Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93e8dab6-1e6d-4024-9f3c-1682d7470dcc.roa
File:                     93e8dab6-1e6d-4024-9f3c-1682d7470dcc.roa (raw, json)
Hash identifier:          wrHT7gOW6NEAJgRXtB7jvN+vo/Nj38qi43RWMuyo7/U=
Subject key identifier:   31:C6:8F:BC:5F:0A:D2:CA:1D:76:E0:64:D8:BA:09:A7:F8:DD:09:CB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       04B535B0758520DD9F1A6387AB00592DF6453B68
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93e8dab6-1e6d-4024-9f3c-1682d7470dcc.roa
Signing time:             Tue 11 Nov 2025 01:32:15 +0000
ROA not before:           Tue 11 Nov 2025 01:32:15 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        136.18.0.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b5:35:b0:75:85:20:dd:9f:1a:63:87:ab:00:59:2d:f6:45:3b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 01:32:15 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=8719f7d757943a5a41047e6164bb12411a64742a1edc1c472e3911e0c5dd3b95, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:58:07:1d:c5:dc:9e:d0:ea:b1:46:f6:ec:5d:
                    fa:0f:9d:c4:9f:a3:91:2c:26:d9:da:70:42:ea:6c:
                    1c:bc:39:5b:08:b3:d2:3d:69:dd:2f:ab:5a:a5:77:
                    8a:38:35:d9:95:47:1c:2c:49:5a:6f:88:61:96:79:
                    cb:f0:49:30:e2:69:0d:9e:17:70:d1:1d:e0:c4:a7:
                    96:26:c5:4d:a1:87:38:63:bf:70:e3:25:0f:3c:77:
                    1c:b0:77:0e:0b:71:6a:0d:d7:61:d6:fc:b2:df:86:
                    77:8c:03:a8:72:3f:60:d8:2c:3a:59:ba:fb:6c:b1:
                    91:d8:15:81:7a:3b:0b:d0:62:da:15:93:86:e1:3b:
                    98:84:5e:da:cb:4e:e2:0a:6c:9d:1a:c9:00:f2:ed:
                    53:a1:6a:9d:70:38:fa:2d:cc:af:b0:e7:25:16:1c:
                    d6:f6:e5:b5:f6:04:72:1c:71:c2:a2:39:a1:db:fb:
                    23:da:86:b2:11:c3:f7:8b:91:3c:41:49:02:18:a2:
                    c8:17:5b:4e:27:d2:d3:c3:38:34:a8:8a:37:d2:53:
                    5f:42:bb:0a:f3:a6:34:73:ed:ee:40:6f:51:c0:fc:
                    44:57:2a:71:53:1a:22:5f:c5:bd:72:0a:2a:b9:4f:
                    98:8c:59:94:55:2c:e8:ca:3c:fc:b8:da:78:31:6a:
                    c7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C6:8F:BC:5F:0A:D2:CA:1D:76:E0:64:D8:BA:09:A7:F8:DD:09:CB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93e8dab6-1e6d-4024-9f3c-1682d7470dcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6e:66:0d:f6:10:38:f2:1e:bb:29:53:1e:d0:6a:30:61:16:76:
         ed:6b:2a:93:ce:29:fe:aa:94:0e:18:3a:5c:75:16:8a:bf:84:
         98:29:cb:9a:cf:3d:3d:5f:f0:93:8f:4f:70:24:f8:e9:fa:83:
         19:13:e6:fb:e3:ef:9a:81:06:ae:2c:53:23:41:4f:12:da:b3:
         a8:8c:b4:08:95:e1:1c:ce:53:04:24:85:de:e8:d8:07:62:ba:
         fe:fa:80:5f:98:48:a4:83:e1:83:e4:76:95:55:72:20:d9:be:
         82:21:6d:b1:ce:66:75:00:d9:fe:c3:2e:05:78:11:bc:41:9a:
         9f:47:34:2c:f4:a5:f8:99:bd:d1:8b:9c:40:86:59:16:b4:2c:
         a5:6e:f8:d7:51:f4:20:30:15:12:87:48:f1:28:00:a4:2d:87:
         33:8f:91:9a:7c:f9:30:20:83:32:b2:5f:ce:f8:a7:06:36:32:
         2e:8f:18:de:b7:c7:fd:19:11:f9:ad:b3:5b:92:86:d6:a2:55:
         79:65:cf:6f:75:24:2f:fd:6e:d0:7b:bc:38:3c:ae:3a:b3:5a:
         aa:41:32:ec:99:a4:e4:5f:58:bb:bb:fd:f2:32:5c:75:a6:6f:
         83:a2:1e:6a:29:30:22:56:a2:ba:cc:88:e8:74:cb:52:e3:fb:
         99:55:96:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----