Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/137148eb-0e13-4744-93ee-0b1cd405c735.roa
File:                     137148eb-0e13-4744-93ee-0b1cd405c735.roa (raw, json)
Hash identifier:          6rOfkU7gTdtPF0fn/QwOyyBLE1R55UBRiH3qHO9rmqg=
Subject key identifier:   8C:91:BA:26:DC:05:20:7A:A4:D3:E7:1A:CE:73:DA:C3:0C:D4:3F:3D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       05ACF12D9FBE71EC779B8F193F0F5801E614757A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/137148eb-0e13-4744-93ee-0b1cd405c735.roa
Signing time:             Tue 21 Oct 2025 00:20:10 +0000
ROA not before:           Tue 21 Oct 2025 00:20:10 +0000
ROA not after:            Tue 25 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        98.82.156.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ac:f1:2d:9f:be:71:ec:77:9b:8f:19:3f:0f:58:01:e6:14:75:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 21 00:20:10 2025 GMT
            Not After : Nov 25 23:59:59 2025 GMT
        Subject: serialNumber=ad239febbbaf342391a0fe24f7300a0d799889a691caedcfebe41c276f080cdb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:13:4f:76:ac:b0:3d:da:8b:6c:70:3a:0d:8f:
                    38:22:3d:65:58:fc:ac:8a:9f:f5:34:29:33:7c:64:
                    f3:1f:ad:22:1a:d0:51:7b:dd:45:c7:e5:94:b2:f3:
                    56:3a:9d:f9:ec:7b:48:ac:91:70:ec:7e:c8:40:1e:
                    90:3b:f2:a5:20:cf:10:e6:c9:31:af:e2:67:ed:4d:
                    01:ec:65:aa:90:f1:8e:b0:97:cd:65:48:c4:96:6f:
                    27:7e:75:c1:e2:59:ac:fd:86:68:af:65:6f:1f:dc:
                    7e:31:a1:40:9d:54:45:70:83:0a:ed:78:f4:e1:d7:
                    db:c1:9b:46:a5:1f:5a:16:e7:b8:c4:e8:4b:db:8e:
                    8a:c0:05:d6:87:56:f7:21:fb:80:86:80:79:70:cf:
                    c0:e6:a9:d6:1a:44:21:34:17:4c:c1:ca:95:73:93:
                    0f:09:17:b1:41:d2:4e:3d:b5:cd:5b:7e:2c:60:6a:
                    53:ea:9b:b9:c0:9f:88:ad:5c:b3:86:ac:ef:b0:ad:
                    d1:26:8b:46:7d:77:8e:67:b5:6e:a3:51:8b:de:91:
                    50:54:85:d9:ae:d0:aa:06:4a:a5:6b:e1:75:fa:c0:
                    bf:32:d4:55:dc:a5:d1:94:3f:b2:56:c5:77:c4:df:
                    30:0c:7d:87:60:26:90:7a:87:5c:fd:93:47:ae:0c:
                    6e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:91:BA:26:DC:05:20:7A:A4:D3:E7:1A:CE:73:DA:C3:0C:D4:3F:3D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/137148eb-0e13-4744-93ee-0b1cd405c735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.82.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:a1:92:3f:cd:3e:db:e8:56:8c:49:b0:36:5b:d3:79:ff:9f:
         ea:14:55:91:07:e3:58:f3:38:32:e6:08:37:bd:b1:a2:0d:b1:
         a2:f5:95:02:48:e8:76:21:14:a4:12:08:ad:b7:63:7d:25:fb:
         97:36:a0:08:0a:f6:d2:f0:fa:58:be:6f:78:f7:3e:3f:d8:10:
         ed:cf:ae:e4:0a:b1:a4:61:50:a7:8a:96:46:34:1f:8a:f6:4b:
         0a:c9:ec:7f:66:0a:ef:82:38:d0:df:40:3c:fa:6e:83:ae:78:
         f3:98:9d:67:5c:2a:64:77:da:64:a2:5a:41:a2:aa:c8:0b:50:
         17:8d:df:7d:96:6c:6d:f4:03:33:3d:17:48:c8:9b:c8:78:f9:
         8f:95:99:60:d1:15:e9:9b:fb:2d:fa:4f:69:0e:69:a6:62:99:
         aa:4d:2c:59:ea:3a:35:c9:30:ee:5e:5f:b5:ff:7c:a1:06:2b:
         77:aa:8d:94:c3:af:91:98:70:c7:b4:05:ca:55:a1:fb:0b:16:
         63:fe:35:ba:4d:ce:0d:7b:28:66:9c:20:2c:5f:6b:89:78:14:
         a2:e8:a5:d6:42:a0:fc:ed:a3:1b:71:a5:1f:d2:6c:54:73:64:
         5a:22:ee:79:1a:26:dc:a2:46:f2:b4:dc:c5:65:cb:27:31:0c:
         e7:fa:5f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----