Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b06c0b8e-5bc2-4cbf-9f00-f5e8c5647a57.roa
File:                     b06c0b8e-5bc2-4cbf-9f00-f5e8c5647a57.roa (raw, json)
Hash identifier:          1hZmhEPltjYWIS7NWTeNgX4UsuW8AIx2767eBfJ9+F8=
Subject key identifier:   AD:73:3C:C7:20:F3:E3:12:2F:00:05:B6:17:E6:C9:F9:00:0D:2F:D5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       09ABADD518B8382E7F516B87781328DE5A2A26B6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b06c0b8e-5bc2-4cbf-9f00-f5e8c5647a57.roa
Signing time:             Sat 25 Oct 2025 00:10:42 +0000
ROA not before:           Sat 25 Oct 2025 00:10:42 +0000
ROA not after:            Sat 29 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        194.21.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ab:ad:d5:18:b8:38:2e:7f:51:6b:87:78:13:28:de:5a:2a:26:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 25 00:10:42 2025 GMT
            Not After : Nov 29 23:59:59 2025 GMT
        Subject: serialNumber=a73228962e4b7aa0e9f40d27d87a2cfad5e328ac879de96ebfe3cff3bec29479, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5c:f3:b8:ae:bb:52:d8:0e:11:45:5f:04:e9:
                    43:44:d0:66:d9:29:a9:9a:b4:95:b4:1a:f3:22:7f:
                    2d:72:c9:04:90:21:77:c2:a5:55:7d:d1:f5:ea:c8:
                    7b:91:0d:a5:b3:57:25:b5:f5:08:a0:37:0c:ec:9a:
                    1e:8f:8d:f3:0d:02:64:05:3e:aa:51:7d:e9:29:60:
                    50:70:f4:ec:30:dc:65:8c:4c:1d:77:36:30:4a:b4:
                    64:75:f9:8d:7e:8c:24:c8:86:3b:dc:46:3f:d3:d9:
                    e5:1c:85:6c:ca:8b:0a:b7:34:7e:57:21:64:b2:3c:
                    25:96:42:d2:aa:d3:09:14:55:a9:a6:eb:1e:3b:8b:
                    ba:88:1a:f9:49:f8:30:b4:53:fd:aa:a2:25:bd:08:
                    a0:79:d2:22:04:09:9a:58:2c:1c:33:13:98:f5:7e:
                    db:3e:a8:66:22:64:d3:4d:01:fb:9f:89:0b:b4:67:
                    39:79:5a:51:6c:1f:bf:c7:3f:54:2c:10:ae:b7:06:
                    57:fc:72:22:01:df:0c:61:49:1a:30:df:24:96:d8:
                    33:e2:0b:83:8e:11:1e:13:2d:44:49:29:f1:c9:3b:
                    83:15:e3:33:7c:f4:fe:b1:7e:56:9f:5a:be:36:f0:
                    95:fd:40:cf:53:e4:db:a5:1c:7b:47:14:16:26:26:
                    52:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:73:3C:C7:20:F3:E3:12:2F:00:05:B6:17:E6:C9:F9:00:0D:2F:D5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b06c0b8e-5bc2-4cbf-9f00-f5e8c5647a57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.21.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b2:3a:91:02:d2:43:ed:5c:5b:09:4a:dc:45:f7:08:8b:70:15:
         a1:b4:f5:68:c8:de:76:de:06:37:0b:09:fd:8c:44:33:69:aa:
         98:9b:ad:b1:ba:81:ef:0f:ff:6d:37:69:c7:1c:72:1f:c3:70:
         cd:5d:d5:35:9d:b3:25:a3:24:8b:1f:d9:94:72:b0:99:6e:0e:
         0d:77:d6:ba:c1:8e:c8:e8:58:5c:64:74:8f:56:92:c2:4a:1a:
         58:b8:00:c7:87:ae:84:3a:5c:7f:eb:4f:68:71:8b:7e:3e:54:
         f6:74:65:a9:4f:1b:86:4c:c8:b5:96:4e:0b:77:8e:14:ee:e9:
         f1:54:cd:b3:a8:c5:25:3d:c1:d7:4b:e6:05:1c:5f:38:32:0a:
         09:8b:d8:bb:e4:01:1d:5a:07:f6:08:13:9f:02:85:5b:a0:fd:
         ca:f7:85:b0:e8:88:0e:c9:16:7f:9b:cb:13:fd:e6:ed:59:20:
         23:37:5c:e4:28:2a:ee:69:b7:cb:0e:e1:0f:61:90:05:1f:3a:
         e1:fc:fa:8f:79:cb:c3:4f:a4:f1:f5:31:fe:84:07:c0:56:38:
         cb:42:65:f1:d3:ae:bc:e8:e7:af:b0:0b:74:6c:df:7a:46:ee:
         85:c1:1a:9b:20:39:5d:97:df:e6:5c:fe:6a:16:3a:4c:d5:71:
         25:3a:c5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----