Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b8b161a-bb1c-4f54-bfce-f84e0b19327e.roa
File:                     6b8b161a-bb1c-4f54-bfce-f84e0b19327e.roa (raw, json)
Hash identifier:          I14/MDna8e4FzBewUG6iRT/x8GHfweE+gVfCCKZNXMc=
Subject key identifier:   7E:A9:CA:CC:A4:40:83:91:86:84:A9:29:97:F5:DE:D8:87:2A:14:BD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0C03A17F2AD9540253A8F164C774CE052B42E528
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b8b161a-bb1c-4f54-bfce-f84e0b19327e.roa
Signing time:             Sat 18 Oct 2025 04:11:01 +0000
ROA not before:           Sat 18 Oct 2025 04:11:01 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.22.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:03:a1:7f:2a:d9:54:02:53:a8:f1:64:c7:74:ce:05:2b:42:e5:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 04:11:01 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=59fe7de731e71e0bfdea1c3edd26d95f48645010bf69757202ded91a33ebf494, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5a:2d:bd:67:08:27:09:40:05:62:ca:e8:5e:
                    78:f4:b1:9b:ec:b4:93:dd:f7:e3:d9:10:7d:90:3a:
                    83:64:ca:55:72:02:c9:83:93:80:51:65:42:6d:f1:
                    64:fa:94:42:7a:c6:75:b9:e3:6e:ae:52:d2:36:cf:
                    cb:5a:46:14:ad:f1:af:cd:89:79:f4:6f:5d:6c:3b:
                    0c:15:81:de:fc:e2:ce:bc:94:bc:85:c6:b0:f9:fc:
                    8e:e0:6b:e1:24:fc:fc:b5:d6:f6:37:3c:25:b7:91:
                    82:ae:1d:d4:f6:da:67:72:de:7f:5c:04:e7:94:e8:
                    3a:3c:01:c9:5e:f3:26:af:8b:a9:22:d2:39:bf:51:
                    c3:8d:98:27:21:77:86:95:d2:35:1f:e9:a2:31:4e:
                    f2:64:fc:19:6e:2e:97:7d:69:0a:26:24:71:f1:9e:
                    94:24:cd:60:c1:76:b6:38:9f:ff:7b:40:10:72:fd:
                    eb:3c:c9:ca:0d:dc:38:0b:61:91:92:ca:5d:73:b5:
                    0a:d2:80:90:bd:18:4a:a5:5d:01:75:b5:19:3b:f8:
                    8e:8a:b2:14:01:c5:e1:be:cd:f1:98:0c:77:7b:9a:
                    b1:87:33:a7:7f:8a:8c:9f:9a:ca:c7:a1:0e:84:36:
                    eb:05:0e:df:68:a6:d5:ac:0a:bd:fb:d9:a1:2c:d7:
                    19:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A9:CA:CC:A4:40:83:91:86:84:A9:29:97:F5:DE:D8:87:2A:14:BD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b8b161a-bb1c-4f54-bfce-f84e0b19327e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:7c:94:fa:5c:62:b4:2c:c4:60:a9:2e:8e:60:df:e9:14:09:
         4d:57:71:e8:8a:94:40:cc:a0:ff:6a:60:16:f4:4b:69:b9:2a:
         0f:38:74:dc:01:e5:f4:f8:7a:cc:d6:c7:53:65:b3:a4:0b:07:
         3b:3c:8f:34:9e:a0:cc:cb:59:5c:0e:d5:7c:94:9d:59:d5:f4:
         f5:38:a2:3e:1d:7a:f4:1a:04:25:0c:60:07:f1:71:17:60:30:
         ab:41:04:d4:bf:36:0e:d8:97:3e:68:f6:f7:66:70:11:cd:81:
         68:1c:bd:fe:0f:95:20:c2:31:a8:c0:85:44:d9:64:e1:37:71:
         99:6f:d3:17:91:59:21:b0:17:3f:67:ec:70:d6:03:5b:db:83:
         40:c1:c2:23:19:1d:a5:56:fb:2e:30:ca:71:7a:96:13:f2:19:
         c4:fa:14:d7:b1:a2:53:b7:e7:c3:3c:e9:75:63:99:8c:c6:af:
         d7:a8:f4:f9:b4:07:80:d5:2a:24:f4:0a:f7:02:7f:9a:7c:d3:
         af:02:1a:e2:d3:49:7c:5c:d4:2c:4d:30:ef:c9:22:53:ca:fa:
         37:f7:7d:d7:66:e6:d7:15:61:51:01:83:99:cc:0f:83:e2:29:
         67:54:a4:03:7b:48:19:07:01:d2:75:04:df:8a:18:68:55:7e:
         23:3c:29:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----