Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26de01b9-d37c-418d-8f96-7dcc768d563c.roa
File:                     26de01b9-d37c-418d-8f96-7dcc768d563c.roa (raw, json)
Hash identifier:          NywrzOTusPJebF9MO2EXDW9ARpLgd4wCITC23mBufec=
Subject key identifier:   CB:8B:44:47:94:7D:72:80:1E:BD:21:01:9F:84:C7:C8:43:BB:09:7B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       08EDB6D6326A5C82590D90F1F46FB3EEA93060D6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26de01b9-d37c-418d-8f96-7dcc768d563c.roa
Signing time:             Sat 18 Oct 2025 04:40:49 +0000
ROA not before:           Sat 18 Oct 2025 04:40:49 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.8.12.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ed:b6:d6:32:6a:5c:82:59:0d:90:f1:f4:6f:b3:ee:a9:30:60:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 04:40:49 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=d683329e191f7bcaf3e2ca1342617462aef785be6b908394420a30852f63bd31, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d4:3d:45:a1:06:21:3f:36:07:7c:07:23:f0:
                    7c:03:bd:24:32:3d:c2:79:25:17:2a:0a:43:03:f3:
                    bd:9a:92:be:88:7a:66:b4:2c:1a:4b:64:59:31:15:
                    b6:42:29:b5:92:48:b3:60:13:54:f1:37:f2:a2:ac:
                    16:83:a3:f6:21:d8:96:53:1f:61:34:f3:6a:3f:67:
                    c6:42:ab:1b:b8:f8:84:b5:ed:d4:f1:39:c0:85:fe:
                    87:5b:16:72:65:8f:78:1e:55:7b:e5:84:54:b4:a6:
                    06:29:1d:9d:5e:11:56:1f:ed:6e:a5:a0:ae:6c:76:
                    1e:30:a7:22:02:c1:2d:41:6f:c0:ec:d3:e7:8f:33:
                    61:57:64:db:99:37:eb:e9:7e:ee:ed:0f:4e:8f:05:
                    50:31:2a:97:01:0b:42:51:28:b1:f2:9a:9d:8d:7c:
                    17:11:96:3c:60:3f:0b:d4:c1:a4:20:56:81:62:4f:
                    5f:56:10:5b:da:eb:72:db:16:b6:74:02:ab:63:d2:
                    92:df:ca:67:ee:a9:39:1d:43:be:57:59:78:f2:11:
                    fb:3c:65:95:fd:9b:74:af:c1:71:91:74:4e:5a:76:
                    db:8f:46:c3:7d:89:de:32:9f:7a:c5:80:c5:c5:a2:
                    60:43:60:bd:c6:3b:c1:fc:aa:4e:21:2e:77:0c:29:
                    d9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:8B:44:47:94:7D:72:80:1E:BD:21:01:9F:84:C7:C8:43:BB:09:7B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26de01b9-d37c-418d-8f96-7dcc768d563c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.8.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:31:4a:2a:9d:ba:02:2f:04:35:e7:bc:1a:83:ea:b6:d9:c6:
         23:f8:31:f5:0f:45:60:f1:05:ee:f8:dd:96:f0:ea:bc:be:cf:
         e8:5e:7d:58:1f:7b:d8:86:d1:b0:a4:f6:91:e3:92:0b:85:48:
         11:4c:23:35:28:d7:22:53:3e:5b:7c:73:10:0a:1f:9c:c9:fc:
         4a:ed:44:bd:17:40:11:df:1f:6d:6a:27:08:8a:ae:63:6f:01:
         fb:79:39:9c:48:4e:86:e2:14:88:1e:df:ec:65:a7:ff:d3:da:
         d9:64:9b:eb:b5:9a:75:c6:e2:d9:f5:04:e7:7b:04:50:7f:6b:
         c9:11:6a:68:5e:71:52:8d:ea:8e:a5:8a:79:71:b0:58:03:dd:
         10:0b:b2:f4:bb:24:b8:87:6d:9b:53:a7:ca:fd:8b:bf:67:4c:
         80:50:0b:c9:67:15:ba:b2:4a:9e:35:43:eb:96:5a:a9:08:2c:
         c2:d7:9c:01:ac:c8:e6:b6:80:46:7e:8b:04:19:c1:d1:ad:11:
         4a:a6:60:de:8e:28:f9:3b:6c:68:ea:12:f1:64:93:71:b7:21:
         d8:66:94:0e:d6:e1:85:f8:e7:fa:c8:83:83:bd:3b:58:ba:5c:
         7e:a2:d3:94:dd:83:62:72:80:55:f2:ac:90:75:05:39:f3:00:
         0b:bb:94:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----