Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/973b2c2a-040b-4c98-9c29-36c767f5e19b.roa
File:                     973b2c2a-040b-4c98-9c29-36c767f5e19b.roa (raw, json)
Hash identifier:          TC/R7P9Iv21OvOP3ldRB8oXy0QQFu+JqJJMNI4XId14=
Subject key identifier:   63:00:98:78:9A:28:3B:D9:AC:18:FA:11:80:5B:4F:D9:91:A6:5C:D3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       521FA0A13AA1A43269C4C10D66B6211CD06EA238
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/973b2c2a-040b-4c98-9c29-36c767f5e19b.roa
Signing time:             Tue 11 Nov 2025 01:10:58 +0000
ROA not before:           Tue 11 Nov 2025 01:10:58 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        138.70.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:1f:a0:a1:3a:a1:a4:32:69:c4:c1:0d:66:b6:21:1c:d0:6e:a2:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 01:10:58 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=3457d58dc3ce97798952c14ada58f5cc5a68cce09a6d9a8a9ccb8839a70e6d2f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9b:98:ff:6c:a6:70:82:1c:31:38:bd:12:5a:
                    e8:e1:eb:09:f5:1e:c4:40:59:59:69:9b:62:42:eb:
                    96:77:c4:ec:2c:e5:40:37:bf:ff:1e:2c:e0:04:75:
                    e7:43:ba:87:af:c3:41:e2:1f:8f:71:b3:44:77:ab:
                    5f:06:30:e6:52:e8:21:00:db:20:33:b3:7d:cc:2b:
                    fc:f3:f1:c7:62:62:de:77:7c:5f:11:4c:02:5e:df:
                    59:15:d8:e0:17:4f:8c:9b:8f:89:27:4c:f2:e0:0d:
                    d3:02:8b:8b:76:b8:20:13:08:23:89:82:1c:43:91:
                    8f:f2:da:2e:82:2b:8b:32:65:d0:9f:e5:2b:c3:67:
                    ad:8f:08:a3:0e:95:04:e9:f9:58:0f:2d:d1:dc:43:
                    92:43:5a:63:2a:48:99:76:41:6d:c5:c8:39:2d:81:
                    16:c7:a0:6f:e4:a9:64:f8:96:20:6a:38:74:a1:65:
                    6f:83:ce:96:28:16:26:9d:e5:ad:bb:27:e7:b9:b7:
                    39:1b:12:a8:1f:f3:72:85:c4:29:8d:11:b5:3a:a5:
                    a6:44:d9:76:2a:6e:88:67:ed:b9:dd:1f:f3:b0:d7:
                    97:cb:38:fe:a1:07:c2:71:07:ca:e8:38:f5:3f:e6:
                    da:68:60:d8:c6:eb:e7:75:e2:0b:06:b5:1a:f3:67:
                    3c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:00:98:78:9A:28:3B:D9:AC:18:FA:11:80:5B:4F:D9:91:A6:5C:D3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/973b2c2a-040b-4c98-9c29-36c767f5e19b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.70.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         51:3e:ee:3e:9b:da:b1:e3:a0:5b:e2:f7:44:c9:86:a2:33:4a:
         e6:8b:14:ac:7b:f2:d8:b7:b6:57:f8:67:f2:29:93:13:2a:32:
         d9:4e:8e:30:00:3b:63:be:da:09:07:7a:da:3b:e4:af:d2:90:
         1b:99:ab:cf:06:4b:d2:5c:69:b4:71:6e:56:bd:24:35:8c:e6:
         6c:f6:ec:6b:9b:46:2f:2c:c9:a2:25:80:4f:b5:43:6e:1b:8c:
         8c:f6:d8:c8:cd:b1:d0:23:43:67:6c:e1:e1:ec:3a:4c:da:e1:
         88:e7:75:80:23:ac:55:7b:8f:72:85:32:73:f2:7a:08:9a:7f:
         ca:61:fe:96:9a:eb:da:28:a8:a0:43:f0:d0:72:31:35:17:0a:
         58:e9:ed:55:3d:1c:cc:07:f6:7c:e4:7f:68:f0:4d:e3:70:3b:
         cf:cc:ec:40:d9:22:69:b7:de:d7:56:2f:59:06:5e:1a:87:93:
         5d:21:a8:3c:98:bb:dd:a9:c9:b1:71:22:ee:aa:0b:96:0a:6b:
         43:34:f9:df:bb:7a:04:c5:32:ea:cb:f1:95:11:df:62:b2:93:
         af:8b:be:11:ee:70:c8:ed:05:8a:3d:f9:3a:5c:44:9b:19:4b:
         23:ed:13:be:57:02:12:1b:da:e5:4b:50:f9:c8:01:95:a2:54:
         d1:ae:bb:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----