg4DB7kk7XJw7j3bSauBMxPClg23Y=
Subject key identifier:   A1:C7:B5:5C:A4:94:D2:F5:D5:16:20:E6:D1:37:B6:CE:F6:05:11:FE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       39DF8C90D264045E68CB290B3B4D37671017882C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da27c9bf-316a-4fc6-8246-9d760f3eb66e.roa
Signing time:             Sat 01 Nov 2025 00:50:54 +0000
ROA not before:           Sat 01 Nov 2025 00:50:54 +0000
ROA not after:            Sat 06 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        136.18.128.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:df:8c:90:d2:64:04:5e:68:cb:29:0b:3b:4d:37:67:10:17:88:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:50:54 2025 GMT
            Not After : Dec  6 23:59:59 2025 GMT
        Subject: serialNumber=044b6ff4ce92bd8402c99f3cebd0163b43490d06d5246332d0f134af570ec2c0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5a:b1:11:ce:73:5a:5a:f8:59:b6:68:dd:03:
                    1c:e6:9e:4e:2a:df:80:16:5e:61:bc:95:54:83:b7:
                    9c:f6:97:26:66:34:fe:20:28:54:19:87:e7:ea:af:
                    8f:18:39:e2:c6:f4:1b:d8:56:f4:92:13:c1:21:30:
                    40:fd:12:91:c0:c2:ce:fb:6f:bc:03:df:84:7a:6b:
                    42:63:f0:86:02:d1:58:5b:5b:e9:66:62:49:3b:fa:
                    6c:a6:42:99:11:cf:12:7d:ca:43:bf:aa:d2:7b:1a:
                    ad:ba:eb:8a:17:45:9b:45:5b:35:f3:a6:d4:4d:65:
                    e0:83:33:97:2e:44:44:ce:d6:65:b9:dd:cd:bd:1f:
                    69:4a:3e:b9:ce:5f:91:1a:72:e1:0c:96:11:f7:b5:
                    bc:78:cb:85:14:48:1e:7b:cd:da:2f:77:05:37:3e:
                    49:d0:3c:9c:74:fd:6a:ce:0b:84:2b:f8:ab:d9:80:
                    42:aa:df:f6:2d:b6:1e:f5:4f:7b:55:c3:78:04:bc:
                    0f:41:7a:b6:ad:63:b1:2d:21:ec:7a:c7:83:2a:e7:
                    22:6b:12:84:30:1f:94:29:58:07:46:75:76:69:fd:
                    5f:ae:6b:cc:13:0b:43:ed:1e:ed:f6:70:6c:68:de:
                    a7:c2:a4:d2:a2:30:e8:e5:3e:2f:38:97:9b:9d:20:
                    0b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C7:B5:5C:A4:94:D2:F5:D5:16:20:E6:D1:37:B6:CE:F6:05:11:FE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da27c9bf-316a-4fc6-8246-9d760f3eb66e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:3c:33:ff:16:ce:85:06:4e:cf:51:86:8a:f8:5a:81:3a:18:
         6c:ce:ec:f8:7d:61:31:f8:0c:f0:b6:1a:6b:db:e9:89:3a:8e:
         4f:04:82:91:78:32:02:62:dc:b1:ba:26:1d:01:8c:13:d4:96:
         bd:0a:02:b2:bf:91:28:43:03:99:50:ee:ab:dc:c9:a5:9a:06:
         70:c0:c0:25:64:91:8f:29:52:0d:db:b7:0a:ff:8b:32:84:b8:
         da:4f:dc:c3:40:26:8b:29:7e:7d:8a:90:fc:f9:89:c2:e4:3f:
         c5:0c:fa:62:c1:ec:68:a8:05:42:e4:82:ad:4f:a4:e0:f5:7d:
         cd:83:cf:87:c6:af:7d:61:20:33:ac:f2:0b:24:ec:a3:14:e6:
         89:01:08:ba:38:14:79:03:7e:1c:7d:cd:6c:7c:ee:ec:ff:e1:
         41:9d:fd:ca:f2:60:2a:ea:e4:db:d1:47:f6:f4:cf:3c:f8:6b:
         46:d1:94:27:93:d3:1d:61:14:02:99:7e:18:76:43:16:62:ea:
         69:45:64:03:be:12:99:1f:5a:55:dc:24:3e:1e:54:b3:77:f3:
         85:51:5f:8f:8a:b9:bc:51:38:f9:cf:2a:60:ca:2e:d9:fa:70:
         a7:be:9e:19:6d:4b:a7:e3:88:01:47:46:37:5f:08:96:b1:60:
         00:a8:73:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----