Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7457f14e-6dd1-4239-b2cf-efe09954cfe2.roa
File:                     7457f14e-6dd1-4239-b2cf-efe09954cfe2.roa (raw, json)
Hash identifier:          kAK82tZREQRINeJUvWR9x+mIfbUB51MZOhpIHMJBeOU=
Subject key identifier:   F0:2B:ED:1A:9B:E5:9D:7D:AB:8C:5F:16:EE:04:0F:10:61:55:FC:C7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       46848FFF47885D6DD749947ED4BC9B82DFF5DB7B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7457f14e-6dd1-4239-b2cf-efe09954cfe2.roa
Signing time:             Fri 31 Oct 2025 00:20:11 +0000
ROA not before:           Fri 31 Oct 2025 00:20:11 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.18.248.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:84:8f:ff:47:88:5d:6d:d7:49:94:7e:d4:bc:9b:82:df:f5:db:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 31 00:20:11 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=a10b7fd2fdd68ae0bef946161be605cca82bc578ecc2a46b7f47a8312eaf7326, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:23:39:76:ea:65:99:6d:d2:71:8c:05:bf:dd:
                    c2:98:45:d8:8d:73:9e:cd:47:17:07:60:40:47:2e:
                    ce:eb:e2:58:65:fd:7c:a7:f3:7e:87:0e:1f:6a:3d:
                    5d:38:b4:2d:17:3f:d8:ae:5a:01:34:2b:64:a8:92:
                    81:11:9c:c2:77:81:4b:a8:41:86:a1:13:b5:a6:33:
                    36:a6:6c:7d:dc:6a:4d:0d:de:f2:bc:07:50:ba:1f:
                    b2:d9:fc:84:37:a7:46:6e:c7:5c:34:1a:ec:63:60:
                    eb:b9:ea:de:72:c4:7c:63:16:22:1d:f7:b3:1b:7c:
                    91:7f:22:a4:fe:79:c7:9a:38:6c:d7:70:af:4a:a4:
                    b7:ca:c1:5e:05:6b:5c:21:6d:63:a4:77:0b:1d:a5:
                    ae:89:e5:95:dd:75:fd:dd:57:fb:a0:7c:16:76:42:
                    9f:1b:65:80:7b:2f:5f:e2:25:9e:d6:30:dd:1d:d3:
                    06:6b:97:93:ca:76:91:41:73:40:ba:8e:26:5e:ca:
                    35:89:e3:88:73:c3:6d:b8:9d:a5:1b:ed:0d:a5:ef:
                    54:20:23:44:02:c1:8e:7b:70:58:df:c7:77:51:05:
                    f5:0c:05:3c:4a:93:77:11:75:6b:f5:f0:4f:9e:2e:
                    01:6c:fb:65:b8:ef:cf:ca:f0:d8:2e:93:7b:71:cc:
                    b0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2B:ED:1A:9B:E5:9D:7D:AB:8C:5F:16:EE:04:0F:10:61:55:FC:C7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7457f14e-6dd1-4239-b2cf-efe09954cfe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.18.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7d:41:2e:5b:f7:c7:56:86:77:f3:e6:d3:e7:ac:27:ba:a0:a0:
         5a:37:1c:6f:37:cd:9f:02:d5:89:c8:54:12:3b:d4:96:df:14:
         0c:d3:59:7e:2d:72:32:68:bf:ab:a5:9d:9e:81:5b:31:ce:73:
         79:3c:47:3c:e7:1a:96:45:e6:72:51:1e:7d:50:53:3b:b8:e4:
         68:ef:6c:d0:b2:ae:b4:db:7f:29:33:26:ed:55:9f:96:9d:3a:
         ec:6c:0d:9b:09:55:e4:df:90:31:9b:05:a6:45:bf:61:52:be:
         21:43:4d:d5:50:0b:13:25:dc:f9:74:0f:02:4e:34:31:c8:d9:
         fe:c0:a8:e5:de:f7:1e:0b:d3:4c:5e:e7:f8:a3:ac:7d:8a:b0:
         90:42:0d:87:02:5a:ad:18:57:29:77:cb:9b:5e:30:81:35:c2:
         5d:b3:56:4d:97:bb:f7:f7:85:07:42:7d:ec:81:33:6a:eb:88:
         ab:0c:ad:bf:a3:f7:d7:78:13:ee:ff:a2:1d:5c:ea:bb:5b:a2:
         43:35:53:aa:ff:a0:4c:b4:ff:de:54:9f:bf:f8:e2:49:87:0a:
         6e:e8:4b:1f:80:50:0c:1f:f5:cf:17:78:22:7b:03:eb:9c:e2:
         4e:86:e4:b3:67:da:27:0d:f8:67:6d:19:d6:e6:05:08:92:fc:
         d8:9c:f9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----