Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46df78e3-d80c-4b8b-ab26-f2cf80bc5d8e.roa
File:                     46df78e3-d80c-4b8b-ab26-f2cf80bc5d8e.roa (raw, json)
Hash identifier:          0/SzNS+/rkq0dazycmVkX4KVsJkUsidO8jfPnwC4ym8=
Subject key identifier:   9E:95:25:25:51:4B:4D:37:0B:F1:01:93:56:13:F1:9D:A1:DC:46:EE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       701D0B7C51B1416F4BDA5072FDA1BE66BD810984
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46df78e3-d80c-4b8b-ab26-f2cf80bc5d8e.roa
Signing time:             Sat 18 Oct 2025 02:41:04 +0000
ROA not before:           Sat 18 Oct 2025 02:41:04 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.8.80.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:1d:0b:7c:51:b1:41:6f:4b:da:50:72:fd:a1:be:66:bd:81:09:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 02:41:04 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=0cb14416dc2bfce46f50da86b2fce4eadf0c040e4b9beef4787d57e6fd1f5251, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a6:31:27:5c:45:69:52:ae:45:73:d5:9a:35:
                    3a:2f:2b:da:ad:34:1c:a5:07:e1:11:3f:a0:4a:ad:
                    fd:c1:10:c4:9a:ce:e4:b4:0d:64:6b:39:7f:34:fa:
                    c5:78:89:81:1b:d3:99:d5:9a:db:f2:37:d2:78:f8:
                    14:5b:9f:dd:b7:48:e1:f2:ba:d5:7d:df:42:85:c1:
                    8d:59:09:48:64:35:eb:b4:b6:c4:17:46:44:36:8c:
                    2d:e3:c1:98:10:7f:be:a2:a5:b2:8c:f1:c4:e0:ec:
                    0a:b0:42:1b:f8:2e:b8:f7:f7:9e:46:a3:82:ea:63:
                    aa:a5:cd:09:c2:38:f1:39:1a:e1:49:65:56:f2:9e:
                    9f:6a:10:71:85:0b:40:ef:d1:b0:7a:4e:62:ba:84:
                    87:e4:2c:18:ea:69:d9:5f:c3:05:66:0c:c6:e4:8d:
                    7c:da:e0:44:1d:28:05:ff:ca:ba:cc:33:c5:91:b8:
                    3e:9a:12:6b:cc:31:60:b6:c3:f1:bc:18:23:75:09:
                    ea:f8:34:e9:d1:a9:c9:16:6e:c0:84:ee:30:01:e1:
                    41:f3:71:a5:4a:f0:38:4c:3c:20:e8:39:df:10:6a:
                    5c:31:2f:0d:30:51:d6:b5:d6:23:73:f7:23:f9:ee:
                    8b:f4:84:c2:3d:3f:ca:c0:89:ef:df:90:37:13:b3:
                    f0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:95:25:25:51:4B:4D:37:0B:F1:01:93:56:13:F1:9D:A1:DC:46:EE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46df78e3-d80c-4b8b-ab26-f2cf80bc5d8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.8.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:3c:84:e3:08:e1:6a:e3:6b:56:b7:0c:15:37:62:9a:f5:2c:
         07:05:40:a0:6e:26:de:81:00:68:76:f0:0d:d7:82:95:99:d3:
         13:ad:d1:a6:ac:a9:de:18:52:cf:61:5e:32:ac:0b:c7:0a:64:
         95:b1:e0:b5:25:a7:87:46:3c:d2:d3:a0:59:f3:ab:11:ad:b8:
         3b:da:7b:97:58:19:19:e4:12:0b:3c:37:d3:20:8b:e2:0d:77:
         24:d6:94:7a:bd:a5:20:8f:52:0e:21:35:c2:c2:7b:30:20:65:
         38:a5:e9:ff:4e:b4:0c:af:74:d8:ac:f8:ed:02:02:5b:4f:b9:
         cf:8b:d1:98:95:6c:0a:db:82:97:9d:a6:74:00:05:22:dc:5f:
         43:8e:38:d2:f3:30:85:3a:1a:ea:0e:b2:a0:cb:87:7e:74:fa:
         2a:7c:16:98:7d:95:fe:d9:bc:f8:18:9d:60:fc:e5:78:74:06:
         76:ee:fc:8b:19:b4:48:13:eb:62:72:b3:ae:88:ae:73:73:cc:
         e0:4c:e4:3f:13:75:ff:e3:07:0d:08:32:3a:54:57:a1:af:88:
         3a:c1:ba:a5:e9:84:0b:f6:17:2c:cb:ef:6e:db:e6:0b:9b:9f:
         ce:4e:11:b9:48:7d:7c:29:4c:14:70:12:ce:63:de:3e:5e:86:
         06:78:09:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----