Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d5ea069-fa0f-4c05-9abf-3289d68c57b4.roa
File:                     7d5ea069-fa0f-4c05-9abf-3289d68c57b4.roa (raw, json)
Hash identifier:          7Uj2CHflRkNv7orIc0DE8DxE/J1eo4idRMY5cRLPcEs=
Subject key identifier:   5C:63:AD:6D:C2:5B:21:32:EC:5B:C2:F4:41:D2:04:A3:B5:BF:1C:4E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6187BBEA57557502615AED50B6B75BC0F28A6953
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d5ea069-fa0f-4c05-9abf-3289d68c57b4.roa
Signing time:             Sat 18 Oct 2025 04:30:17 +0000
ROA not before:           Sat 18 Oct 2025 04:30:17 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.188.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:87:bb:ea:57:55:75:02:61:5a:ed:50:b6:b7:5b:c0:f2:8a:69:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 04:30:17 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=ae5ff3361ce5ac795d18d0d77ebfb876f9731bc67c194ccb5829f2a5739058d4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1d:d0:c8:0a:32:cf:f3:85:86:35:00:d0:46:
                    d3:f1:e5:87:70:53:84:6f:30:ab:5a:a0:7f:29:67:
                    8a:1b:64:e3:e2:06:63:84:c9:1a:dc:85:8e:40:7f:
                    80:58:2e:7b:a2:ac:b8:f3:85:cc:7d:5c:7a:42:14:
                    37:f7:ed:47:a0:90:1e:00:18:dd:f9:53:57:dc:09:
                    92:c6:69:72:f2:c7:89:2d:49:70:8a:57:f3:a0:77:
                    17:ec:d9:14:7a:0b:e2:d7:b1:fa:db:68:dd:1c:59:
                    01:2e:81:95:f3:77:ad:6a:93:59:bb:2b:f1:fb:f8:
                    96:a7:56:90:66:f8:66:f9:c0:93:f0:3e:a7:ad:72:
                    1b:49:21:2a:70:b5:90:8f:91:14:01:ab:52:37:19:
                    9d:c2:87:fa:0c:28:e5:ee:3a:71:92:51:b1:c4:08:
                    4f:55:f0:3b:71:e2:62:a9:85:08:a2:d1:d0:1d:8d:
                    2c:a4:26:cb:87:c6:65:f7:71:aa:c0:ed:b6:86:e4:
                    f2:c0:22:1c:ff:52:52:7e:c0:3b:70:f4:e2:3e:2d:
                    1d:ce:46:17:f5:a7:ad:96:45:68:6f:c7:1b:2e:fc:
                    42:3e:b5:47:64:88:e3:96:c8:08:6e:aa:88:fa:8a:
                    84:88:fa:0f:f7:99:1b:a3:9f:63:9b:56:b0:a7:73:
                    6c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:63:AD:6D:C2:5B:21:32:EC:5B:C2:F4:41:D2:04:A3:B5:BF:1C:4E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d5ea069-fa0f-4c05-9abf-3289d68c57b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d3:86:4c:3f:9d:ef:98:ae:8c:82:bd:2c:09:e2:f8:14:60:05:
         e5:ff:88:d0:53:d1:91:84:4b:e1:49:e6:3e:d2:5c:e3:1a:59:
         71:7d:c1:a4:1b:ee:97:73:75:4f:4b:4d:95:b8:b0:06:de:10:
         f1:db:3c:11:a2:5e:ae:66:e3:ed:3f:15:81:5c:4d:ee:be:bf:
         7c:c2:19:a4:2b:89:98:ee:46:4a:f4:c0:d0:b3:fb:31:f5:d5:
         ef:7c:da:8f:94:a3:da:dd:85:39:67:8e:32:f4:8b:6e:1d:7b:
         12:dd:0f:7d:51:97:26:40:48:40:1a:31:35:4b:af:33:73:c0:
         fc:68:70:7d:29:de:34:c4:2d:8b:d2:47:4a:44:28:16:03:34:
         14:af:6c:e3:c1:fd:3c:e9:b8:e0:80:ab:82:d8:72:e1:3d:0f:
         14:05:42:4f:b1:a4:ec:54:c1:0f:b1:36:a8:60:ed:82:ab:61:
         2b:59:73:40:6e:52:4a:cf:f6:24:b4:6b:0b:bf:92:c9:76:29:
         e0:99:d9:30:1c:4e:6b:fb:53:a0:51:37:a0:1a:f9:93:b7:42:
         96:3b:4b:d0:6c:30:83:06:61:e4:bf:22:39:69:69:3f:2e:c6:
         d9:0c:ba:01:04:ef:74:0b:22:77:58:3d:8f:98:e0:cd:d6:d2:
         ca:91:63:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----