Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5549e53-ed77-4bbe-b75d-2559b91cb973.roa
File:                     f5549e53-ed77-4bbe-b75d-2559b91cb973.roa (raw, json)
Hash identifier:          Kavk1RfPn3TH5aqgTT+ylUNH9XQN/JFxuHI6VTHJrsI=
Subject key identifier:   EE:64:8E:D9:0F:BD:B0:59:8C:C5:8B:00:46:76:F4:39:98:EF:50:C6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       71EAA1F6A06AC69FCB232C6C9FA13059CCB8F3C6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5549e53-ed77-4bbe-b75d-2559b91cb973.roa
Signing time:             Wed 12 Nov 2025 01:00:48 +0000
ROA not before:           Wed 12 Nov 2025 01:00:48 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        204.236.240.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ea:a1:f6:a0:6a:c6:9f:cb:23:2c:6c:9f:a1:30:59:cc:b8:f3:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 01:00:48 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=c20eb9d3554bb3221159a585d5d2ce64962c6fa3d781ae04eaa053f6d6c552c7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e9:7f:35:23:e1:be:8d:aa:54:99:bc:c0:3e:
                    24:f6:13:55:d0:c1:aa:00:64:04:f6:1e:ad:15:c6:
                    33:26:2d:38:8e:ab:4c:f0:8c:be:16:a4:c6:fb:a6:
                    1f:1b:5c:88:ed:75:d9:69:5d:cd:d0:d5:b8:25:6f:
                    ae:de:a4:b1:56:12:c4:fb:3b:97:7b:d2:2c:36:de:
                    9f:a2:52:54:b1:3c:1e:7d:30:28:87:32:34:22:76:
                    c8:bf:22:d3:b6:74:97:ee:3f:10:58:c7:f8:df:65:
                    e9:30:5e:9c:82:92:d2:65:d9:68:d6:80:51:cb:13:
                    65:de:52:d7:20:b2:18:e4:cb:e9:bc:e0:af:bf:3f:
                    0d:ae:0e:38:f4:98:23:00:d5:c3:07:53:c7:b9:e2:
                    a6:f0:2a:f4:15:f3:36:26:db:de:02:f0:54:ae:6b:
                    1f:3e:d4:d3:53:83:e9:78:cf:b2:1b:e2:80:b1:39:
                    6f:79:27:0e:9b:48:6d:f4:f4:78:63:c5:f3:49:03:
                    b7:6f:98:af:0f:40:56:b0:cc:03:30:55:4e:a4:96:
                    21:40:0a:b3:64:e8:bf:e1:23:13:78:08:d0:1a:76:
                    a6:ef:29:dd:e1:55:c2:9b:bf:d8:91:d2:16:43:d2:
                    3e:33:cc:3c:83:b6:5e:58:a6:40:9e:d8:43:77:a2:
                    8e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:64:8E:D9:0F:BD:B0:59:8C:C5:8B:00:46:76:F4:39:98:EF:50:C6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5549e53-ed77-4bbe-b75d-2559b91cb973.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.236.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:7b:2d:24:39:c1:70:5a:b5:6a:b7:0d:b1:ef:2b:60:5d:61:
         0f:bd:51:01:3d:2a:09:3a:cb:1d:84:14:2c:44:51:ba:1c:66:
         ce:51:ac:88:ec:d4:ee:80:b2:c5:7f:e3:31:e1:9f:8c:0b:a5:
         4b:6a:f6:b9:a2:c5:eb:d4:ee:a0:93:f2:0b:35:1c:db:59:4c:
         e0:c3:c5:41:22:89:01:12:8e:c0:24:9c:c2:c1:01:60:01:6e:
         a2:46:0f:06:0f:b6:7c:1b:6b:32:77:be:5d:5b:03:6d:5e:51:
         67:c3:b4:15:0f:56:f3:df:30:6a:ee:13:cb:59:9d:bc:27:59:
         94:35:72:8a:62:65:62:2a:fc:c5:19:b1:5f:ca:cc:16:95:38:
         ca:30:3f:6f:a2:cf:ba:9e:4c:d9:7e:46:a7:4d:9b:1c:0d:6e:
         8b:d1:97:04:41:e8:c0:17:6a:5d:ef:cd:4f:4b:84:b7:eb:f3:
         44:55:16:84:d0:fd:90:e0:41:45:51:00:00:a2:1c:59:7f:68:
         3f:55:d7:97:ce:bd:0a:b3:5c:47:08:91:4b:64:2b:ce:ca:09:
         1c:6b:ed:75:07:ad:e7:36:a4:60:d7:a1:6f:6b:55:01:0b:90:
         89:f8:cb:4e:71:7b:aa:a5:62:64:52:cd:f7:f8:b7:11:19:4f:
         8a:b7:5f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----