Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5033d0f4-5e35-4d60-b04e-e5fb48435b2d.roa
File:                     5033d0f4-5e35-4d60-b04e-e5fb48435b2d.roa (raw, json)
Hash identifier:          MRrVtzG3SnnAGAAEqEH5AXL7ouwa4GXXPAyTDUC98+Y=
Subject key identifier:   3A:F1:44:AE:61:E0:1E:5F:22:62:12:DE:1B:BC:0A:23:BA:F1:E4:20
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1C45E8A73768BE811727F22F195FACE2D5873D5C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5033d0f4-5e35-4d60-b04e-e5fb48435b2d.roa
Signing time:             Sat 18 Oct 2025 00:31:01 +0000
ROA not before:           Sat 18 Oct 2025 00:31:01 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.8.113.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:45:e8:a7:37:68:be:81:17:27:f2:2f:19:5f:ac:e2:d5:87:3d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 00:31:01 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=650dd13bbd96ec551c78d42d1177e39bd09c21c165d965ce2ca9c7e9dab4d634, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:68:aa:db:f8:eb:c6:d2:30:c4:bf:71:8d:3d:
                    fc:84:89:e2:9c:da:c9:ca:9d:e7:09:9f:4c:5a:ce:
                    fd:a8:06:52:03:c8:8e:ed:9a:2f:02:f9:2e:64:f1:
                    3b:bb:5b:5d:9d:92:cd:69:d8:5e:25:4a:af:da:81:
                    ef:6e:e0:81:87:97:80:fe:34:00:cf:58:7d:4f:9b:
                    cd:13:60:61:79:55:e6:11:26:3d:8e:02:f3:70:5b:
                    37:ec:bc:37:ff:5c:65:f9:6e:c2:71:b7:ed:9b:a1:
                    6c:a1:f9:08:53:37:8e:34:ce:88:8e:3c:f1:30:52:
                    c8:4a:58:5f:f5:1d:28:c8:58:53:d5:53:b9:95:aa:
                    d3:df:2c:43:c1:a7:1d:74:04:06:c9:65:fa:d2:60:
                    f3:30:7d:6a:df:d0:b9:95:b6:99:4a:f3:87:68:76:
                    02:d9:7e:d1:69:f3:ed:fc:29:45:d7:dc:e4:96:da:
                    14:d7:69:de:65:70:df:5d:7e:01:8d:70:70:01:98:
                    4b:25:a9:89:d6:39:84:d9:35:15:f5:c4:20:41:87:
                    b4:7f:53:fe:bf:1c:de:b7:c6:49:bb:94:c7:ac:20:
                    18:6f:fb:0f:38:90:d4:a6:07:d7:96:51:ab:4d:25:
                    37:01:b2:15:20:b8:8b:9d:0d:5f:6b:8c:93:a0:fd:
                    31:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F1:44:AE:61:E0:1E:5F:22:62:12:DE:1B:BC:0A:23:BA:F1:E4:20
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5033d0f4-5e35-4d60-b04e-e5fb48435b2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.8.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:9f:49:ef:a5:d3:c7:f3:91:26:89:63:35:b4:09:1b:09:33:
         da:bd:6d:40:a2:83:1b:54:0c:a2:95:50:fd:17:5a:90:06:e3:
         ac:3f:d3:23:34:f0:21:7b:dd:fe:38:0d:e1:42:bf:9e:3b:77:
         56:c9:66:9a:6c:e5:a7:3f:3f:a1:89:9e:9a:ee:b2:f1:b9:91:
         5a:65:97:3c:7e:db:cc:21:65:30:7f:70:69:86:95:66:54:31:
         51:ad:0b:6c:e5:02:9a:dc:2a:39:82:64:0d:b6:76:d2:b1:11:
         31:40:53:3b:d8:89:6c:6f:93:e9:59:55:d4:49:f9:bf:92:5a:
         2a:b2:3c:6a:da:a5:18:26:a6:60:11:b2:e4:e8:da:61:62:b5:
         83:10:13:c4:28:06:6e:04:df:f7:ff:75:98:e4:8c:8b:34:f1:
         e5:49:bd:0a:81:67:54:78:10:7c:8a:d3:fb:01:28:7b:f1:f3:
         2f:f8:35:14:44:f0:e0:10:98:cf:66:41:e0:b7:4e:61:d0:02:
         b9:87:07:ff:7a:f5:8c:b0:7f:8c:8c:17:54:65:fd:15:21:f3:
         17:ce:72:11:25:02:9e:8b:c9:d1:60:2b:3c:91:f9:d3:9a:2b:
         c8:a9:22:f0:8b:46:f6:7f:db:49:df:a1:64:99:07:71:1e:e8:
         bd:a6:17:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----