Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2a82e51-505a-4886-af9b-6d40cb2ba521.roa
File:                     f2a82e51-505a-4886-af9b-6d40cb2ba521.roa (raw, json)
Hash identifier:          iTsgHksYbhmEgwWBjKRF080OzCqDC1doN2ZW1yjE/KA=
Subject key identifier:   2C:3D:DB:DA:F2:84:CF:BC:19:7E:61:C6:DB:E2:42:F8:BF:44:AF:A6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       62F87FF5D62A2C242AB95F2F81C9D7C0905C4EDF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2a82e51-505a-4886-af9b-6d40cb2ba521.roa
Signing time:             Tue 11 Nov 2025 01:50:08 +0000
ROA not before:           Tue 11 Nov 2025 01:50:08 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        107.21.208.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:f8:7f:f5:d6:2a:2c:24:2a:b9:5f:2f:81:c9:d7:c0:90:5c:4e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 01:50:08 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=468281cb4455ed1421ed74dd7a41944605c88e8ff9044229b6b7b2fe8b83e748, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9d:60:eb:b5:eb:75:d8:76:08:8f:80:1e:a8:
                    b5:9c:4a:a6:77:d4:72:7d:4a:ee:03:e7:cf:b0:64:
                    50:2f:57:f8:58:24:40:92:a6:76:3b:c5:eb:cc:30:
                    6e:9d:e7:93:7d:92:ac:69:f7:6f:02:ef:3e:d1:79:
                    2b:7f:86:95:1f:87:54:46:37:f4:35:f3:cf:a9:e5:
                    0a:b3:13:96:ce:59:cd:29:c3:e6:d9:02:2a:e9:44:
                    2c:2c:ee:86:30:10:7a:ad:83:be:20:a4:63:4f:ae:
                    14:10:3e:1b:b6:b7:a4:52:8d:ed:5f:12:35:e2:66:
                    2f:4d:00:a1:6d:d8:18:c9:e2:cd:f0:cc:1b:65:26:
                    e3:fe:35:33:b2:e0:17:74:a7:f0:f7:ab:2b:e3:ed:
                    13:3e:95:8a:8b:89:13:86:ec:fe:2a:36:24:ff:98:
                    4c:51:db:9d:b4:f7:8b:22:ee:0e:62:2a:45:92:29:
                    c5:a1:3f:11:d7:5c:ed:6c:0e:09:9c:eb:e6:73:df:
                    d1:45:d2:70:3d:75:f9:63:bc:3f:e7:5c:50:1b:10:
                    ea:a9:ab:5b:9b:16:ec:14:1c:b5:73:06:7a:d0:4f:
                    29:94:66:62:56:51:85:59:14:a0:73:70:bb:8f:66:
                    26:b9:4d:fd:1b:0a:a8:bb:07:6c:54:aa:a7:1c:a9:
                    df:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3D:DB:DA:F2:84:CF:BC:19:7E:61:C6:DB:E2:42:F8:BF:44:AF:A6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2a82e51-505a-4886-af9b-6d40cb2ba521.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.21.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c2:7d:d3:3e:c4:e7:b0:be:f7:94:6e:cd:d7:62:ab:31:00:c8:
         9b:40:89:46:f9:a3:12:d2:70:15:40:d9:c8:e7:3d:01:df:e8:
         07:25:d9:e7:64:5c:10:05:1c:96:79:6e:c0:25:a0:33:6d:e3:
         6d:be:6d:4f:f1:c7:7c:3e:02:7a:b6:80:b4:07:38:79:4c:f9:
         d3:0b:c2:d4:e0:f6:ce:fd:b2:65:99:b9:5d:72:74:14:8c:00:
         e2:7f:81:33:4f:cf:f2:8e:26:fd:b0:de:8a:1b:15:b6:69:8d:
         70:7c:41:4d:4b:6e:36:6f:20:a2:13:e2:1a:8f:8c:02:25:91:
         cf:5b:f8:ed:c4:97:b4:1c:7d:62:14:3f:ed:15:29:65:de:75:
         24:dd:c3:78:76:70:e0:f4:7a:5b:fd:0e:b0:f9:9b:b7:1a:9d:
         11:8b:88:61:2a:2d:0e:29:1b:c3:8d:5b:79:27:87:5f:f5:44:
         66:da:96:c9:fb:ce:13:ec:26:1a:09:31:1f:b2:94:d8:f6:21:
         af:22:6f:8c:c7:a6:64:e5:a8:c1:d4:a4:ba:d1:97:6c:e1:a9:
         96:f1:71:74:a5:f1:3f:cb:25:4a:05:d1:0e:02:bf:02:b7:df:
         7e:b4:df:67:9a:42:1e:99:d4:10:be:56:a6:9e:de:62:57:f8:
         ed:e3:62:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----