Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be53ea01-b44e-4f52-b5ea-000d05c4e6a2.roa
File:                     be53ea01-b44e-4f52-b5ea-000d05c4e6a2.roa (raw, json)
Hash identifier:          aY7nM5NWcYJ2NdtA/HZhOjGnwdPg/rdb+9e6jK/6G8Q=
Subject key identifier:   07:ED:F4:07:8E:A0:E8:85:EB:85:A1:2B:82:B1:22:92:83:62:3B:5C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       238FB4310AA9448172DE1297C81566B17A5C4E86
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be53ea01-b44e-4f52-b5ea-000d05c4e6a2.roa
Signing time:             Sat 01 Nov 2025 00:40:06 +0000
ROA not before:           Sat 01 Nov 2025 00:40:06 +0000
ROA not after:            Sat 06 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        150.102.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:8f:b4:31:0a:a9:44:81:72:de:12:97:c8:15:66:b1:7a:5c:4e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:40:06 2025 GMT
            Not After : Dec  6 23:59:59 2025 GMT
        Subject: serialNumber=8307a430f9e98e67c51b49854346d47ca695a6708e0d9155b45c4fc0e2de4478, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6c:f8:ed:36:11:f0:53:d9:5b:85:a6:c0:68:
                    b1:84:b8:96:e8:25:65:a9:8d:a5:83:fa:a4:6b:79:
                    40:93:66:b5:50:1c:45:2a:a2:88:01:e4:72:a3:95:
                    1f:26:c6:d2:ef:f9:fd:59:a2:f1:02:40:f8:81:3b:
                    8c:5f:bd:e5:0c:86:61:4f:e1:18:e0:cb:d1:fa:11:
                    53:40:f8:cb:6c:78:2a:b5:79:ea:35:2a:60:0b:08:
                    07:b8:be:84:9f:9f:be:10:43:3d:ea:f0:dd:c0:6e:
                    c0:d5:c3:85:d6:fc:e8:87:a2:1b:83:23:68:ac:41:
                    bf:ef:ef:c6:a9:39:25:55:79:ea:91:56:33:1a:0a:
                    3e:12:88:35:05:0d:b1:90:f3:45:0f:35:ac:09:cd:
                    f7:72:a5:62:9a:2c:11:f0:44:b6:49:20:34:46:9a:
                    c3:21:79:7f:d5:cc:ec:ba:c1:e1:89:7d:ec:2e:e3:
                    ab:17:7f:61:57:65:5a:47:ef:71:c1:41:0f:b5:d8:
                    ee:ba:1c:31:14:ec:ca:ad:b7:8c:9e:64:3d:c1:01:
                    4c:1c:bc:d9:e1:19:25:12:e8:a6:2d:95:27:1f:5b:
                    3d:d6:42:f2:ca:79:82:b0:b9:7b:0d:e8:0a:77:13:
                    ca:b4:a4:9c:1a:fa:3e:ef:b1:f5:51:cf:52:41:c0:
                    6a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:ED:F4:07:8E:A0:E8:85:EB:85:A1:2B:82:B1:22:92:83:62:3B:5C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be53ea01-b44e-4f52-b5ea-000d05c4e6a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.102.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3a:48:fe:90:6d:33:06:b5:67:95:25:72:24:fc:84:5c:96:85:
         d6:8c:c6:b0:3d:b5:e7:81:41:c8:bf:4b:39:b3:c3:c9:3b:aa:
         bd:b6:6c:de:56:35:9b:63:bd:68:04:14:eb:4d:75:1f:a9:c0:
         e2:ed:44:01:1f:df:32:76:a1:45:73:a4:a6:e8:c6:1a:4e:05:
         02:54:37:64:69:97:5d:aa:d6:03:b4:4a:02:aa:09:a5:bd:36:
         7d:2b:86:e3:08:8b:bb:a5:8d:71:3e:a9:38:17:40:29:10:3d:
         e4:2c:06:5f:14:ff:74:a8:2f:c2:e2:c3:e1:02:37:bf:d3:20:
         3b:06:6b:8a:c9:c9:00:78:eb:83:73:93:13:88:19:5b:9e:c5:
         e9:74:0f:7e:89:0f:dd:e5:f6:9b:10:f3:aa:d1:ff:28:94:f2:
         04:56:ca:51:64:b5:58:5e:6e:8a:16:4d:82:1f:fc:8d:bc:98:
         1e:4e:47:2f:36:e1:53:ef:0a:eb:d3:14:31:60:af:d1:b5:6e:
         63:bc:a5:82:dd:79:41:bc:1e:f3:77:62:d6:bd:00:93:fd:3f:
         1b:b0:3e:71:9c:7f:7b:64:4b:1a:a1:f3:79:f4:01:ae:c0:7d:
         ed:68:0b:bb:e8:89:a3:a2:8a:0d:4c:dd:6a:47:21:12:87:a7:
         60:0f:d8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----