Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a445294-62e2-4631-b986-4e45bf1c8ccd.roa
File:                     9a445294-62e2-4631-b986-4e45bf1c8ccd.roa (raw, json)
Hash identifier:          yOqg+0VsdGyxi6dcYNW85erMw0V5qOCekxTYo5PFu3U=
Subject key identifier:   BD:F1:34:40:45:8C:A8:64:1F:E7:E8:6A:A5:DA:1D:31:9E:7F:82:7E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       39F8DB672A80B23819179C6317B1669828B3736D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a445294-62e2-4631-b986-4e45bf1c8ccd.roa
Signing time:             Sat 18 Oct 2025 03:50:59 +0000
ROA not before:           Sat 18 Oct 2025 03:50:59 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.120.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f8:db:67:2a:80:b2:38:19:17:9c:63:17:b1:66:98:28:b3:73:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 03:50:59 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=e00c5d368c25a16fb5b53fe61205ae2563e3ff8815c932cfef242d3614a96d66, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d9:6a:3b:71:a7:d3:fe:87:87:e5:96:41:eb:
                    64:f9:f7:fb:39:2c:ff:f7:ad:0b:76:58:1a:a8:d2:
                    ab:46:24:43:0d:ed:78:a7:4c:f1:dc:ec:89:87:86:
                    9d:a4:78:5a:b1:b3:07:b9:a0:54:37:78:9f:54:06:
                    1a:00:e4:da:ef:03:a3:f0:05:04:19:5c:9c:8f:a6:
                    c6:9a:6c:21:f0:f0:de:17:73:69:de:14:e4:60:d7:
                    69:d5:39:7d:c8:e3:a3:e0:8a:84:c4:79:4a:d4:30:
                    ee:c2:f0:1f:77:bb:3c:e1:83:24:cf:f4:b2:3f:19:
                    44:86:3d:53:03:b5:05:5b:8d:cd:75:25:66:c2:be:
                    e9:d3:73:4a:ed:0f:55:b0:d9:a7:cc:fa:32:70:26:
                    1f:1d:ab:a6:6f:86:90:62:89:bf:0f:4f:d3:7c:6e:
                    6e:db:8f:00:9d:cb:b3:3b:5d:d2:48:e9:3c:4b:60:
                    07:d5:bd:80:8b:67:17:a9:09:5a:a6:4e:f3:90:6b:
                    6b:8c:00:62:d3:7f:5a:8f:d0:03:b0:a1:d8:a8:7f:
                    1e:91:48:7a:b7:15:d5:46:22:08:64:bd:d0:fe:63:
                    7b:c6:09:07:9e:6e:aa:0f:27:5a:83:fd:8f:df:5d:
                    d0:08:2e:67:ef:f9:38:b4:f7:6f:9d:7b:f0:f3:05:
                    65:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F1:34:40:45:8C:A8:64:1F:E7:E8:6A:A5:DA:1D:31:9E:7F:82:7E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a445294-62e2-4631-b986-4e45bf1c8ccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:12:30:88:94:3f:93:7d:2b:04:86:8f:d1:57:dd:93:03:19:
         1c:be:b0:3b:ed:8f:7a:97:57:1e:c9:c3:11:64:7b:9e:f6:21:
         86:da:3a:5c:4b:e7:e5:b4:58:69:62:6e:4d:50:a5:2d:a3:71:
         17:ed:88:f0:fd:a0:1f:04:a1:81:2a:72:97:be:c6:fb:f4:f1:
         da:56:1f:f2:fc:ef:d5:de:f1:a7:f4:3d:43:d3:e8:50:34:07:
         29:d6:12:c1:45:6d:4a:2d:d2:10:29:95:20:7c:4a:ce:f3:9e:
         2f:09:ea:bd:04:d6:e6:31:e3:90:80:b9:67:59:3b:53:9c:e6:
         03:12:e9:28:5d:a5:c0:68:c3:54:4f:03:4e:5e:38:06:93:33:
         76:51:ed:ed:a5:2c:88:52:98:6b:50:d3:52:34:35:68:96:97:
         cd:07:a3:b6:ea:cb:02:ad:ae:6b:ef:cc:1e:58:e9:e9:6e:3a:
         50:4f:11:9d:05:f2:19:65:02:50:75:96:e6:90:1f:8d:b3:f8:
         d2:7a:fb:d5:c4:91:ed:a8:44:98:d3:e5:9a:22:cc:7e:65:e6:
         26:00:f3:6a:cb:4a:7a:8d:60:4f:e4:f3:d2:58:bd:61:41:eb:
         6e:67:c6:01:8b:f7:e2:52:36:e5:2e:8d:c9:36:0c:eb:b2:11:
         f6:5d:5b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----