Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08757016-fb8f-4c6c-a4ea-4c395f43a59d.roa
File:                     08757016-fb8f-4c6c-a4ea-4c395f43a59d.roa (raw, json)
Hash identifier:          Dgh76KXXwArQ5snesNMaqSNEAm33kVQFpU7iIZs++QE=
Subject key identifier:   8F:57:DB:6C:CA:71:C9:AE:F2:C2:06:A8:77:D1:9D:9A:03:2B:51:1B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       42DF4D3F64BC135FADBD27CD5EC96077253DDA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08757016-fb8f-4c6c-a4ea-4c395f43a59d.roa
Signing time:             Fri 31 Oct 2025 01:01:30 +0000
ROA not before:           Fri 31 Oct 2025 01:01:30 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.18.148.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:df:4d:3f:64:bc:13:5f:ad:bd:27:cd:5e:c9:60:77:25:3d:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 31 01:01:30 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=55d606c12703bbe21cb307dca3bbb89308d808874268e492fc2bebeb78d86f0e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:03:c7:e8:28:00:2e:b3:43:b3:c1:d0:22:f8:
                    21:f4:72:b1:11:d7:89:de:47:95:0d:a0:a5:4f:96:
                    b7:64:cc:d0:1d:fe:93:5d:28:e3:74:8c:8a:8f:f8:
                    fb:56:8c:10:12:d0:e2:91:1c:04:1c:f4:d4:f9:7d:
                    14:23:4e:ff:bc:80:5f:66:fd:93:2e:bb:25:1a:7b:
                    35:da:08:25:2d:dd:17:07:d3:4f:b7:31:71:f5:ab:
                    71:37:11:6d:7f:f7:78:16:85:bb:95:69:ee:46:f7:
                    90:40:54:71:33:5a:b5:be:d5:8a:6a:ba:29:21:5b:
                    2f:ca:33:6b:ca:cc:61:b8:de:59:bf:1d:29:f4:bd:
                    d3:d3:dc:b0:e6:67:ba:ed:e7:98:eb:c7:0b:c9:2b:
                    51:a3:66:0d:18:89:7f:9b:3a:75:37:68:09:d7:b1:
                    a3:49:5f:e4:fe:38:23:35:ac:06:5d:79:46:f0:64:
                    52:7c:86:5c:1a:4a:75:67:30:35:c9:e5:29:60:84:
                    6f:5a:e9:c7:dd:2c:be:d5:0e:07:e5:62:3e:6d:2a:
                    7a:34:0e:79:10:18:17:21:7c:40:9c:dd:0e:5c:9c:
                    74:bd:b2:b5:e0:33:af:3a:ce:54:52:35:c1:8e:a5:
                    de:0c:fe:5b:d8:8f:07:73:a5:0b:48:42:9f:55:af:
                    4e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:57:DB:6C:CA:71:C9:AE:F2:C2:06:A8:77:D1:9D:9A:03:2B:51:1B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08757016-fb8f-4c6c-a4ea-4c395f43a59d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.18.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cc:25:83:91:de:43:2b:2e:54:c5:60:65:22:8e:f0:ce:71:3a:
         c0:67:b1:4f:af:d6:7b:23:1d:40:d3:5e:4f:84:16:c5:30:19:
         6b:96:14:32:e9:1f:8f:15:b9:c7:a2:2f:fc:f4:f7:8e:54:6b:
         23:7f:0b:f3:5b:d7:13:59:ba:f0:27:31:53:7b:c9:ac:2b:15:
         32:dd:d1:fb:e8:c3:eb:05:d1:4c:34:e6:48:d3:2f:0a:ad:6d:
         28:7b:82:3d:ba:9f:c5:54:7e:1b:2f:cf:97:54:ae:c9:53:76:
         44:94:ea:cf:50:2f:f6:a9:1b:f8:d3:5d:f4:30:a7:20:38:13:
         7e:e1:b6:01:7c:da:19:5c:79:cd:b8:ef:f6:28:8a:1d:a0:fe:
         54:18:b4:ae:09:36:22:21:3a:15:21:a2:50:8e:e4:35:24:0c:
         e7:85:75:6d:43:d9:9a:d3:a8:bf:18:20:18:31:71:ce:e2:32:
         e5:85:e0:2f:5c:c8:26:07:76:fb:07:0b:a0:66:e6:65:6a:9a:
         68:1f:4b:18:09:7f:af:15:f7:53:66:d3:53:d5:6f:4f:31:e0:
         52:49:4f:39:c6:9e:44:b6:68:e2:77:25:82:12:9f:86:28:72:
         ae:f5:7c:7e:b9:38:1e:c0:46:5c:13:1d:46:b3:3a:6f:41:57:
         fc:b2:1f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----