Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9450df7f-a952-4d04-9779-708f4bfedc40.roa
File:                     9450df7f-a952-4d04-9779-708f4bfedc40.roa (raw, json)
Hash identifier:          UJQpZgHjTqHDoTzvVjHgw8eNT5BoyR8MihBWLp5ot5o=
Subject key identifier:   AF:DC:9C:4E:A7:0F:F8:63:6D:E2:FF:F0:7E:01:AE:5C:36:46:09:B6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0E6B17C33B91ACAEEF9E761B8580A54CE1FDEE2C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9450df7f-a952-4d04-9779-708f4bfedc40.roa
Signing time:             Sat 04 Oct 2025 00:37:36 +0000
ROA not before:           Sat 04 Oct 2025 00:37:36 +0000
ROA not after:            Sat 08 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        151.148.20.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:6b:17:c3:3b:91:ac:ae:ef:9e:76:1b:85:80:a5:4c:e1:fd:ee:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  4 00:37:36 2025 GMT
            Not After : Nov  8 23:59:59 2025 GMT
        Subject: serialNumber=4f286277fbb99ff6c1cc0c6637dc121998419cff4a2f3842afc79c1708035d21, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3c:6d:bc:ce:4e:e4:d4:98:2e:d8:3b:97:92:
                    69:cd:84:75:5e:29:ee:a9:27:ee:28:28:a9:38:03:
                    0b:8a:bd:65:95:c7:5b:b3:ba:2a:ad:b8:1e:b5:ae:
                    03:c4:5a:09:0c:92:9f:8e:39:cb:0b:7b:49:19:19:
                    0a:1d:8f:f5:7c:93:38:94:ec:79:02:d7:d4:32:5b:
                    cb:e6:c6:74:27:3e:1a:3c:00:db:8c:b1:a6:bf:3e:
                    11:14:90:a1:58:3e:2f:1a:2b:be:76:01:34:36:c9:
                    20:3b:2a:ea:65:4c:b6:65:2b:c5:67:af:18:49:77:
                    ff:f1:4d:06:d9:c3:b7:a5:a0:a2:34:ec:26:a1:bd:
                    ed:54:a1:e5:a1:f5:ef:05:78:ae:db:9d:06:d5:19:
                    ba:d4:bc:b2:3c:be:c5:47:2b:aa:9f:af:69:28:a8:
                    e0:7c:b4:46:1f:09:8c:c6:96:ed:ee:35:c3:25:99:
                    31:aa:97:e0:88:89:ab:12:26:4c:00:bf:aa:12:7a:
                    da:be:75:fb:4f:6d:40:75:97:3b:72:da:c5:0d:41:
                    ad:77:f7:d4:53:94:97:69:4d:ba:8d:18:79:de:83:
                    0a:58:34:d4:2d:76:3d:a7:4b:48:ce:bd:8a:5f:5e:
                    c7:db:99:31:6e:ef:3d:22:c0:67:19:db:78:f8:95:
                    e3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:DC:9C:4E:A7:0F:F8:63:6D:E2:FF:F0:7E:01:AE:5C:36:46:09:B6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9450df7f-a952-4d04-9779-708f4bfedc40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.148.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:cb:1d:b2:61:b7:ed:17:2b:05:7e:dc:13:86:64:f7:c6:ea:
         f0:dd:dc:92:fa:83:23:ea:52:53:15:23:87:98:c4:3e:38:e1:
         41:5e:52:5f:62:a8:61:4a:7f:b0:f0:cb:6e:4c:ed:52:ed:09:
         86:f0:f0:c3:86:f4:d3:60:ce:14:8d:86:7e:d9:03:4f:61:bd:
         c5:42:6d:43:3d:93:ed:10:7f:ae:0f:58:24:2c:10:18:fa:a2:
         fc:21:32:48:8d:8f:77:d3:0c:3e:ea:36:aa:52:4f:d9:ae:c2:
         c3:de:44:cb:33:3b:c0:6c:0d:65:5e:27:4a:aa:8e:84:eb:91:
         5c:08:cd:26:fe:2f:2b:f0:99:1b:1c:5a:d8:4d:a8:bd:e0:51:
         8a:14:48:2c:1d:5d:72:c7:3d:e9:b2:7e:0c:5b:90:9a:e7:ca:
         22:b3:26:25:20:87:42:47:a3:4b:80:73:27:27:cf:d0:d5:7c:
         1f:8e:36:fc:ec:91:ef:c7:74:8b:f1:5c:62:40:71:56:77:c0:
         86:08:e1:df:5e:19:1e:30:33:ee:28:70:1f:51:f4:ca:f6:da:
         ea:1e:b1:b3:5e:28:fc:fd:ff:ac:08:a7:66:a2:25:03:7e:cf:
         8e:e9:26:19:9e:6a:94:67:9e:e2:8b:04:ec:95:7a:23:28:bd:
         66:85:e4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----