Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c99a8d5-5fc0-4aee-969d-185f79bad274.roa
File:                     7c99a8d5-5fc0-4aee-969d-185f79bad274.roa (raw, json)
Hash identifier:          oI7hsXUxsKblGLVtlT48y8KzJmvuT7xSMj+SuhEQX3c=
Subject key identifier:   DE:02:91:4C:20:19:42:27:13:88:D5:CE:D1:A4:34:4C:B8:69:76:91
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       11352FEB14949FC33B26E252A18D7058D45DD5CC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c99a8d5-5fc0-4aee-969d-185f79bad274.roa
Signing time:             Sat 18 Oct 2025 02:50:57 +0000
ROA not before:           Sat 18 Oct 2025 02:50:57 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.186.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:35:2f:eb:14:94:9f:c3:3b:26:e2:52:a1:8d:70:58:d4:5d:d5:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 02:50:57 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=86cbf7437c7784d6ad0953db00b624d392b0ecb9edddc8b975e7e70cc414bb17, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4f:54:33:b2:3e:3e:a7:f0:0d:cf:54:db:bb:
                    a1:7f:a2:3f:49:9c:b2:64:a2:0d:ba:15:84:32:24:
                    fd:6b:84:b9:62:a2:87:62:2f:ca:e2:51:0f:9a:bf:
                    75:e5:01:34:58:dc:da:6c:c8:49:91:69:e9:f7:3c:
                    4e:39:31:7d:5d:b1:72:9c:2b:92:91:1f:92:e5:43:
                    81:77:dc:6e:06:bd:d1:d6:78:18:eb:22:ef:bd:4f:
                    2d:8a:07:08:62:8b:93:d5:32:1b:19:77:3c:ad:f0:
                    55:c2:26:c6:07:f0:88:d0:ce:79:dd:7b:8c:fd:35:
                    02:62:3b:35:d7:7b:7c:4f:dc:ab:87:6f:a3:de:a8:
                    92:ac:55:86:de:8c:62:9a:2e:e6:35:66:0a:c9:fc:
                    ca:1e:33:c1:6b:98:f3:79:f0:d5:c7:6b:d0:d4:79:
                    e8:b6:25:6e:57:d2:a6:cf:25:fc:4f:65:2f:19:60:
                    0d:16:e5:1a:72:e0:83:80:cd:cc:24:10:4d:55:ed:
                    4a:4f:98:1d:ee:6e:33:56:59:ad:f0:b6:cd:26:66:
                    9d:cf:07:9d:9d:c3:ab:97:7b:7e:9a:4f:e6:2b:cb:
                    bf:3a:b3:01:a5:98:6a:4a:92:33:17:91:11:0d:63:
                    75:6e:83:06:47:6f:45:46:e0:26:fe:d2:79:26:8e:
                    99:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:02:91:4C:20:19:42:27:13:88:D5:CE:D1:A4:34:4C:B8:69:76:91
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c99a8d5-5fc0-4aee-969d-185f79bad274.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:3f:1a:d1:8f:c4:75:27:a6:73:fe:4c:9a:40:0d:b0:9d:21:
         d3:f5:c1:be:c1:6d:f1:f4:0f:ec:da:34:d2:e7:97:85:1f:76:
         f7:04:4f:92:52:65:60:15:e0:44:af:21:ba:fb:03:62:67:d9:
         20:87:eb:74:df:f2:06:3b:47:b7:7c:21:1e:fb:4e:b4:3a:0b:
         03:e6:66:44:fe:33:a6:6c:ad:62:c2:72:36:11:45:c3:73:7c:
         6b:e4:cf:81:9d:72:57:bc:81:1d:d6:4b:63:29:49:93:94:d1:
         d8:df:35:1f:fa:5e:68:5b:c1:a5:b1:70:6e:c2:c5:45:41:8d:
         cb:e9:9d:85:57:e1:ff:23:9f:55:35:ac:79:64:b7:82:95:b5:
         e7:44:cd:37:8d:46:ed:3d:fb:d4:39:9d:ff:4a:14:83:77:68:
         1b:ce:78:51:55:73:de:b1:2d:52:0d:a3:12:b3:6d:c2:31:32:
         aa:6c:2b:cb:ae:82:11:ce:59:79:95:8e:bd:1d:a1:a9:ca:cc:
         33:f2:a2:59:b6:ac:54:85:0c:9c:85:ed:b1:66:2a:87:99:6c:
         ab:11:89:8b:b8:ff:40:c6:4d:90:75:17:eb:fa:14:f7:e2:9e:
         09:ed:c9:23:6e:39:06:f1:fb:fa:cf:38:f1:e5:1b:01:2e:a0:
         ca:24:c9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----