Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5238a6c5-a106-4b94-9f46-2c619db863c6.roa
File:                     5238a6c5-a106-4b94-9f46-2c619db863c6.roa (raw, json)
Hash identifier:          LZCBc7de6XTCps1zs/6V08Wpbfo/27KNknmyneiYH3E=
Subject key identifier:   BF:BE:70:A7:96:75:E8:A4:1D:6B:B8:46:FE:69:CA:DB:DC:5F:02:7F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       77CE86AF3DAADD05F43A9ACF8C73626C4F93BF0A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5238a6c5-a106-4b94-9f46-2c619db863c6.roa
Signing time:             Sat 18 Oct 2025 00:20:04 +0000
ROA not before:           Sat 18 Oct 2025 00:20:04 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        107.150.192.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ce:86:af:3d:aa:dd:05:f4:3a:9a:cf:8c:73:62:6c:4f:93:bf:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 00:20:04 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=1c27a09fab3b26f76e96487352a87544b37de1bd65acbcf63ec15818e96e9f50, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:90:5f:19:78:35:63:00:01:47:9b:ff:bb:bd:
                    9d:e4:09:54:2b:81:08:ee:68:4f:c9:d4:4c:79:7b:
                    48:71:49:8a:bf:c9:48:fd:e1:43:59:f9:3e:90:1b:
                    08:c3:6e:45:e2:5f:43:68:89:7a:66:4c:03:14:3a:
                    28:66:ef:b0:2e:a2:cc:f8:55:34:54:34:ce:ac:4d:
                    06:32:49:cb:6c:1f:5f:07:99:d1:8d:a1:eb:4f:54:
                    02:7b:cc:fd:fe:4c:1e:1d:5c:5b:ea:01:b7:81:87:
                    a2:3c:b3:e0:7f:35:90:72:6b:12:2b:01:ae:96:70:
                    8c:d1:13:ed:6b:7d:7a:22:de:43:4d:eb:d7:c5:df:
                    94:87:01:26:1b:26:9d:a7:cc:49:2f:05:11:e0:22:
                    f4:eb:39:6d:53:0b:a2:ef:56:13:f5:e0:15:12:bf:
                    06:df:ea:46:23:3b:f8:ea:d0:f7:72:37:53:3f:3e:
                    cd:be:be:9d:4f:b6:72:c9:38:45:a8:ca:97:4a:4d:
                    96:b4:5e:97:ee:f5:4a:0a:b1:74:3d:ea:be:d5:c0:
                    10:2a:38:27:fd:63:26:48:fc:b8:58:03:de:3a:91:
                    45:ba:2c:28:a3:34:3f:2c:c0:1b:b9:ee:2c:b1:8f:
                    bb:eb:0c:42:a4:6c:35:91:c1:30:13:df:07:c1:06:
                    95:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BE:70:A7:96:75:E8:A4:1D:6B:B8:46:FE:69:CA:DB:DC:5F:02:7F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5238a6c5-a106-4b94-9f46-2c619db863c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.150.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         af:b6:07:26:7a:93:9d:c8:0b:df:a7:81:cc:10:e8:cc:d2:37:
         58:4b:82:50:ab:35:ac:c3:e6:40:2f:0e:2c:81:89:64:5e:d0:
         b6:1a:a3:e1:5f:c9:f2:08:05:7c:33:de:97:80:8a:30:4d:39:
         bb:0a:78:61:89:b2:af:b8:15:dd:55:3d:bb:82:c7:7f:f3:39:
         89:50:44:c6:27:c0:55:14:7d:19:dd:04:e4:9a:d8:3d:73:b3:
         e6:16:69:ef:6e:7a:aa:7d:19:bd:16:fe:c4:0d:b2:09:fe:ea:
         72:7a:53:f6:bf:31:c9:c4:ab:28:5b:93:e6:ec:d0:30:f6:02:
         bb:a3:13:e2:f6:14:92:62:d6:d5:af:29:ca:24:03:1a:de:1d:
         e1:f8:21:70:5d:0d:b0:65:16:71:e9:a9:73:b4:dd:71:6d:6c:
         5a:fb:9b:1c:95:24:21:2f:c8:80:05:86:9a:41:e0:df:47:38:
         01:b6:59:92:c5:f1:b3:65:bb:1d:7d:0e:46:ce:b7:66:75:bc:
         49:d7:65:59:66:82:16:91:96:26:59:46:ff:68:ec:8e:83:df:
         50:60:9b:05:8f:d9:01:52:30:b8:a7:6d:e1:3a:48:b5:6d:b3:
         fe:7d:63:b1:58:99:ae:64:79:fb:28:fd:18:a7:b8:97:ea:57:
         5b:f6:cf:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----