Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f98e5b39-9271-4700-b6e2-c2328787d9f6.roa
File:                     f98e5b39-9271-4700-b6e2-c2328787d9f6.roa (raw, json)
Hash identifier:          WNxoE9Fu4to6cN88st3OuM4BIY+IGUn++YmXYiq0tGA=
Subject key identifier:   F4:24:EB:D1:53:5D:75:E8:D3:B7:CA:E4:C6:E1:98:DF:1C:70:43:B1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       67722D4DEADB20479E9C5121C8C82465251ACC80
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f98e5b39-9271-4700-b6e2-c2328787d9f6.roa
Signing time:             Sat 27 Sep 2025 00:02:20 +0000
ROA not before:           Sat 27 Sep 2025 00:02:20 +0000
ROA not after:            Sat 01 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        151.148.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:72:2d:4d:ea:db:20:47:9e:9c:51:21:c8:c8:24:65:25:1a:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 27 00:02:20 2025 GMT
            Not After : Nov  1 23:59:59 2025 GMT
        Subject: serialNumber=ca8410afa84858ad1cde002f295b39583e97cb243d1f9cb48e0d20cdc48297bf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0f:3b:d8:aa:8c:fb:b6:4f:ad:1f:13:9b:3c:
                    ae:93:04:f5:73:4f:05:7c:63:98:74:2b:ca:b5:34:
                    e7:c4:2c:3e:b6:25:46:f2:88:c7:a2:26:37:ce:02:
                    94:29:47:19:02:97:30:37:98:e3:ba:11:a6:8e:59:
                    c6:89:ef:9e:d1:85:86:b5:bd:dd:ef:45:f3:af:87:
                    cd:85:ac:85:4f:86:f5:b5:31:aa:8d:85:b3:5e:d1:
                    e8:29:f0:ac:cc:5f:4f:26:99:69:d6:d0:21:f7:5b:
                    f0:58:26:40:30:92:d9:af:0c:43:23:f1:0d:db:ac:
                    89:4c:51:0f:ef:2c:be:75:dd:58:ea:b2:44:a4:6f:
                    b0:cd:9a:40:4b:0e:ef:0e:e9:cd:3b:63:08:86:3b:
                    fe:cc:bd:eb:b5:ea:8e:ac:22:69:ec:d2:5c:45:1c:
                    d1:bc:f5:93:1f:f9:e3:cd:15:0f:d6:40:fc:5b:54:
                    ed:43:fe:95:6d:dd:1d:f5:fc:dc:6e:03:c2:9b:1f:
                    da:a6:8b:0f:84:6d:53:a7:55:3b:cc:9d:64:9d:67:
                    a1:6c:2e:b6:b2:bb:28:84:ca:3d:f5:2f:0d:6d:2c:
                    e6:1f:7d:e6:86:8d:c8:cf:62:ba:a6:a9:bc:8c:e2:
                    fc:2f:0f:62:96:e6:67:8e:c1:fa:a3:88:0f:90:7f:
                    f6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:24:EB:D1:53:5D:75:E8:D3:B7:CA:E4:C6:E1:98:DF:1C:70:43:B1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f98e5b39-9271-4700-b6e2-c2328787d9f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.148.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         58:ef:52:30:99:07:4c:ac:9d:1a:6d:20:2c:75:b3:37:ea:3a:
         9e:e1:4b:09:31:6d:a6:02:05:a1:ef:fd:5b:4c:fd:aa:e3:12:
         7d:dd:28:7a:88:fb:8b:a7:4d:b6:16:d3:91:81:32:3e:3e:28:
         4e:a4:13:22:69:fd:0a:7e:95:ce:f2:29:3d:79:1b:98:54:c9:
         dc:d9:34:45:27:43:8d:af:77:ee:06:5f:67:b4:b7:16:70:90:
         10:eb:01:8f:6b:26:46:fb:c1:8e:4c:c4:47:51:30:6e:8e:ad:
         0d:88:f2:1d:69:5e:d8:cf:13:15:87:6d:6b:60:ca:c0:ca:5c:
         91:14:f6:31:98:c2:ee:90:a3:16:11:08:11:b1:42:65:78:88:
         d0:5d:4c:4b:d7:6c:7c:7a:26:16:98:27:63:0e:97:58:0b:22:
         a5:9c:80:08:13:f1:c4:7f:72:04:53:31:e0:68:25:51:d5:04:
         50:ef:1f:3d:9a:de:f1:99:28:2d:1f:93:fd:f1:7f:9e:37:8d:
         e8:32:bb:ac:af:38:4f:c3:c3:f0:03:a5:4f:9a:cc:a7:f5:c2:
         dc:b4:61:96:cf:b9:27:db:9c:dc:c9:cc:12:c6:38:a5:d0:06:
         11:d5:45:51:18:72:12:d2:6a:c8:d1:65:80:18:39:bd:bc:90:
         b9:d3:39:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----