Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f4dcce5-39f8-46ab-a3b8-e4ce7e13a61b.roa
File:                     6f4dcce5-39f8-46ab-a3b8-e4ce7e13a61b.roa (raw, json)
Hash identifier:          CT2h+36E46vCrCMvdxzvmxds0NtkEGAWQSHldFa50jQ=
Subject key identifier:   EE:4D:CD:B7:36:00:E8:13:77:CD:8F:5B:E1:3A:43:2F:09:F2:35:2F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6543FF6EC242AD24CB57B6FD6DA5D8D8A11930FF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f4dcce5-39f8-46ab-a3b8-e4ce7e13a61b.roa
Signing time:             Sat 18 Oct 2025 04:40:50 +0000
ROA not before:           Sat 18 Oct 2025 04:40:50 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.8.126.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:43:ff:6e:c2:42:ad:24:cb:57:b6:fd:6d:a5:d8:d8:a1:19:30:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 04:40:50 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=729a188d92d74163144db98ba1848aaa3a2c9cc7b342714ae93b4bc0970d5281, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:15:44:03:f3:f2:65:18:2d:2e:20:33:cb:67:
                    bb:9d:b2:20:36:4a:aa:65:47:9b:07:1f:ce:98:07:
                    ee:e5:49:c6:ee:4b:f4:95:55:38:0e:21:d0:ee:5b:
                    b5:9e:25:6d:d2:93:3e:2c:98:e3:e4:ee:8f:5a:49:
                    5f:00:53:5f:3f:3e:1b:63:3f:54:90:93:0a:dc:cd:
                    3a:f8:15:b4:ea:de:6d:5f:91:52:ab:58:3b:8b:4b:
                    8a:35:96:3b:93:15:a3:6c:67:ee:87:26:ee:b5:45:
                    b3:2f:dc:7b:35:97:c9:8d:82:ba:bc:0f:3f:de:35:
                    a1:df:38:8a:46:f3:ef:fd:fb:1d:40:11:29:77:55:
                    bc:b1:0b:70:66:ad:73:f4:29:a3:cb:46:38:ed:13:
                    49:17:80:b6:28:0c:7b:b5:47:2c:ff:eb:bc:e0:42:
                    ed:c5:7f:f3:96:8c:8f:37:e3:d0:f5:32:0a:cb:c9:
                    be:c3:46:2b:0f:9c:03:bb:ed:ce:96:a7:35:2a:c2:
                    20:87:e7:ca:1f:e4:ac:e1:d5:25:d4:3e:06:62:7f:
                    3f:63:b9:79:c8:d4:84:d6:0d:46:b7:cd:44:30:c1:
                    85:b2:16:68:ed:fd:d0:e9:47:0f:9d:63:76:a2:07:
                    69:93:88:0f:d5:21:05:74:bb:0a:e9:a6:97:25:df:
                    46:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4D:CD:B7:36:00:E8:13:77:CD:8F:5B:E1:3A:43:2F:09:F2:35:2F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f4dcce5-39f8-46ab-a3b8-e4ce7e13a61b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.8.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cf:33:86:16:c3:2c:71:c2:96:df:07:be:62:6a:31:1d:c6:bc:
         08:3b:dd:5e:f7:82:07:1d:09:30:78:a9:81:2c:75:d8:40:70:
         1c:b1:66:c1:14:48:d5:5f:c7:82:17:01:c5:94:c3:04:35:f3:
         d3:17:58:fc:c8:c2:d5:b2:6d:30:81:60:ae:9b:02:2f:41:a7:
         b9:44:78:56:92:d1:06:a4:c4:7f:bf:86:de:5d:f7:1b:c6:9e:
         09:3f:30:fd:65:16:33:9e:1d:70:be:13:59:86:84:c9:47:ef:
         8e:32:fa:08:26:e1:79:e2:27:6b:cd:07:78:a0:7f:ff:7e:45:
         25:85:83:6c:1e:67:0a:bd:6f:6f:cf:cf:5a:06:a9:3c:9b:70:
         5f:ba:67:99:0b:5a:88:af:58:45:23:ed:63:63:86:21:4d:f2:
         9a:f0:59:71:6a:ec:a5:41:7c:29:7b:43:ae:53:76:88:b3:7c:
         70:c6:f8:26:fd:34:b9:c3:50:e2:96:78:a2:ad:af:54:c0:f1:
         6b:1f:04:a4:5b:c1:76:f0:54:9d:1c:dd:e9:a9:8a:94:f4:a4:
         7a:15:51:48:fc:a9:89:64:46:f4:e2:ee:b0:19:70:e6:19:2b:
         25:3e:c0:b1:d8:f5:ac:cf:8f:41:1f:d3:0a:74:d4:2c:f7:15:
         32:7a:2e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----