Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5487ac1f-003a-4ae5-8452-5b6bd8cf85f7.roa
File:                     5487ac1f-003a-4ae5-8452-5b6bd8cf85f7.roa (raw, json)
Hash identifier:          4zXP30SS7k4EekOyP7R7sg7mQucvOg6Hr8tA0VBZp+Y=
Subject key identifier:   CA:DD:A8:B8:FC:04:D7:79:96:C4:2D:32:B7:36:25:81:55:A3:D2:F5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       30027C7E99C10400DA649DFC3BD64E7AE80D2268
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5487ac1f-003a-4ae5-8452-5b6bd8cf85f7.roa
Signing time:             Sat 18 Oct 2025 02:11:06 +0000
ROA not before:           Sat 18 Oct 2025 02:11:06 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.8.18.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:02:7c:7e:99:c1:04:00:da:64:9d:fc:3b:d6:4e:7a:e8:0d:22:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 02:11:06 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=bf55aec040d28b66eea9a499de6e93c44894b2b6c79187fdb97da9d2e66bab2f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:25:fd:2e:d8:c1:60:32:cf:21:f6:01:50:54:
                    4e:87:d0:46:c6:29:3d:12:e3:e1:72:2d:83:2e:b0:
                    4d:50:6e:5c:3a:22:04:10:8c:ff:d7:98:88:16:a5:
                    36:b6:b6:ce:a2:47:df:a6:49:02:bf:89:ab:8f:78:
                    6d:02:88:25:e9:5d:f3:cf:bf:df:d0:aa:5c:57:22:
                    a1:f4:36:19:fc:24:38:e0:ec:9d:e4:a6:01:22:91:
                    b3:bd:3f:25:1b:6b:2f:1d:82:28:90:c0:69:e0:77:
                    4a:57:2e:6b:c7:a5:87:dc:77:3c:7e:7d:92:83:c7:
                    40:fd:b4:ee:5f:b6:4a:6d:e4:cf:92:7c:6b:dd:79:
                    64:52:81:29:a8:f4:b5:fe:1d:f9:57:3e:56:d8:81:
                    49:a4:ca:31:78:0d:ff:ea:95:9e:a7:90:c0:59:9a:
                    da:95:ed:7e:c6:e1:87:bb:25:84:fc:a0:1e:54:69:
                    41:35:46:23:68:ec:2b:23:af:d3:f3:d7:b4:8f:42:
                    4d:b0:65:7e:46:e0:d2:df:3f:1b:d1:cc:ef:f7:01:
                    b0:04:42:73:c0:f1:fd:62:5c:c2:e3:5b:16:6c:92:
                    20:a8:19:04:f0:e1:5b:f9:d3:fd:03:cb:8f:7e:85:
                    dc:99:c3:10:12:0d:77:60:75:f2:c0:a5:70:ab:78:
                    a1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DD:A8:B8:FC:04:D7:79:96:C4:2D:32:B7:36:25:81:55:A3:D2:F5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5487ac1f-003a-4ae5-8452-5b6bd8cf85f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.8.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:c6:94:4f:c3:8a:3e:8a:35:62:c5:8e:fe:f1:e9:3a:37:db:
         52:94:0a:5e:ad:92:d1:35:86:b0:fb:07:0d:2a:3e:41:59:b7:
         da:2b:6a:7a:8a:c2:13:19:e3:7a:6e:14:81:66:a0:7b:74:7d:
         b5:9f:83:58:9d:e3:95:a1:7b:ed:30:4f:fb:e5:3d:b0:ff:18:
         e2:ae:e2:f6:a2:3c:71:c8:00:d9:19:22:26:aa:c1:2d:a9:7b:
         74:65:d1:ea:78:ee:8b:ff:b6:a4:f4:bc:a8:08:c8:c4:2f:ea:
         59:ba:af:ab:94:3b:c5:de:a5:ee:43:08:54:ac:a7:0a:a9:1c:
         43:67:0c:3b:03:5f:2c:0e:9d:83:6f:74:ac:6c:c2:4e:32:3c:
         80:3a:88:2b:e1:1a:96:85:0a:f7:29:f2:c2:be:d8:9e:9c:dc:
         f7:df:a4:2c:bb:0b:70:e0:28:d2:15:e1:68:d3:cf:0b:f1:6c:
         6f:57:9e:cd:5b:9c:d0:57:dc:20:a5:58:0b:af:76:15:d1:26:
         b0:20:b5:45:32:75:c6:ce:7a:5f:16:67:6b:47:16:5f:92:7c:
         36:fb:9b:18:4a:e2:3c:cb:c9:46:d7:bf:18:6e:2d:f6:f6:1d:
         b3:5c:7f:cd:2f:b5:47:b2:40:9d:7b:85:9a:d5:4b:60:ff:e6:
         2c:0b:0b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----