Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87201a86-fb31-4f99-92ae-44b113d24526.roa
File:                     87201a86-fb31-4f99-92ae-44b113d24526.roa (raw, json)
Hash identifier:          Vu6SGZeoMxrylUsYOqSpzAV4AT9DPfh67VqqzvCGKvY=
Subject key identifier:   5D:E5:61:70:6B:BF:76:BF:78:BC:F2:DE:70:F4:1E:BA:09:D3:53:F3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1454323AA7653E2A6B35626A15EDC21802C11A9C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87201a86-fb31-4f99-92ae-44b113d24526.roa
Signing time:             Wed 15 Oct 2025 18:08:24 +0000
ROA not before:           Wed 15 Oct 2025 18:08:24 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        165.195.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:54:32:3a:a7:65:3e:2a:6b:35:62:6a:15:ed:c2:18:02:c1:1a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 18:08:24 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=ddb93219f0eed68b7d2f60f62bfb0f51f6a54eae9fea8a74124be9dba3eac3ed, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e5:df:55:5f:4a:05:2e:05:97:78:e0:50:21:
                    9a:1b:ea:10:07:b0:2c:2c:cf:55:de:91:6a:3a:82:
                    b4:f5:3c:84:4b:34:90:c4:e7:14:b8:c9:ce:c5:93:
                    89:d0:06:b3:73:71:ee:89:9a:81:4b:d0:dc:da:b8:
                    34:92:07:8c:e2:73:34:65:86:58:b7:e5:b7:6c:1e:
                    17:50:5a:bc:00:1f:7a:96:ba:db:47:43:99:39:3a:
                    8e:92:77:c4:02:45:77:cb:93:d4:2b:d5:ee:81:6c:
                    02:a7:a7:eb:b1:5b:7a:62:85:cc:8b:ea:39:14:b3:
                    c6:03:3a:3f:83:ee:c9:8e:88:c1:5b:d6:f4:cc:f9:
                    d6:0a:e0:ca:72:5d:f4:44:7c:7a:d0:47:45:1d:ed:
                    5b:e0:ab:45:70:36:e2:7c:76:fc:bf:e1:6d:69:b9:
                    ab:7a:0a:a0:45:51:ce:5d:b6:19:db:0f:f5:c7:3a:
                    a1:8e:c0:41:8e:f6:2e:2f:0a:07:da:04:d5:81:30:
                    70:19:28:a7:d6:85:dc:34:90:d5:1d:99:87:47:80:
                    b9:82:ef:99:b7:c1:b9:52:4b:6c:15:08:62:b2:ea:
                    aa:b0:b2:df:97:4d:59:cc:b2:33:8d:b4:aa:72:35:
                    48:fd:64:4b:bb:6d:11:f4:01:ae:7c:b7:e8:15:64:
                    d2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E5:61:70:6B:BF:76:BF:78:BC:F2:DE:70:F4:1E:BA:09:D3:53:F3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87201a86-fb31-4f99-92ae-44b113d24526.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.195.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         80:dd:c4:e5:9c:e0:e6:d4:25:fb:cb:98:2c:ee:90:2d:2e:30:
         1a:6f:85:bf:89:bf:a6:ba:40:1d:cf:e8:e2:6e:e3:2a:71:b3:
         ec:ca:b9:48:a6:0c:5e:f4:72:37:f6:c4:e3:8a:50:f4:b4:b2:
         6c:f9:31:ae:4e:84:7c:c0:53:b0:1b:2f:51:20:15:8c:fe:7c:
         d3:44:c0:2f:18:23:6e:7f:11:a1:8a:8a:b8:81:57:11:2d:ba:
         eb:fc:3c:19:b0:88:b6:cf:2d:ef:f8:29:e7:00:83:a7:e8:d6:
         39:1d:92:77:32:8a:34:87:4e:de:cd:ad:75:d7:61:ae:27:60:
         c0:9f:9e:60:b5:88:3f:0a:7f:72:b8:30:20:f1:b6:0b:87:e4:
         10:10:c1:36:77:4a:a3:67:d3:78:6e:9d:d6:ab:2b:38:95:42:
         d5:cc:53:9c:fc:a5:da:65:86:67:e5:87:f5:79:ee:4f:a6:95:
         ea:45:4d:65:16:8d:e9:08:fa:84:f0:6f:8b:fa:0e:39:62:dc:
         53:59:68:c5:a2:c7:ae:ff:b4:79:24:be:bb:05:6e:44:24:30:
         bb:f1:df:db:fa:96:a1:a3:99:13:33:9e:63:c5:82:35:8d:2e:
         08:80:7b:11:1f:29:b8:b0:93:16:dd:c1:54:c5:66:44:53:d0:
         8d:4c:da:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----