Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58e44a0b-ec39-4682-a2bc-a820786e0171.roa
File:                     58e44a0b-ec39-4682-a2bc-a820786e0171.roa (raw, json)
Hash identifier:          xEfSSCcPzLAEjXiQo3gULI7hipbns5RGxHxgUmzzRo4=
Subject key identifier:   C8:20:28:2A:64:46:64:0E:9F:CA:9A:6B:76:59:4B:10:9B:B8:37:E8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2DD0AD08EBC2870A689262B85285E5009DF8F1B7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58e44a0b-ec39-4682-a2bc-a820786e0171.roa
Signing time:             Sat 18 Oct 2025 00:51:41 +0000
ROA not before:           Sat 18 Oct 2025 00:51:41 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.8.188.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d0:ad:08:eb:c2:87:0a:68:92:62:b8:52:85:e5:00:9d:f8:f1:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 00:51:41 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=05e3b04fd76d9cc0f44a6d5d6537f07e1e929631889a134cf02674a6c78913c3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:95:6b:34:05:6a:97:a0:f5:4e:f7:67:cd:d1:
                    4d:cd:ba:90:5d:26:6f:0b:45:f3:75:7e:64:53:ca:
                    68:f1:2a:58:bb:51:75:7a:9d:84:53:c0:d5:92:2c:
                    83:99:64:c3:c9:aa:ff:ed:0d:04:a2:96:0b:1a:ec:
                    a8:db:74:31:7f:6f:af:56:b1:97:8c:d2:d7:94:43:
                    9c:ce:1d:81:84:55:0a:37:82:46:aa:2d:15:4a:29:
                    6b:e7:e5:c5:a3:3d:65:07:53:58:ae:b7:52:e9:ee:
                    b8:d8:a8:77:eb:84:32:ff:0b:63:bf:91:7d:54:e8:
                    ed:81:0b:74:9f:c8:11:c5:72:22:de:11:66:d1:59:
                    ae:fc:39:6d:e4:6c:8d:ae:a1:e6:0c:30:ff:08:6c:
                    61:48:b6:11:52:b8:9e:d7:3a:b2:5b:67:13:97:b7:
                    08:38:99:2e:54:e0:b6:08:3e:de:fa:17:94:b7:1c:
                    99:fb:5d:58:e8:47:93:43:9f:17:b8:19:dd:38:21:
                    94:e2:2d:bc:29:3c:af:75:1e:6c:5f:f2:5e:8e:d5:
                    22:c9:26:ac:60:99:54:93:a4:d3:f4:7e:d9:54:24:
                    85:5d:d2:68:9f:2e:d4:25:c0:0e:65:fb:d0:43:0d:
                    d8:a6:2c:0c:05:d8:79:4f:bf:d1:44:08:8c:e0:4b:
                    f3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:20:28:2A:64:46:64:0E:9F:CA:9A:6B:76:59:4B:10:9B:B8:37:E8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58e44a0b-ec39-4682-a2bc-a820786e0171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.8.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:58:3d:7f:e1:c6:3d:d3:e6:87:06:9b:e6:19:2e:81:2d:4f:
         ef:98:c3:1e:a2:c1:5b:a6:f3:01:ed:be:34:ac:fb:86:d5:38:
         e2:37:fd:14:7d:2b:bb:8c:68:ba:35:0e:df:b1:bb:ac:5c:f4:
         fe:ab:d7:ef:2d:67:2d:33:c3:00:a8:f4:5f:77:82:e2:af:d3:
         94:00:60:f4:23:d9:a6:d5:c9:f2:0c:76:14:13:e8:6d:9d:06:
         81:81:90:4d:92:97:29:d2:6b:53:91:33:17:b2:46:14:eb:47:
         b8:6f:2f:8a:21:23:3b:23:ae:70:2a:de:44:25:91:34:05:53:
         b0:8c:8b:77:40:a0:d5:d7:12:67:75:43:b6:0e:ba:76:48:90:
         ad:a8:bb:b3:c2:cc:86:3e:04:91:74:73:56:17:49:22:3d:f9:
         2a:f1:60:09:d2:81:97:3c:28:7b:9e:8d:d6:c5:3a:74:fa:67:
         39:0e:57:ae:3d:9c:d4:ac:c5:47:82:a9:00:0a:ac:5d:08:a4:
         54:0e:6f:99:39:42:56:55:2d:12:b8:cd:ef:17:58:32:03:6b:
         49:70:73:33:60:0f:b8:b4:65:7d:4b:ed:f2:8f:ca:0e:52:dd:
         f2:31:eb:6d:a1:82:e1:83:76:db:29:1f:49:3f:56:46:ef:58:
         87:24:51:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----