Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f0598d0-c3d9-49d7-a2f2-3ed195e4de27.roa
File:                     5f0598d0-c3d9-49d7-a2f2-3ed195e4de27.roa (raw, json)
Hash identifier:          PwjIwPuC8zqfuK6f7XKT3oyybJvLiLyQFgFWiNsHTeA=
Subject key identifier:   BC:F4:AB:E6:91:F6:14:F2:18:06:CC:2C:F9:B4:15:64:2B:B7:B0:AF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       296AF3ACFC4A8F07DA193916DD386AF05EE44AD3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f0598d0-c3d9-49d7-a2f2-3ed195e4de27.roa
Signing time:             Wed 08 Oct 2025 00:40:57 +0000
ROA not before:           Wed 08 Oct 2025 00:40:57 +0000
ROA not after:            Wed 12 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.150.24.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:6a:f3:ac:fc:4a:8f:07:da:19:39:16:dd:38:6a:f0:5e:e4:4a:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  8 00:40:57 2025 GMT
            Not After : Nov 12 23:59:59 2025 GMT
        Subject: serialNumber=ecce5d0a26212e7190947129d6bc46bb82559a67927ba5037829957231000d02, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:27:73:3d:65:a1:51:ff:bd:50:16:16:f9:86:
                    d9:48:ec:c7:cd:33:93:1a:b9:f7:17:d0:f0:68:00:
                    1b:d0:43:b9:e8:ee:ed:13:64:4e:33:5d:1b:5f:3d:
                    bf:15:3a:de:05:15:4d:45:27:85:f3:31:24:07:57:
                    d5:a7:b3:f1:60:da:ae:9c:eb:b2:ad:a3:b0:84:70:
                    84:ea:80:37:98:1b:11:c5:12:9c:61:c3:e4:5b:54:
                    e5:43:46:55:83:0c:5e:cd:32:2b:9b:e0:1c:4d:bf:
                    16:6f:8d:d8:f9:cd:5b:0f:e5:66:61:cd:34:28:db:
                    99:d4:6a:9a:ec:38:39:27:d0:1e:1a:f1:38:46:e6:
                    38:cd:9e:05:21:87:5b:7a:3d:7d:b4:6a:e5:02:0d:
                    11:7a:25:18:ea:f1:0a:c1:65:13:0c:ef:a2:ee:1d:
                    28:33:64:c1:43:d7:86:5a:12:86:0c:71:3a:78:2e:
                    68:99:91:42:7e:b7:ae:a0:cc:0d:4c:c0:a4:4a:e9:
                    07:0a:19:ef:9f:bc:a5:2d:63:84:10:85:c1:e3:e2:
                    cd:d0:3c:ec:df:5b:01:8e:8c:47:73:ac:60:a9:d6:
                    8f:b0:3b:d5:84:43:4b:2a:5a:01:06:f4:36:79:77:
                    f3:4f:9d:3c:83:2a:4e:fc:f0:52:3e:92:48:fe:5e:
                    f0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F4:AB:E6:91:F6:14:F2:18:06:CC:2C:F9:B4:15:64:2B:B7:B0:AF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f0598d0-c3d9-49d7-a2f2-3ed195e4de27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.150.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:4e:63:b1:0b:2f:f0:5c:61:d1:46:85:c1:fb:c7:89:3f:b4:
         cd:75:3a:c8:a1:2d:87:60:9b:c3:8c:5b:1e:23:67:c4:a3:91:
         f5:de:3d:2b:34:a7:d3:1a:76:a7:51:9f:06:98:2f:1a:bf:f8:
         db:ba:c4:96:86:d9:5a:e8:27:f7:8b:0c:38:8e:cc:0b:0c:4b:
         f6:c6:19:7c:c7:b1:16:c3:50:8b:f8:86:78:3d:bd:85:07:1b:
         9b:15:7d:cf:5e:4a:c2:75:d8:63:32:98:c2:d3:06:87:4e:4d:
         38:47:5f:f8:30:79:be:13:a5:d8:bb:0f:2f:a8:ac:5c:1f:c5:
         17:e3:f2:c8:49:2e:b0:34:fc:73:d5:36:2e:29:31:cf:06:d3:
         aa:af:d7:9d:f5:fd:17:1a:8f:33:8a:9d:f5:88:a4:ee:ff:35:
         68:c9:74:0e:b6:2b:a4:4f:72:3e:98:43:87:69:b0:9a:b3:df:
         59:c6:00:3c:5b:cd:06:08:17:b4:8a:b3:6f:f7:68:3d:d8:d6:
         de:36:1a:6a:5e:4c:36:43:a8:47:6f:d9:2c:ef:db:fb:7d:bd:
         c9:f0:93:21:75:87:3d:e2:9b:46:29:a2:d5:cd:2e:31:20:fb:
         08:38:ad:b0:17:8e:3e:d3:b2:24:84:48:0a:e3:43:58:44:64:
         f9:e9:53:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----