Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f57cd127-87c2-4f68-b51e-d3af020a1d8b.roa
File:                     f57cd127-87c2-4f68-b51e-d3af020a1d8b.roa (raw, json)
Hash identifier:          4/oM6Tm6PkipjmVpWJSz71PSG5N/fjKX5+dTySwGwSY=
Subject key identifier:   F2:29:95:AE:53:94:33:16:52:6E:69:27:4B:3D:E4:1B:68:31:4D:F6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0E3BA102856742B629F537622CA5EB58B6E3E545
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f57cd127-87c2-4f68-b51e-d3af020a1d8b.roa
Signing time:             Wed 29 Oct 2025 00:50:05 +0000
ROA not before:           Wed 29 Oct 2025 00:50:05 +0000
ROA not after:            Wed 03 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        204.33.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:3b:a1:02:85:67:42:b6:29:f5:37:62:2c:a5:eb:58:b6:e3:e5:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 29 00:50:05 2025 GMT
            Not After : Dec  3 23:59:59 2025 GMT
        Subject: serialNumber=da0b3bb5746a1e4a644c6febc5f38f7e5277315d21f1bdb12db65ceaec5af50a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:96:14:02:8d:7f:8d:5b:fc:29:af:cb:71:cc:
                    9f:f7:17:fa:fc:87:f4:48:d4:91:c1:37:92:f0:5c:
                    2d:59:83:35:34:cb:b7:9c:3f:b2:11:05:85:3a:14:
                    8b:39:35:9e:5f:04:1f:6f:39:6e:7b:21:68:8c:14:
                    41:cf:e3:73:7e:b2:e0:d1:eb:2c:b0:b4:48:59:92:
                    94:8c:cb:29:d8:55:9b:60:f9:69:fe:70:e2:db:37:
                    b7:06:40:b2:7d:c3:c8:ae:3f:6d:60:f9:a2:a1:36:
                    da:e1:f7:57:ee:ed:c4:64:6f:2f:45:70:43:16:a2:
                    df:ca:1f:8a:77:24:79:f6:dc:fc:0f:9b:fc:09:c9:
                    d5:ec:fe:a8:a5:6a:4d:53:9d:9c:3f:13:ba:79:73:
                    7a:3a:78:31:7b:ae:b7:29:40:0f:05:a0:26:57:eb:
                    6b:f9:45:e3:4d:74:ab:fb:7f:ee:ce:e3:70:dd:77:
                    4f:c4:a0:48:b2:4d:a5:c0:2f:50:d0:55:8a:0e:06:
                    c5:b5:8d:e8:47:eb:f4:87:63:7b:c5:f3:26:c8:e8:
                    2a:b3:01:45:11:9b:63:35:11:95:85:5a:ef:cc:b0:
                    81:af:89:b4:ab:02:61:c7:90:d5:f5:6d:a1:0f:3e:
                    0d:f2:8e:60:4c:30:d4:0f:a0:9d:39:3e:8a:8a:f3:
                    da:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:29:95:AE:53:94:33:16:52:6E:69:27:4B:3D:E4:1B:68:31:4D:F6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f57cd127-87c2-4f68-b51e-d3af020a1d8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.33.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         36:49:06:23:de:c6:63:27:a7:1a:b2:19:c6:7a:1f:8f:2a:ea:
         39:95:60:be:ac:47:c7:52:92:36:8a:5b:4b:a1:81:0d:44:20:
         64:a7:13:f9:13:70:7c:eb:9f:d5:e4:0f:11:8b:d1:8c:bf:ab:
         aa:0a:ec:8e:13:a2:d3:ac:5a:d5:7a:e9:42:c4:dd:61:f6:5a:
         70:28:f5:6a:a9:6b:33:56:f2:4d:fe:94:27:2f:05:26:9e:50:
         84:8b:a6:d5:99:6d:bf:af:44:81:fc:73:00:e2:02:e5:25:ad:
         8c:dd:f7:b9:60:90:3f:27:48:8b:8f:9b:9a:20:0a:6a:ad:af:
         db:8b:2d:ca:72:dd:f5:96:77:ae:e1:3f:1b:5e:16:22:7c:ff:
         92:04:59:1b:89:fc:1c:c0:53:91:31:a8:f5:3f:f3:21:de:a7:
         aa:95:6a:97:fa:31:1f:e4:51:3c:2c:e5:04:b5:be:1f:aa:04:
         2a:69:64:1c:57:bf:54:72:5c:8c:9b:21:a2:be:1b:48:34:cb:
         28:97:09:70:08:06:78:cd:14:6e:c0:61:c2:12:ce:24:67:16:
         b3:db:4c:80:98:ab:c3:ca:91:d0:28:4e:f6:80:f2:96:95:42:
         3d:ad:e1:e7:c9:b8:15:82:f6:0b:62:ff:cc:18:57:07:66:e8:
         6f:41:8b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----