Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a640785-47fa-4e67-8141-fb7265caef51.roa
File:                     1a640785-47fa-4e67-8141-fb7265caef51.roa (raw, json)
Hash identifier:          NFErROCDlHcpaaErfyzhvt5ukYir1jyuU0/jAHOV/08=
Subject key identifier:   C1:9F:B3:D7:38:14:53:DC:4A:99:50:75:EC:00:6F:DC:F8:DF:3C:D8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       288213D3C738D6BE78873E233E43F568C995CFF1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a640785-47fa-4e67-8141-fb7265caef51.roa
Signing time:             Wed 08 Oct 2025 00:40:57 +0000
ROA not before:           Wed 08 Oct 2025 00:40:57 +0000
ROA not after:            Wed 12 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.150.24.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:82:13:d3:c7:38:d6:be:78:87:3e:23:3e:43:f5:68:c9:95:cf:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  8 00:40:57 2025 GMT
            Not After : Nov 12 23:59:59 2025 GMT
        Subject: serialNumber=12fe3ae7a1386637ea19e21adebd5bc193b53050e993450883f1299844876340, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3b:84:a4:87:eb:19:b8:50:24:c9:be:74:22:
                    0b:b4:06:6d:76:4f:e9:9a:31:9e:96:1d:af:66:7d:
                    80:ac:ec:aa:5e:86:02:f6:4d:dd:92:bd:e7:96:eb:
                    88:23:35:51:f1:3a:96:dc:13:09:61:2a:85:35:d6:
                    fa:47:b4:13:3c:c5:ca:09:6c:cb:b4:b0:9d:6b:22:
                    8f:e7:84:5a:b1:6e:12:b8:80:d7:e6:ab:30:c3:9c:
                    fa:50:18:17:18:14:3c:fe:8c:3c:68:12:2a:3b:57:
                    e6:74:4e:d1:ef:74:80:3a:dc:c9:fa:d0:cf:8c:85:
                    81:5b:f9:a6:60:a0:b3:34:82:12:a1:f5:e4:60:52:
                    0a:51:e4:80:1a:95:ef:6c:52:6d:e4:ae:03:2e:fb:
                    c1:ca:a6:19:ae:48:37:08:4f:84:e6:ba:22:1c:4e:
                    ce:93:72:13:af:78:e1:8a:b1:98:95:63:ec:8d:74:
                    51:6d:f3:52:a9:ad:5f:97:4a:0f:96:e8:aa:5e:bf:
                    d3:92:5c:2d:0e:40:0c:11:c2:f6:17:8f:4d:c2:cc:
                    af:7a:32:8c:4a:54:fb:ba:9b:25:fa:1a:0d:a3:53:
                    77:f5:36:16:72:b4:2a:f4:44:4f:00:ba:31:cf:3c:
                    46:d6:48:26:c6:61:bf:66:4c:1c:cc:2c:b3:ef:da:
                    9c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9F:B3:D7:38:14:53:DC:4A:99:50:75:EC:00:6F:DC:F8:DF:3C:D8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a640785-47fa-4e67-8141-fb7265caef51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.150.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         67:89:9e:35:31:7e:b3:f9:98:49:30:e2:dc:69:0c:b0:1a:5a:
         6d:77:22:0d:0d:2c:cc:13:f9:bc:51:69:4c:eb:be:35:ac:39:
         b5:74:f8:1b:fa:ae:8e:51:7d:66:62:75:0a:ec:48:ef:fb:eb:
         55:28:43:5f:e9:1a:61:72:27:9d:8c:ad:55:de:c8:46:ab:81:
         c7:48:36:b3:aa:67:a8:6a:38:96:91:a0:de:65:92:79:18:f6:
         c0:e4:a5:d8:6a:a8:64:71:9e:3c:4d:69:6f:18:35:34:a0:e7:
         fd:54:d2:ca:17:a3:df:9e:10:63:c8:3b:51:6e:a0:0d:34:be:
         89:e3:ed:0c:4e:45:a7:ec:e9:17:b7:29:dc:05:a0:9e:80:05:
         f9:4d:e6:1e:13:2c:1d:37:c8:b6:60:25:8f:1f:77:69:24:81:
         48:a3:61:66:96:b0:f1:ca:82:47:35:e3:ce:b3:0a:b3:b2:70:
         46:19:1b:02:05:ca:eb:33:bb:ef:92:07:12:31:5a:4e:88:19:
         c2:92:98:62:c1:aa:dd:ab:9f:a4:ad:11:07:e8:ff:0c:ad:69:
         9e:24:55:25:08:0f:04:98:26:ae:7c:9b:2f:4a:bf:5e:9e:65:
         81:95:7d:cf:1c:39:df:9b:5a:bb:46:25:26:ed:6e:5e:fb:36:
         a9:b7:57:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----