Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f2acb83-0f8f-4946-9050-7adcb7dc3ffd.roa
File:                     7f2acb83-0f8f-4946-9050-7adcb7dc3ffd.roa (raw, json)
Hash identifier:          DF+sK0blPcIUj4mYOhe39kLI9mKVZ+SGbVma9x5bpcE=
Subject key identifier:   43:68:0C:03:05:BB:D9:2F:04:DB:EB:50:0F:AC:A7:66:D6:4E:C1:B3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       42B68D6AC59ED6B1E19C187BEF0F5344D53907CD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f2acb83-0f8f-4946-9050-7adcb7dc3ffd.roa
Signing time:             Sat 18 Oct 2025 01:20:53 +0000
ROA not before:           Sat 18 Oct 2025 01:20:53 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.8.0.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b6:8d:6a:c5:9e:d6:b1:e1:9c:18:7b:ef:0f:53:44:d5:39:07:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 01:20:53 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=a97ca55d7ad2317bc8101e7fbe7005fadadc4e87a4882835854c98731f15b740, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a7:ff:bb:66:77:38:6d:ed:d0:d8:5b:c9:ad:
                    4e:a5:af:d5:4c:bb:a3:0a:89:9b:71:46:1a:44:ff:
                    b4:3d:53:e1:c6:38:4e:1a:56:7a:23:7e:fc:60:20:
                    a9:31:fe:79:91:85:b3:5b:2c:60:41:01:fd:26:ca:
                    3a:50:df:f5:c4:bd:28:da:a1:4e:b0:3a:0c:d2:c8:
                    d9:52:f7:f4:57:e5:f8:9b:f1:60:a2:86:ba:75:11:
                    11:82:fa:0c:ff:cc:de:ec:c9:4d:75:32:b8:b7:91:
                    92:f1:0e:3a:29:f1:76:f7:c1:ea:58:5a:eb:95:12:
                    9a:11:3f:3e:39:5e:4b:74:04:a0:e0:0b:5a:54:42:
                    1f:84:d8:66:d4:9c:6d:53:62:73:6e:54:6f:57:10:
                    10:1c:f8:1a:2a:af:2e:95:0f:4f:9d:6f:3a:40:f6:
                    bd:f7:de:eb:4e:18:d6:0e:b8:56:75:af:1e:23:8c:
                    d8:6d:68:ff:32:d0:1f:42:8c:c6:5b:02:11:2a:b3:
                    07:9f:e2:f9:77:c3:b8:f7:e7:69:b2:ec:2e:1f:3a:
                    50:e7:e2:0e:e6:8b:31:9b:ae:3b:0d:b0:8b:e7:20:
                    a5:07:f5:fa:ce:0b:90:48:1c:91:b9:37:f3:9f:46:
                    5e:e8:a5:43:28:3b:f7:49:a9:bd:3e:eb:a1:04:01:
                    ed:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:68:0C:03:05:BB:D9:2F:04:DB:EB:50:0F:AC:A7:66:D6:4E:C1:B3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f2acb83-0f8f-4946-9050-7adcb7dc3ffd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.8.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:56:ca:86:d6:39:8a:f4:00:cb:a0:1b:66:d6:25:1c:66:53:
         37:07:07:12:a3:7f:dc:f2:be:a0:73:4c:3f:8f:dd:d9:36:95:
         63:f6:91:d0:e8:f7:5c:d3:b6:04:e3:e0:54:f9:46:8e:14:80:
         79:43:8a:58:1b:07:ee:9b:fd:c8:57:47:f7:3e:5f:ae:0f:3b:
         db:3f:78:c3:94:b6:14:9b:0a:78:8c:62:d0:5c:aa:3e:4d:ac:
         8a:d6:46:63:a6:1d:3b:42:6b:50:29:b0:e2:49:40:c3:1b:d8:
         bc:aa:61:4b:3c:47:e3:2f:77:56:28:40:24:51:5f:16:2e:1f:
         21:d6:93:5f:20:dc:5c:d8:b1:5f:15:63:e0:db:52:17:a9:b5:
         e7:62:89:79:12:5a:b6:94:14:e7:d9:55:66:e9:2e:8a:b3:15:
         a7:d7:95:a6:26:3e:4a:a0:86:88:8e:72:b0:43:32:1e:df:f3:
         11:8b:2e:45:b8:76:01:cd:08:eb:cb:b6:38:7a:3c:3d:3b:b0:
         6c:4e:e5:ec:ab:f7:28:33:3f:04:8d:ba:b9:71:99:d0:50:c0:
         6a:45:14:39:5a:e0:7a:02:67:8d:94:9f:0a:f3:06:49:c4:94:
         53:1c:57:65:b4:27:a6:fc:98:f0:33:d6:3a:15:77:b3:b9:e2:
         5e:46:7f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----