Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7aebf7e0-9f57-4d73-b07f-bc2f832c22d5.roa
File:                     7aebf7e0-9f57-4d73-b07f-bc2f832c22d5.roa (raw, json)
Hash identifier:          KWFwAPE/aggnVmshA6Pd9Cz1GYe4SNyY65uz3+ArfJo=
Subject key identifier:   53:C6:F5:F5:2B:8B:B6:7A:64:B7:8F:A8:8C:FC:B3:49:23:8D:05:06
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       62C5C8654EF1B0387C6B8499F1701A6944155C80
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7aebf7e0-9f57-4d73-b07f-bc2f832c22d5.roa
Signing time:             Sat 18 Oct 2025 04:20:53 +0000
ROA not before:           Sat 18 Oct 2025 04:20:53 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.128.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:c5:c8:65:4e:f1:b0:38:7c:6b:84:99:f1:70:1a:69:44:15:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 04:20:53 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=56ece02f2ec02a79f1f3dee342bbee60fc86286395f92fa68f8583bfbf8fc63a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d5:5a:54:e3:45:9d:02:10:e6:e2:74:14:25:
                    33:ff:a1:84:c3:22:e1:a8:7c:24:ef:f2:c8:5f:12:
                    28:7a:26:8e:d7:8b:19:10:b4:64:9a:fa:38:cf:19:
                    07:a8:10:7e:94:9e:40:05:3f:03:43:68:b4:73:bf:
                    18:33:54:62:95:1f:14:6d:0f:00:da:6e:c6:3a:6c:
                    45:d1:1a:4c:b2:3c:f4:43:7c:63:9b:6e:df:f9:af:
                    db:48:ea:8b:de:5a:64:1b:eb:32:39:84:92:ff:d0:
                    2b:f1:cb:6c:20:7a:fe:29:8e:b8:3a:6e:af:63:80:
                    2b:04:97:7a:69:71:29:c6:14:e4:69:c7:cc:ac:4c:
                    f8:ac:2b:20:e6:4c:9b:f5:f8:15:49:07:11:44:54:
                    01:14:24:65:59:07:5e:75:e5:f3:67:62:a5:ae:e7:
                    95:ad:e0:92:49:35:a0:6a:1b:c5:05:3f:96:a5:e1:
                    2e:ef:ee:b9:75:08:95:56:d6:c5:4a:ab:90:ef:b0:
                    ba:d2:48:23:19:86:db:93:53:60:2e:db:6a:4d:c1:
                    11:7d:9e:31:57:36:7d:e1:e4:a4:9e:94:96:0d:76:
                    1c:02:30:ca:3e:49:3c:59:af:4c:f1:f4:7d:c9:d7:
                    06:5f:36:6b:42:9d:2d:e5:de:e5:92:23:fb:9f:e5:
                    f1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C6:F5:F5:2B:8B:B6:7A:64:B7:8F:A8:8C:FC:B3:49:23:8D:05:06
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7aebf7e0-9f57-4d73-b07f-bc2f832c22d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c8:bb:62:ad:3b:14:8f:8e:36:e0:47:5f:55:a2:c9:0e:42:68:
         be:35:89:af:fa:1a:fc:cb:8a:67:2a:e7:ff:d0:f5:45:67:79:
         aa:81:b9:57:a5:b6:4b:6b:a0:89:99:b4:b0:96:18:a6:0c:41:
         8b:a1:69:58:03:f2:0a:bf:5c:df:b8:67:0c:1d:df:12:96:31:
         10:87:ff:30:30:b1:81:fd:9c:9c:11:16:2e:fc:55:14:ac:f2:
         20:c4:10:69:fe:ee:b2:bc:97:12:f3:16:0e:45:f0:a7:6a:5f:
         5c:ab:06:7c:42:c5:d8:b9:17:3c:e5:c9:9d:5b:08:87:a9:0c:
         32:2e:76:de:8b:f0:c5:1b:78:06:b6:68:94:09:2e:de:cf:06:
         24:58:51:b7:b8:6c:c4:58:40:32:01:62:76:c7:6a:f7:3f:67:
         f7:2d:1b:55:d1:1b:9d:7d:14:87:be:df:d4:43:23:a1:bb:a0:
         2d:cc:bc:d4:1b:ca:f5:b2:ce:da:6a:73:8e:62:80:82:0f:4f:
         37:8b:2d:f5:f7:f5:ff:6f:bb:46:62:15:0e:a4:c2:cc:e9:c5:
         1d:b0:7a:e6:66:90:2a:f2:74:23:24:24:18:3f:71:e6:83:1f:
         0d:48:da:3e:3a:7f:65:a0:e7:a4:c5:21:50:16:7a:20:44:c8:
         d6:0f:f0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----