Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce802f82-6d5a-453e-b8c9-f5ee559bf8c5.roa
File:                     ce802f82-6d5a-453e-b8c9-f5ee559bf8c5.roa (raw, json)
Hash identifier:          br4DuiYsWqXETfak/cS0ApPVfMphLJQcaB6f6RxEkQs=
Subject key identifier:   E6:EF:EB:4C:CC:DA:31:12:61:C8:C1:DA:80:7E:61:F3:67:1C:C9:76
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       53F4171416AC941BDA3B2DE73B2C57DBD755F705
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce802f82-6d5a-453e-b8c9-f5ee559bf8c5.roa
Signing time:             Sat 25 Oct 2025 00:30:09 +0000
ROA not before:           Sat 25 Oct 2025 00:30:09 +0000
ROA not after:            Sat 29 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        152.24.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:f4:17:14:16:ac:94:1b:da:3b:2d:e7:3b:2c:57:db:d7:55:f7:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 25 00:30:09 2025 GMT
            Not After : Nov 29 23:59:59 2025 GMT
        Subject: serialNumber=0cbfddb0551f239ded441cbcbb1ae2b9cb980f4702c621e0ece59cd2b5a1c1a0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b4:68:2e:65:93:07:a5:2a:ed:76:c2:c9:17:
                    a8:ed:8b:13:76:c0:e4:7c:d1:5d:ed:57:7b:2a:cb:
                    95:03:d7:02:c8:6a:f8:19:5d:af:c9:92:e8:c5:b2:
                    f4:b7:a2:bb:b0:4b:85:a5:39:ad:92:1c:28:04:96:
                    e0:87:64:a7:b6:33:53:f8:a6:f6:7d:59:ce:bb:e1:
                    e4:b0:e4:ec:47:00:8d:a4:59:3a:54:1c:b6:75:cd:
                    b2:fb:0d:71:cf:38:05:f3:a8:9e:95:22:c1:98:c0:
                    de:e3:ea:b8:70:d4:88:17:03:cc:9e:70:22:f6:d5:
                    6f:5a:99:ee:53:e6:d2:c3:ac:a2:50:f9:2c:bd:1b:
                    03:f9:c4:c0:ee:21:62:3f:b0:e3:fe:c6:c8:1d:ec:
                    f5:2c:b5:cb:52:6b:d8:8a:04:ff:bc:60:f3:4b:41:
                    d9:c3:cc:06:e4:b5:59:f5:80:d6:ec:f3:67:f0:4f:
                    22:9c:85:e4:68:c1:f3:a1:7a:c5:e9:2e:7c:b0:34:
                    fc:e7:0d:b6:c5:bb:5f:1b:12:f4:ab:c0:86:1c:f6:
                    68:77:92:38:a5:25:f4:97:4d:94:66:dd:6f:92:20:
                    52:be:f4:74:f4:b2:fb:a5:38:7a:83:22:b8:38:a0:
                    29:92:da:6d:09:12:35:10:3a:3d:00:b3:00:c6:48:
                    54:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EF:EB:4C:CC:DA:31:12:61:C8:C1:DA:80:7E:61:F3:67:1C:C9:76
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce802f82-6d5a-453e-b8c9-f5ee559bf8c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.24.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3f:79:04:ef:75:46:b2:41:79:78:d2:00:1a:d7:c9:77:fd:1c:
         0a:79:85:1f:6f:23:2a:1f:1a:da:a0:78:9a:12:fa:eb:63:30:
         1e:64:9c:69:d1:6b:49:c9:25:6d:54:80:06:ad:46:2d:7a:f7:
         d1:63:8b:8e:53:9c:92:03:bc:3a:36:8a:6f:7f:a6:5f:55:de:
         f3:4a:db:d8:4e:6d:4a:f1:ee:77:f4:51:14:31:c0:c2:5d:2e:
         81:32:48:ee:64:9a:2a:5e:bf:f5:22:85:57:1c:f1:73:28:66:
         7c:d4:9e:02:52:e1:4a:bb:e7:a5:14:92:e9:9b:de:11:66:4e:
         9d:02:23:da:eb:41:df:64:de:38:4b:46:2d:d5:4d:4c:10:ff:
         75:8c:ab:06:68:54:2d:b5:1e:3c:13:e0:b1:6a:27:04:c9:2e:
         10:92:5d:21:f8:60:8e:b3:3d:13:bb:0f:20:df:5b:bb:e4:22:
         db:77:f3:10:15:b8:b3:d9:45:33:71:7d:c5:2a:8e:49:1e:dd:
         8a:c2:72:8b:dd:20:4b:4e:f1:32:d7:4b:11:8e:a4:8e:9c:7e:
         2e:f8:97:f0:a3:86:47:2d:a8:e4:23:b5:c1:8b:c8:2e:27:87:
         d8:e5:b0:6c:54:3d:36:5f:ab:fb:90:a3:75:f9:7b:aa:6d:97:
         ae:d1:1b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----