Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a78c553-6460-465b-bccd-37534d8006af.roa
File:                     4a78c553-6460-465b-bccd-37534d8006af.roa (raw, json)
Hash identifier:          97ZrmR5ukRmM82LZB4NUbSK6dmpkj+EzlylsIE6pdzY=
Subject key identifier:   46:0E:D0:A2:9D:C1:95:18:14:00:B9:9D:76:CC:9D:D5:AB:80:57:1A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1AF18B5357009F918013EC9BA65826E4955CC939
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a78c553-6460-465b-bccd-37534d8006af.roa
Signing time:             Fri 10 Oct 2025 00:01:17 +0000
ROA not before:           Fri 10 Oct 2025 00:01:17 +0000
ROA not after:            Fri 14 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        24.148.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f1:8b:53:57:00:9f:91:80:13:ec:9b:a6:58:26:e4:95:5c:c9:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 10 00:01:17 2025 GMT
            Not After : Nov 14 23:59:59 2025 GMT
        Subject: serialNumber=2f30dd487d308b7dc51a58776d3d1799fa69af256d0590068dc80d3ce8f4ea6d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8a:79:7d:e3:50:f3:a5:16:f9:f5:e2:88:e0:
                    fd:65:bd:9d:39:07:95:85:bc:00:87:22:c5:39:91:
                    0d:ef:a4:53:9f:0a:f1:00:15:19:c8:c4:8c:a5:1a:
                    36:a1:0f:e0:ce:99:ee:7f:76:9a:17:90:82:5f:63:
                    70:25:9d:1e:c2:04:54:c2:fd:04:64:cc:c8:f2:61:
                    d8:54:70:26:59:23:2d:0c:dc:04:e6:17:87:50:20:
                    3e:de:50:e0:3a:19:e4:21:70:c1:57:3a:4d:88:9e:
                    a1:61:67:0b:4b:e7:47:81:3a:23:33:b4:fb:51:7b:
                    5e:d1:2e:2b:ed:ff:3c:de:03:9a:ab:29:91:46:c2:
                    36:99:01:2f:2a:99:65:e1:f6:7e:53:93:ae:c5:4a:
                    b7:d7:d5:f4:35:d1:9c:e5:f9:46:a2:4e:c5:85:de:
                    86:1f:96:1c:7f:5e:45:b1:9f:cd:1f:96:1a:b2:83:
                    eb:bc:31:d0:ef:1a:db:f2:cc:b2:80:a2:2c:2c:22:
                    90:f6:c2:4c:b5:74:6f:11:ef:74:6d:bf:88:75:97:
                    30:0f:73:c0:ff:fb:ab:2f:f6:37:46:98:0f:99:9d:
                    9b:70:f3:d9:5c:f1:87:dc:cb:9f:45:3f:0c:4a:65:
                    bd:b5:e8:a9:dd:c1:80:0a:06:c3:72:ba:b0:41:93:
                    f5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:0E:D0:A2:9D:C1:95:18:14:00:B9:9D:76:CC:9D:D5:AB:80:57:1A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a78c553-6460-465b-bccd-37534d8006af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.148.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0b:60:04:55:a0:23:5e:6a:4e:1c:a4:ab:52:7b:55:95:79:cc:
         39:96:95:1a:a9:90:af:7a:dc:f6:60:7d:2b:70:d9:d4:fb:14:
         d0:b6:5c:42:5d:ab:72:37:0d:63:ec:c2:8c:4f:b3:9c:7e:e5:
         67:bd:67:ac:88:3e:f4:98:f4:01:14:db:27:85:2c:52:67:27:
         dd:87:1b:ba:51:fa:d9:0d:f0:09:9b:29:d1:7f:62:68:96:2e:
         1c:29:ef:50:11:87:9b:6c:7c:3f:e5:7c:49:a3:f4:38:31:75:
         99:1e:65:21:76:f4:c9:0d:96:a8:2f:82:f4:32:0a:25:d4:fb:
         c6:7b:30:b5:8d:f2:cb:4b:74:c9:08:6b:a8:3b:72:b4:df:f6:
         69:38:73:89:1b:13:c2:5c:f8:a9:0d:1e:1f:8b:13:ad:bd:00:
         b1:f0:d0:c0:eb:76:c3:1e:8a:70:80:c8:9f:75:b0:44:71:13:
         72:84:c5:2a:7d:22:de:1c:f5:b3:69:fa:a3:0e:fc:f0:f6:10:
         4b:6a:45:b7:ea:0c:d1:48:d8:cd:9e:45:14:d3:74:54:47:d0:
         70:88:e9:5e:cc:26:f1:54:3a:53:d3:e0:7d:43:11:63:c4:89:
         9d:df:8d:b7:02:2b:50:3c:c7:55:cb:d5:a0:da:b4:89:23:af:
         8c:a6:4f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----