Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01cf1486-0fd0-4568-b755-6468bf8b4185.roa
File:                     01cf1486-0fd0-4568-b755-6468bf8b4185.roa (raw, json)
Hash identifier:          9ckIG0qo5TQkw70iXuvw1X5+9GgDstW19ZFWFZIrxjI=
Subject key identifier:   ED:C7:9A:40:81:C0:47:E4:E7:C3:68:1B:D2:4B:EB:4D:B6:93:65:09
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1D755C20A82947A7CE64759F25C22B6079609722
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01cf1486-0fd0-4568-b755-6468bf8b4185.roa
Signing time:             Sat 18 Oct 2025 01:11:06 +0000
ROA not before:           Sat 18 Oct 2025 01:11:06 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.98.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:75:5c:20:a8:29:47:a7:ce:64:75:9f:25:c2:2b:60:79:60:97:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 01:11:06 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=ac5957fc43bbe66015035a72d52469ee596b4df63dfe4183759df7349e6ebb8e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a8:98:52:16:03:1a:80:4f:c1:62:ce:67:f1:
                    af:09:da:4d:a8:0e:0b:20:d7:2a:eb:95:31:f2:9e:
                    e8:02:9c:e0:69:92:39:97:85:b6:3b:7b:27:58:e1:
                    29:86:06:31:08:ab:be:48:e7:91:5f:60:22:3d:a1:
                    be:65:58:9c:d5:3b:d4:fa:4a:6d:55:8f:db:17:bd:
                    0f:dc:9f:0f:78:a5:c8:d6:a1:76:99:84:83:00:2d:
                    a3:5f:a5:a4:18:d3:3a:9d:49:39:6d:57:07:36:fd:
                    f3:23:0d:87:54:d7:20:32:ab:38:a5:e2:a3:91:ba:
                    ef:48:38:a1:d4:03:7d:7a:a3:1d:cc:01:19:a1:a8:
                    a0:66:db:bf:c8:b7:68:24:18:2b:38:d0:14:48:98:
                    e4:c6:24:4d:bb:4b:7c:29:d6:71:73:5b:cd:53:47:
                    08:0b:10:bd:f9:11:11:81:0d:39:df:86:77:42:72:
                    4f:04:07:b3:c3:34:ff:06:b0:52:15:1a:96:04:7f:
                    95:40:6d:d5:e9:3e:d5:cd:de:c3:34:f8:58:dd:df:
                    e2:11:da:cb:47:a6:e9:48:cd:52:f3:92:86:da:14:
                    06:41:b6:bf:61:fa:45:55:2c:79:c4:10:a5:70:2e:
                    32:ef:f5:67:d8:aa:8f:c9:56:e4:ee:3c:07:21:83:
                    6c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C7:9A:40:81:C0:47:E4:E7:C3:68:1B:D2:4B:EB:4D:B6:93:65:09
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01cf1486-0fd0-4568-b755-6468bf8b4185.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:e0:6b:de:c4:61:53:4b:4a:63:7d:7d:54:39:cf:1d:08:ce:
         06:0d:c2:c6:c4:a0:2a:88:d2:92:6b:c6:af:8d:30:94:72:54:
         4d:87:80:f4:6c:8c:b6:22:10:e0:45:bd:52:2f:7b:4d:bd:cf:
         06:1b:8c:96:0d:83:74:af:9a:ce:d1:04:6f:f3:2a:d9:12:91:
         d3:78:1d:99:45:59:ab:03:66:72:7e:0f:07:cc:4b:ed:c7:8a:
         99:e9:80:d4:03:37:d0:7c:46:f4:54:d5:1f:95:c7:3f:de:47:
         5b:9a:4f:17:69:5f:80:09:a7:90:84:3b:e3:b4:9d:7c:3a:4c:
         72:05:5b:f7:7b:f0:ee:52:d7:00:04:2e:e7:ea:e4:c3:b9:60:
         ad:89:ff:da:ee:c4:72:be:54:86:31:b6:1a:48:a6:f2:13:a7:
         bd:3d:5b:6c:9f:5f:dd:21:24:91:9a:44:dc:21:16:2a:49:fa:
         d0:fc:90:d4:b9:1f:3c:8f:d7:ee:69:08:61:5f:44:50:50:19:
         26:e9:18:af:89:0b:2e:8f:28:96:6f:ff:5f:20:d2:c8:64:15:
         a3:5d:6f:d3:20:f8:19:37:a6:cb:81:9e:71:bd:3b:00:6b:6c:
         ba:26:a4:5c:3c:87:01:5d:e8:d4:33:11:95:47:ff:66:90:88:
         05:19:62:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----