Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2eec9bef-0b4e-406b-9a2a-5be5fe088cae.roa
File:                     2eec9bef-0b4e-406b-9a2a-5be5fe088cae.roa (raw, json)
Hash identifier:          r7ScjOlKvESq9oJ6aBEuFo+/T125uBdxJAn/Pu+6FrM=
Subject key identifier:   D9:F7:6C:E0:CD:06:41:A9:77:6B:E8:BA:17:80:A5:96:46:C6:2F:EC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       42D169B9A804044F0FBA93A2ECBACB5DA9B25621
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2eec9bef-0b4e-406b-9a2a-5be5fe088cae.roa
Signing time:             Sat 18 Oct 2025 05:11:01 +0000
ROA not before:           Sat 18 Oct 2025 05:11:01 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.66.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:d1:69:b9:a8:04:04:4f:0f:ba:93:a2:ec:ba:cb:5d:a9:b2:56:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 05:11:01 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=9d2c84278ca1d4dd4ff48c1fd8530ba86869e5118f4f8fdef7d9993c3d078eb4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8d:47:1c:cd:94:79:21:1f:25:b0:43:b8:71:
                    a8:4e:af:b1:af:08:c5:81:9f:a3:90:5b:a4:9c:f0:
                    f4:a3:08:3a:d7:6a:88:f9:96:4a:9f:a6:f7:52:f9:
                    18:4a:c5:b3:57:5f:76:85:9b:4a:2b:bb:5a:b0:f8:
                    3c:e7:d5:f0:31:f5:80:45:18:3e:14:50:ff:89:6a:
                    9a:f4:a3:70:2a:74:04:98:98:94:2b:9c:fa:7a:0b:
                    8c:7b:1d:0b:3c:c6:f2:05:28:04:6c:2f:44:7b:c6:
                    0c:65:68:44:59:e1:42:78:e8:f5:03:de:07:0a:08:
                    e4:38:1a:2d:cd:80:b7:11:1b:80:6c:cc:0b:82:42:
                    03:19:83:0f:41:80:38:c8:a8:19:45:01:4b:75:62:
                    45:44:d0:31:99:02:d6:fd:23:eb:18:5b:54:0c:f0:
                    3a:ab:d4:38:e1:d1:84:c7:39:ea:f8:85:b1:29:aa:
                    3c:47:90:b4:42:20:d4:25:db:f9:15:5c:86:42:cd:
                    3c:c1:69:c9:a2:d4:bb:1e:07:a4:75:c2:e9:48:dc:
                    92:71:b3:a6:62:41:74:89:8e:30:81:4d:d3:69:68:
                    ec:d8:b6:1e:44:69:21:e8:e6:02:5c:2c:d1:59:11:
                    ef:52:93:6f:14:a4:96:75:2c:22:da:02:d2:40:2d:
                    bd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F7:6C:E0:CD:06:41:A9:77:6B:E8:BA:17:80:A5:96:46:C6:2F:EC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2eec9bef-0b4e-406b-9a2a-5be5fe088cae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:b0:50:43:aa:12:82:c8:b2:54:f6:5b:ed:a1:bf:25:5c:36:
         a4:72:6a:83:13:06:08:8e:22:1e:47:f0:ff:90:79:33:7e:53:
         a5:e8:ab:2b:9b:03:fa:ef:81:e9:dc:73:5b:e2:8f:bb:83:1d:
         68:9b:05:12:c0:1f:8f:44:5d:3d:fd:9a:ab:a3:74:32:e0:be:
         51:9e:b1:54:46:f4:64:6c:0c:da:58:99:bf:48:62:18:61:7a:
         4a:42:3e:40:83:bb:40:1e:61:09:c5:16:07:58:78:8e:d3:1d:
         a2:f8:cd:0a:f7:79:1c:f0:9d:b7:ca:48:41:0e:b3:38:0c:cf:
         97:e3:1d:8f:58:ff:e1:4c:12:66:1e:0d:20:cf:94:30:7b:0e:
         e7:55:d1:58:42:7d:74:12:29:63:f1:c7:7a:da:d7:57:9d:bd:
         87:80:73:dd:9d:a7:39:a9:51:c0:82:f4:79:d5:f5:9a:4f:70:
         6c:b0:fc:da:ae:87:74:22:69:3a:b4:58:c7:95:c6:47:fc:54:
         e6:81:a9:ca:22:26:5c:7c:4f:6e:3c:1c:ee:0b:cd:02:93:9d:
         91:0d:a2:37:4d:bb:23:62:9e:67:76:f5:3d:57:4c:9e:f8:73:
         b9:17:75:f1:09:c4:15:3b:48:f0:28:6c:f6:58:d7:b8:6c:f4:
         70:77:b3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----