Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7561a700-0da6-4f4d-9e3e-96a010c7cb91.roa
File:                     7561a700-0da6-4f4d-9e3e-96a010c7cb91.roa (raw, json)
Hash identifier:          OigdQP6j5TSEoQxYxq2LCmrWDGELWcAWTuv4qv0WUFM=
Subject key identifier:   0A:69:BE:35:97:CD:F2:41:A9:60:DC:A6:E5:05:0E:A9:1E:E2:B9:29
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       05D6CF0F07FCEEBFD7A15E5CF51BAB4C86575649
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7561a700-0da6-4f4d-9e3e-96a010c7cb91.roa
Signing time:             Sun 02 Nov 2025 00:21:17 +0000
ROA not before:           Sun 02 Nov 2025 00:21:17 +0000
ROA not after:            Sun 07 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.150.18.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:d6:cf:0f:07:fc:ee:bf:d7:a1:5e:5c:f5:1b:ab:4c:86:57:56:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  2 00:21:17 2025 GMT
            Not After : Dec  7 23:59:59 2025 GMT
        Subject: serialNumber=6901cd8682b0b91981b950b66a8773a8c7fb28a8a5a9fee39f92cd1f1bf7bf93, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2a:e1:03:b8:de:3b:2d:75:b8:40:15:0c:83:
                    e4:20:f7:da:4e:52:24:5a:79:c6:1e:82:4c:ec:cc:
                    c9:4f:57:79:ae:5b:f7:50:96:a0:2a:d6:67:9a:42:
                    38:a1:39:75:76:ce:1b:cb:c2:d4:ec:20:11:3d:97:
                    f9:45:e8:85:f0:92:bd:19:89:7e:c4:ff:ff:8d:52:
                    02:d3:18:e9:49:e8:ec:31:05:cf:a8:ff:09:34:af:
                    f6:5c:75:2f:7a:e9:85:db:c7:6c:62:26:a2:47:16:
                    95:d8:69:5f:8c:6a:69:ba:e3:ac:38:18:a1:f5:8a:
                    d0:ba:ca:60:0b:f6:aa:84:3d:24:76:97:1b:64:27:
                    81:f8:1e:2d:dd:05:2e:64:5e:11:fa:36:8b:02:af:
                    00:96:32:8e:2a:47:50:47:d5:64:cc:7c:1b:fa:f4:
                    25:02:01:fe:cf:5a:66:8b:9c:de:4c:47:b7:33:f3:
                    4f:07:d8:e3:dc:5b:fc:af:b1:cc:54:cc:89:87:d8:
                    a5:bc:e2:8e:5a:df:9e:01:4b:81:30:aa:13:d7:96:
                    95:cd:3d:94:02:b9:27:18:fa:2d:a8:9b:d4:eb:c1:
                    6f:d8:ef:20:65:a1:18:a2:42:cb:ad:c0:28:f6:7d:
                    99:6b:08:d2:fd:d5:2a:f3:f8:50:f0:98:6b:24:17:
                    de:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:69:BE:35:97:CD:F2:41:A9:60:DC:A6:E5:05:0E:A9:1E:E2:B9:29
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7561a700-0da6-4f4d-9e3e-96a010c7cb91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.150.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:90:eb:f7:b8:49:d2:e4:59:d9:d5:de:97:cb:95:1d:ac:0d:
         c8:44:01:b3:fd:de:b7:c5:50:c8:ce:f3:aa:ec:a9:16:d2:0c:
         2d:19:1e:8b:5d:54:be:79:3c:ef:80:3a:b7:57:6d:bd:2d:14:
         47:ed:fd:6d:57:87:de:2b:9a:53:c8:aa:85:b1:26:1d:21:d2:
         86:3a:13:ae:29:18:c6:93:c8:2a:d3:5b:08:84:ae:2e:e2:ef:
         68:02:9d:cb:28:4a:12:32:4d:b4:2e:7c:82:c7:86:b5:ba:04:
         c8:00:47:6f:6d:b0:a2:8d:49:29:a8:7d:b9:53:f5:7f:66:7a:
         37:18:b4:34:b0:9d:f5:d7:65:75:ca:7a:bc:95:a7:65:e6:c2:
         8f:f7:db:fa:db:75:b4:d3:95:b6:e8:b3:2e:c0:11:c8:54:a9:
         db:f3:70:60:bf:02:de:80:91:eb:e5:d3:66:1c:32:ac:15:ee:
         82:d3:bb:52:51:b2:79:36:01:11:a2:9f:ed:5e:18:a5:21:43:
         ec:36:eb:a6:9f:94:bf:03:03:7c:68:16:cf:6a:c6:83:ba:05:
         c9:51:f5:c0:5f:2c:17:c0:08:c4:8f:72:72:02:85:7f:3e:ea:
         73:32:88:a8:b9:4d:7e:88:3b:bd:e1:46:71:0d:4e:ff:2c:d3:
         41:da:7b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----