Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f29adbc5-b5cd-46c1-8740-37db8845b968.roa
File:                     f29adbc5-b5cd-46c1-8740-37db8845b968.roa (raw, json)
Hash identifier:          wqOWbPs9S16dz0ketBQrjavdJAiSgRnWRl6wzPRyWj4=
Subject key identifier:   7F:DA:1F:52:20:D1:76:CE:63:F6:CB:E9:6C:70:FF:67:5E:DF:35:BC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       123EFA0922C42C84B2D0BF5AE50B0C58476EE151
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f29adbc5-b5cd-46c1-8740-37db8845b968.roa
Signing time:             Tue 28 Oct 2025 00:40:09 +0000
ROA not before:           Tue 28 Oct 2025 00:40:09 +0000
ROA not after:            Tue 02 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        67.220.240.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:3e:fa:09:22:c4:2c:84:b2:d0:bf:5a:e5:0b:0c:58:47:6e:e1:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 28 00:40:09 2025 GMT
            Not After : Dec  2 23:59:59 2025 GMT
        Subject: serialNumber=4cc93cb3637e20fb8eb468db0c7eac73d05cda072fe1f703501ca05d56e2bb91, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ae:63:06:86:aa:bf:a6:6c:0f:1d:6a:c2:7a:
                    49:5e:7a:2b:39:4d:39:71:51:01:a5:3b:5a:ea:c6:
                    06:c1:55:9c:0d:c5:44:80:69:f6:e3:1c:5f:01:89:
                    06:65:e1:d4:51:66:52:fc:2c:22:d0:b3:72:31:4c:
                    f6:84:33:da:b5:89:df:bf:cd:26:56:b2:69:d4:a8:
                    fb:50:1a:14:ed:5e:d8:27:57:b9:be:ec:7a:44:45:
                    4d:2f:bd:99:b7:e3:42:d6:72:7a:58:ec:28:59:f5:
                    a2:28:3d:ac:d5:2e:0a:19:8a:2c:b6:16:f1:75:1d:
                    0c:c5:d7:9f:7b:a0:40:47:11:c2:14:51:37:19:bb:
                    da:31:5b:db:c1:03:89:2f:85:9a:1b:67:1c:e6:6a:
                    a8:ec:04:78:9c:6a:9f:63:84:78:16:49:19:f2:20:
                    9d:aa:16:1e:7e:97:4e:64:f8:fc:65:8a:70:d0:6f:
                    65:8b:3b:42:6d:b0:8b:07:df:4d:26:c1:27:9b:b0:
                    3e:1e:74:30:ef:5f:27:5e:23:cd:e6:d6:e0:c7:a1:
                    6b:f8:6e:ae:88:31:5f:b5:c9:3b:30:37:f2:39:3e:
                    37:79:63:11:8b:54:0d:25:39:44:96:6c:d8:a7:6a:
                    c7:4d:19:d1:f4:cd:c2:b1:e9:97:4b:ec:82:93:0c:
                    4c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DA:1F:52:20:D1:76:CE:63:F6:CB:E9:6C:70:FF:67:5E:DF:35:BC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f29adbc5-b5cd-46c1-8740-37db8845b968.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.220.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         04:05:0c:fd:03:9f:01:b8:40:0d:e9:af:0f:d8:97:9a:e4:69:
         29:18:d5:15:2a:7e:b9:39:25:34:e3:fc:ff:1d:cf:1a:5d:8b:
         97:c1:9b:00:2c:8e:d7:2c:d5:f9:d9:6a:93:28:cf:0b:ca:b3:
         f4:83:bf:56:2d:e7:9a:23:e0:b8:72:a6:7b:79:3c:dc:e8:8d:
         75:2c:75:0f:f2:a9:ab:01:d5:54:5c:0d:1f:7d:3b:a0:6b:87:
         2d:0d:58:26:59:df:20:52:44:19:c6:68:f1:57:78:10:e8:15:
         cd:ad:05:c8:0d:95:cc:b5:66:72:2a:49:c2:ff:47:0d:1b:b6:
         9a:6e:77:f4:c8:d4:12:c6:d9:f1:64:ee:e2:22:8c:10:96:b6:
         2e:b2:68:81:27:ce:8a:0b:87:49:79:45:42:dd:57:b0:1a:d0:
         d5:f7:88:fe:50:c0:db:46:7d:c4:80:1d:67:1a:a4:69:8b:73:
         50:8e:21:66:83:94:3b:d5:ff:ee:db:0b:38:c3:56:0a:a5:c0:
         93:c3:40:89:d1:80:4a:54:0c:36:a6:9b:b8:3d:db:20:ad:b3:
         69:23:2d:64:9c:35:36:4a:6c:bb:7e:46:ec:d9:12:d2:79:85:
         60:23:84:95:f4:00:e7:db:b1:7f:08:e8:01:9b:9b:d1:f1:01:
         16:43:5a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----