Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cd2616a-9845-46c4-8003-b0526557ae7e.roa
File:                     2cd2616a-9845-46c4-8003-b0526557ae7e.roa (raw, json)
Hash identifier:          JTzPsti542E6w3BJPbZ6JWHWbMJPT3fq87776267WxE=
Subject key identifier:   74:AB:5B:EC:CF:E4:CE:E1:D6:C6:57:FE:BF:DF:67:9C:1E:2B:09:95
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       78EBB0C09C94CB2F1FCE9A035BBD6AE6B8A300CC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cd2616a-9845-46c4-8003-b0526557ae7e.roa
Signing time:             Mon 06 Oct 2025 16:40:02 +0000
ROA not before:           Mon 06 Oct 2025 16:40:02 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.18.224.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:eb:b0:c0:9c:94:cb:2f:1f:ce:9a:03:5b:bd:6a:e6:b8:a3:00:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 16:40:02 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=27830bed61056465ba575ca96972c8f27a6c913d57768c9423765f7b265dd87a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:95:90:8d:94:59:ca:d2:c7:09:78:77:c9:1e:
                    34:9d:ea:ae:7f:fa:c0:43:bd:9c:40:72:1e:51:25:
                    f9:53:06:91:eb:90:69:a6:ff:40:01:08:5e:5e:81:
                    0b:c7:f3:dc:78:ef:42:e9:b4:17:a9:2b:a9:66:90:
                    ee:27:f6:6b:f7:b0:07:d9:ff:7d:ae:6d:8f:8d:9f:
                    b7:6a:67:f1:b5:e2:54:65:92:71:70:ec:74:ea:29:
                    71:68:7e:98:d6:14:7d:0c:d4:62:aa:fd:ed:62:ef:
                    d3:03:52:56:a8:2c:70:6d:30:93:45:9d:ac:7e:4c:
                    87:87:cd:36:ba:08:56:d8:55:71:8f:cb:e4:5b:35:
                    10:bc:f7:2a:b8:cf:46:ab:7e:43:b6:d1:56:16:a4:
                    a9:a7:a8:6e:11:c1:b0:84:a0:0e:1a:60:9a:56:b4:
                    f3:a1:53:cb:c5:a1:ac:87:5e:46:af:33:10:4c:4b:
                    ee:a6:cb:3d:5a:5b:80:8d:60:2a:d1:8c:37:b1:5b:
                    bd:10:65:c7:11:25:6b:d1:d4:33:eb:19:94:0a:3b:
                    cd:f5:94:7b:99:bb:8f:1d:d8:16:cc:88:5b:af:19:
                    b8:7a:9d:0d:98:a6:d3:5a:fb:53:02:ac:c9:f9:49:
                    e7:ce:27:fe:f5:7a:09:11:2b:a6:91:a8:ca:2c:4a:
                    07:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:AB:5B:EC:CF:E4:CE:E1:D6:C6:57:FE:BF:DF:67:9C:1E:2B:09:95
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cd2616a-9845-46c4-8003-b0526557ae7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.18.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         bd:1e:0d:9a:9c:06:99:19:f6:2a:0a:55:d3:c8:20:00:97:f3:
         35:d5:ce:5f:b7:cd:76:3f:b0:01:9f:a8:91:e3:6d:19:ae:b4:
         8c:1c:75:2a:d3:d4:ac:14:da:e7:e4:16:3c:1c:a0:e4:25:23:
         8f:78:6a:ec:1a:5a:7d:97:f1:d8:2f:65:6a:9e:7f:7c:aa:05:
         9b:a4:a2:63:22:48:80:34:63:60:33:37:18:90:bc:f3:95:52:
         1e:da:2f:6e:59:6b:77:13:ea:84:8b:49:b5:e8:24:75:d9:09:
         81:51:ea:49:e2:b9:08:41:e3:e8:cf:9a:b3:f3:06:ba:81:d5:
         43:55:1e:7a:88:df:1e:eb:fc:ca:99:2d:6d:d9:6b:bd:03:69:
         a1:c1:64:d8:c7:9e:7f:38:0d:55:1e:ea:4c:1f:7a:33:38:9d:
         3e:31:d4:ae:99:2c:d0:9e:16:64:ab:a6:22:b9:97:d0:3b:62:
         30:8a:fa:1c:23:0e:12:15:ed:28:6a:b5:fd:8f:73:2e:f6:80:
         09:a3:d6:87:be:c0:5e:5c:15:44:49:cd:8d:d0:9c:37:cf:c9:
         93:bd:f6:b6:e6:90:2c:47:ba:54:fd:56:80:2a:12:46:b5:5f:
         87:eb:72:28:8f:67:c4:f2:14:5d:2e:86:79:b6:e3:21:7a:f6:
         c6:57:e0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----