Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b1ffe85-ed35-4a64-8c21-c5ac967bf1b9.roa
File:                     6b1ffe85-ed35-4a64-8c21-c5ac967bf1b9.roa (raw, json)
Hash identifier:          TbhC/DUEIDzPdG7P0fTltzne+58lVsBxgDIik1MVsnQ=
Subject key identifier:   B1:25:07:5B:7C:35:7A:F1:FA:64:73:21:E9:06:D5:79:28:03:71:42
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       741EB00357A6D5BA1C09A3BFDF628B7E320E07
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b1ffe85-ed35-4a64-8c21-c5ac967bf1b9.roa
Signing time:             Tue 11 Nov 2025 02:21:36 +0000
ROA not before:           Tue 11 Nov 2025 02:21:36 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        204.236.130.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:1e:b0:03:57:a6:d5:ba:1c:09:a3:bf:df:62:8b:7e:32:0e:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 02:21:36 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=078c33acbc5a0a8f4ee1b58195da172a44d1ceed172c3b04f8911ab43018cae7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c0:f4:ac:40:67:2d:bb:2b:07:be:65:91:da:
                    68:20:e9:b6:19:80:a4:92:2c:5c:df:03:73:42:6e:
                    32:00:6d:50:4f:72:75:67:44:14:bb:e7:89:d8:ec:
                    75:70:11:00:c3:b4:8b:8e:e4:a3:9f:95:12:1d:9a:
                    75:e9:6b:0b:c8:f9:c8:2f:9f:9e:2a:13:f0:9d:36:
                    2a:cd:18:e3:d5:79:83:2e:46:69:22:9d:44:d9:b5:
                    e6:a9:39:c7:98:3e:4b:03:36:6d:a8:0d:8a:8f:38:
                    4d:64:62:56:09:72:75:43:ed:a3:1e:e2:05:fa:56:
                    86:85:45:8a:79:be:d8:89:85:83:2c:8a:a0:45:e7:
                    ca:dc:a0:23:25:d5:7e:f2:82:76:03:77:af:3a:d6:
                    9c:88:a3:6d:44:30:52:b7:c3:d9:05:e8:2f:bf:24:
                    ee:cd:5e:09:b1:8c:50:c8:5f:1e:0a:21:c8:b3:79:
                    f9:ba:e2:11:74:28:65:4f:8e:1b:ce:0a:ed:ed:90:
                    19:89:57:2f:f5:18:04:50:b3:cd:0a:79:ca:7f:dd:
                    c9:04:a0:ee:13:8e:0c:ed:4e:de:70:d9:ff:b3:8f:
                    3f:44:1b:53:eb:0f:41:00:36:0d:8e:c7:d2:aa:a0:
                    fe:bc:5b:f4:fe:f1:cd:61:19:8d:72:27:4a:46:8d:
                    4a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:25:07:5B:7C:35:7A:F1:FA:64:73:21:E9:06:D5:79:28:03:71:42
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b1ffe85-ed35-4a64-8c21-c5ac967bf1b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.236.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:1c:17:cc:35:79:4b:fc:cb:b9:e9:f6:36:1f:da:95:b5:85:
         d5:19:ea:42:53:7c:7d:10:34:60:ea:e1:88:c2:87:92:14:db:
         fc:fb:53:38:9a:99:3f:1d:01:46:53:56:e6:06:e2:66:01:95:
         1e:30:5a:48:2c:1e:78:6d:c4:98:ac:44:23:b6:14:8c:68:03:
         79:cc:77:73:3e:f1:0f:14:b4:81:a4:bb:66:02:c7:75:08:61:
         88:ff:48:dd:77:f8:1e:01:d4:e4:c3:80:38:88:38:1f:02:ae:
         e4:eb:30:e3:f4:52:58:50:dd:97:7f:23:55:d8:a4:aa:b2:b4:
         a2:76:d4:f2:e8:a3:08:a9:48:1b:20:80:ef:0c:97:f4:d9:0c:
         c6:40:78:cf:3a:07:93:6d:84:a2:3b:0b:42:9b:74:e6:df:71:
         54:d9:ce:4c:fa:62:3f:89:30:29:4d:5b:96:af:2e:87:8e:3d:
         76:a5:05:12:25:cc:78:01:51:74:6e:b4:1b:c5:a3:e5:0a:2b:
         82:70:60:54:96:a9:35:be:b4:36:41:55:34:01:3b:f2:33:ff:
         a1:e2:d8:f9:7e:63:ca:da:5b:a4:bc:85:27:68:dd:a7:8e:82:
         16:67:62:f5:34:ad:c0:e4:e9:a7:8b:cc:29:27:a4:fc:d5:0d:
         ed:ea:d4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----