Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8042eb0f-4fdb-4224-90bd-15e9ca13fdef.roa
File:                     8042eb0f-4fdb-4224-90bd-15e9ca13fdef.roa (raw, json)
Hash identifier:          VgwiASqjEt1FZOK15rFMyfYnzb1Fmme9faH/FSuoshw=
Subject key identifier:   9A:E5:F9:C4:F1:3E:D1:16:4F:F8:CA:A6:48:3D:31:6C:B6:8F:2C:8C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       07DC7D872F947D2D2B0ECDA1CE71B5F065E5B0CE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8042eb0f-4fdb-4224-90bd-15e9ca13fdef.roa
Signing time:             Sat 18 Oct 2025 02:50:10 +0000
ROA not before:           Sat 18 Oct 2025 02:50:10 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.104.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:dc:7d:87:2f:94:7d:2d:2b:0e:cd:a1:ce:71:b5:f0:65:e5:b0:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 02:50:10 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=9abe8d52e265a36348364599947977438053f3208e3f1af2c9b4ddab76b44759, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e3:7b:98:cb:27:c0:c9:eb:66:28:ee:ed:3c:
                    f9:74:32:45:7d:63:de:94:4b:7d:56:be:9e:59:2e:
                    fe:06:b0:05:65:31:bb:c3:fd:09:70:e5:4d:3e:36:
                    75:50:cd:04:17:df:3e:e5:65:17:7b:ea:78:e4:1b:
                    ad:26:ee:41:bd:f3:e3:96:56:f5:e7:7a:1e:c1:eb:
                    aa:60:9e:43:09:20:28:ff:06:06:02:e4:88:d8:04:
                    2c:a5:17:1f:f0:19:91:09:9a:e9:fa:fb:cd:4b:7c:
                    a4:8a:17:5e:bb:d5:a6:4d:32:f2:e3:7e:de:fc:d0:
                    41:90:43:a1:46:3e:4c:1b:59:c0:30:6d:92:23:e5:
                    32:3a:82:86:86:67:e9:c2:13:62:28:4a:ec:34:40:
                    42:9a:85:49:14:98:47:a7:17:17:f1:f2:e9:87:29:
                    7b:c3:37:40:34:15:27:d3:62:15:e3:13:bd:1a:a0:
                    6c:9f:62:71:28:56:d3:0c:6e:a6:34:2c:55:46:5b:
                    81:f7:41:80:71:4d:96:60:42:6d:d0:bb:3f:e0:fb:
                    4e:a5:9d:c4:c3:c0:42:ba:ba:1c:79:19:79:e9:d4:
                    da:bd:b9:06:28:a7:19:4e:7f:da:68:4e:6c:61:aa:
                    f1:95:8f:78:89:1b:88:5f:87:be:b5:f2:20:fa:46:
                    49:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E5:F9:C4:F1:3E:D1:16:4F:F8:CA:A6:48:3D:31:6C:B6:8F:2C:8C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8042eb0f-4fdb-4224-90bd-15e9ca13fdef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a9:74:ee:a1:5c:86:36:19:29:92:c2:8b:18:59:ec:dc:e1:17:
         d2:ae:41:03:d9:16:b9:cb:f5:8d:36:95:83:95:52:82:00:1d:
         df:4e:98:1f:9e:79:8c:ff:72:84:8c:fc:b9:58:27:14:70:fb:
         74:9c:ec:d3:64:28:74:07:5a:09:4b:9d:bc:2d:13:f3:0b:62:
         46:0f:36:73:28:07:da:f6:06:83:4b:45:76:4e:0d:3b:7d:44:
         25:da:6c:28:f6:06:9c:f2:e2:89:4c:46:fc:b2:8c:10:75:1b:
         bb:81:91:2c:ca:83:3d:f2:73:27:ab:ab:b7:e5:02:cb:a7:f6:
         c9:6b:86:20:c2:5a:ce:92:01:15:5f:3d:1f:31:f7:72:0a:de:
         12:55:19:05:16:11:1d:20:0b:d3:67:60:e8:70:6c:8b:09:f9:
         2a:cc:c7:5c:bd:4f:20:0c:48:53:7b:7a:e9:a6:58:a9:af:5e:
         b6:f4:fa:f3:53:74:a1:ad:64:08:67:62:d5:e9:8b:77:9e:60:
         f7:fc:a7:95:29:b7:e6:ef:39:96:98:c7:42:00:58:9b:5a:d8:
         05:1e:49:af:17:a0:0f:38:42:52:c3:ef:e9:b1:ae:3d:fa:5a:
         ec:44:77:d7:b4:1f:43:29:95:71:f4:04:40:73:06:12:1c:5d:
         49:7c:76:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----