Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f980baff-5302-453e-b617-d31a677819f5.roa
File:                     f980baff-5302-453e-b617-d31a677819f5.roa (raw, json)
Hash identifier:          J3fv6Zm/hrZucz2ZisLwDLiOD9ymf74umxK88rNF3mM=
Subject key identifier:   39:BE:AD:53:52:92:91:AB:06:7C:C2:8F:DA:43:4F:9E:CF:ED:6E:13
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6B9A9285522A875B0B4973F99688AF4BE14A5CC3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f980baff-5302-453e-b617-d31a677819f5.roa
Signing time:             Thu 02 Oct 2025 21:37:02 +0000
ROA not before:           Thu 02 Oct 2025 21:37:02 +0000
ROA not after:            Thu 06 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        194.97.224.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:9a:92:85:52:2a:87:5b:0b:49:73:f9:96:88:af:4b:e1:4a:5c:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  2 21:37:02 2025 GMT
            Not After : Nov  6 23:59:59 2025 GMT
        Subject: serialNumber=b2b7338f6d07e25be8b4cb24b1837c6a5e5b7d1f97b1947f4fe593335a66c816, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:dc:21:66:f5:73:80:2e:0c:a4:db:f4:b5:7d:
                    b5:2c:f0:e5:db:b8:68:67:79:ca:b0:fd:dc:ea:cf:
                    80:73:d3:22:f3:e1:81:04:5b:d1:e0:21:a4:67:cd:
                    5b:c3:41:f9:f1:46:5a:1f:4d:a4:5b:c5:6d:4d:a0:
                    30:ad:52:0f:9c:73:cf:0c:fd:c2:22:5f:4e:ac:ff:
                    1a:c3:77:8f:1e:d4:7c:f0:f3:01:29:6f:64:ba:a4:
                    18:0c:1d:4a:cc:92:4e:16:99:62:5f:1b:08:f5:f5:
                    b9:53:1f:86:44:6d:3d:94:02:03:9f:c8:5a:e2:21:
                    b8:6a:c5:b3:9e:29:71:b1:7e:6a:a6:67:76:0d:3a:
                    0b:cf:45:73:77:a6:af:14:c7:48:dd:a2:b7:fe:0a:
                    f5:60:76:f9:53:a4:ed:1b:8a:60:33:99:a9:65:c2:
                    ce:47:50:ef:eb:d8:89:69:dc:d2:ba:33:d8:ea:52:
                    b2:34:b5:63:fc:a7:f7:d4:3d:5d:ae:1d:9a:75:22:
                    51:5f:9d:d2:59:83:29:ce:67:a3:97:a5:64:d0:17:
                    91:e4:d7:e4:15:fc:98:ec:f4:63:06:39:3e:2a:98:
                    f1:44:73:af:55:30:b9:cc:a2:a4:17:b7:e3:67:85:
                    0b:8a:db:6b:4c:e2:95:5e:95:0a:a5:6c:6e:1e:5d:
                    7c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BE:AD:53:52:92:91:AB:06:7C:C2:8F:DA:43:4F:9E:CF:ED:6E:13
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f980baff-5302-453e-b617-d31a677819f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.97.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1e:76:08:ec:24:cd:0e:db:cc:c0:98:47:20:e5:6e:de:5d:5e:
         40:be:f2:2f:35:aa:fc:c1:a9:10:0c:30:d8:37:5e:e5:0f:6e:
         d9:e3:6f:93:9c:21:06:39:69:f7:b3:51:90:ba:0b:58:6e:5c:
         55:6d:fa:80:36:83:f5:9b:ea:15:cd:c3:6f:b7:5e:a4:c1:08:
         19:0c:a5:f6:c9:f3:a8:10:b1:37:4d:cf:1d:fd:23:f0:5f:b1:
         95:1c:0d:73:14:00:89:d1:c2:59:32:85:fd:36:e1:f2:69:2c:
         3b:e4:2d:78:63:6a:2f:8a:fe:19:92:e0:42:8b:30:b6:4e:6e:
         6c:56:36:61:43:9d:31:c6:2e:5c:5c:cc:88:27:1a:d8:c1:7d:
         0c:a6:7c:e1:f8:37:27:cc:15:d5:db:d7:d1:7d:4a:01:b1:87:
         02:d3:c7:02:fd:e5:aa:77:2f:c5:f6:22:2b:f7:aa:ee:e6:05:
         d1:b3:71:c9:ab:b2:48:b0:c3:93:4e:5d:29:ed:0e:8b:35:65:
         8e:06:73:f8:f1:f4:a4:45:88:5f:5d:77:4f:11:ac:42:fa:1a:
         4d:c4:81:c6:23:da:49:83:c2:58:cc:95:94:d6:7d:eb:cf:21:
         79:7e:9c:aa:ff:7b:11:20:4d:31:a8:58:d5:df:e8:14:be:54:
         49:27:18:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----