Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f82466f-3c42-4c5a-bdf5-5c16a5740bdc.roa
File:                     5f82466f-3c42-4c5a-bdf5-5c16a5740bdc.roa (raw, json)
Hash identifier:          tMmEZe3mqDdLnoLUUycwplkFDZju7MgFX85Dr1+VMGo=
Subject key identifier:   5F:9E:76:78:C1:1C:21:21:55:0B:C4:D3:26:6B:1C:50:45:29:1E:D5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4BC7D06BDFF0C36BD92AAC1B5DB6340B59457CAC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f82466f-3c42-4c5a-bdf5-5c16a5740bdc.roa
Signing time:             Fri 03 Oct 2025 00:42:09 +0000
ROA not before:           Fri 03 Oct 2025 00:42:09 +0000
ROA not after:            Fri 07 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        66.255.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:c7:d0:6b:df:f0:c3:6b:d9:2a:ac:1b:5d:b6:34:0b:59:45:7c:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  3 00:42:09 2025 GMT
            Not After : Nov  7 23:59:59 2025 GMT
        Subject: serialNumber=9f8934653241f6ee81b404229bc7c0630bc4dfed75bba6ed34ddbe1577496c61, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0b:0d:69:46:f1:ad:23:6a:f9:a2:a5:f9:43:
                    71:6e:c3:cf:51:39:de:27:4d:37:a2:56:76:3c:f1:
                    1c:5d:70:64:4a:c9:fc:3d:b7:dc:76:50:00:a3:f5:
                    e8:1f:ef:b0:97:a5:31:74:57:91:e4:f7:75:a2:6c:
                    8c:76:e6:1d:1d:00:0e:1f:b8:64:bc:c1:a5:33:7e:
                    f4:09:4c:0f:8e:f6:18:11:fe:44:3d:f6:73:56:d4:
                    7f:7e:24:5f:34:8e:e3:d1:c0:47:9a:22:a7:99:d3:
                    9a:5d:36:d6:98:02:11:85:b5:d1:39:6d:65:36:37:
                    aa:a7:4e:85:a4:91:0b:96:cd:65:5b:8b:9a:cc:d6:
                    b3:63:bd:0e:e8:72:5a:90:9b:21:f1:42:15:24:07:
                    ab:c0:af:17:1a:14:0b:ee:55:0c:47:91:c7:6f:10:
                    03:ba:ef:f3:53:66:19:82:83:58:02:58:dd:51:02:
                    d3:a0:ad:57:9d:60:1a:64:fc:e2:b3:15:f5:37:02:
                    62:eb:ac:c0:69:a9:13:15:e2:02:b1:75:58:c2:ce:
                    e5:e6:f6:d6:5a:cf:b7:a3:4b:9e:b0:f7:88:1c:91:
                    6b:43:b9:2c:38:b9:36:1b:39:59:d1:55:98:cd:a6:
                    ee:ff:04:f9:09:fa:83:5f:59:de:65:c6:1a:a2:ae:
                    74:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9E:76:78:C1:1C:21:21:55:0B:C4:D3:26:6B:1C:50:45:29:1E:D5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f82466f-3c42-4c5a-bdf5-5c16a5740bdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.255.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         70:a1:40:78:45:09:8b:ed:64:55:e8:f8:7b:37:c0:2f:b4:7a:
         5c:cc:3f:fd:74:12:38:b3:98:b2:7f:0d:bb:49:70:95:31:0f:
         fb:c8:87:f8:ad:89:06:e6:2d:84:cb:f6:93:81:3d:ca:70:fd:
         d6:ab:d5:2e:3d:16:29:45:98:87:3e:e3:50:e6:09:29:eb:f3:
         d9:46:78:d6:60:f3:cb:68:c8:56:25:09:73:9d:29:51:17:41:
         17:23:e9:cf:07:64:30:bf:58:cb:53:e8:23:3e:1e:a5:ab:74:
         ef:e1:e5:5f:b6:ce:3c:03:f5:6a:14:c2:67:0a:e0:2e:5c:6f:
         3a:48:cf:ba:f6:5c:06:03:96:43:45:ba:72:c6:cf:54:1f:e9:
         56:4d:ed:4e:5d:78:6c:62:19:d5:06:01:11:44:28:18:82:23:
         e3:8a:a2:d3:6a:59:d9:f6:33:57:d7:2d:4d:2f:26:d7:fc:10:
         85:c7:3a:a0:b7:5d:36:04:1b:75:c7:40:a4:3f:35:86:ca:4f:
         c0:13:bd:8e:ef:31:a8:9c:10:dd:bc:35:de:4b:9d:5f:7d:b3:
         78:d9:6f:67:83:5e:4d:87:2d:50:fa:16:a6:22:89:97:93:65:
         34:91:d2:8a:a6:33:bb:7f:9b:9f:67:1c:f0:a7:94:64:be:d3:
         c8:c7:35:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----