Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9eeb10c8-ed33-44fc-8f22-1575d43c3cc0.roa
File:                     9eeb10c8-ed33-44fc-8f22-1575d43c3cc0.roa (raw, json)
Hash identifier:          k+QLr7ecnV26q71DZttBZQ3mx97HlGqSGaFV5YIHRgo=
Subject key identifier:   F2:1A:71:FA:07:E8:48:3E:B5:B3:0F:0F:92:37:B6:1D:48:EA:80:6C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       57103DA14348C559176AFA7D3FFE75D8674E75C5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9eeb10c8-ed33-44fc-8f22-1575d43c3cc0.roa
Signing time:             Sat 18 Oct 2025 04:11:03 +0000
ROA not before:           Sat 18 Oct 2025 04:11:03 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.4.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:10:3d:a1:43:48:c5:59:17:6a:fa:7d:3f:fe:75:d8:67:4e:75:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 04:11:03 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=0cdaf6f3ded77959e0f6938db82bfee76c369fa75220892567e2dc702c14372a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d4:62:3b:0c:f5:a6:d4:7f:18:6b:14:3f:7d:
                    52:ac:5d:f1:a9:f1:49:21:70:72:05:95:d3:4b:b1:
                    2f:6a:4c:e4:15:08:ce:be:d0:88:1f:b4:14:b5:ff:
                    7d:dd:b7:0a:e1:41:e6:74:bb:d1:27:6c:5b:35:69:
                    65:0c:08:ad:ea:67:5f:0c:e4:a0:21:b1:31:6c:d7:
                    b3:2c:cb:53:63:02:c4:d8:78:b7:99:a3:bd:95:2c:
                    5a:d1:4a:d8:00:a5:19:98:84:49:a8:ae:b0:f8:62:
                    f0:39:af:46:eb:45:b8:ad:f7:70:6d:e8:7f:ee:39:
                    11:52:18:17:94:92:8c:fd:98:c7:bb:73:8a:e0:e2:
                    9f:5b:0a:ba:c0:56:a4:b5:6e:e0:8e:7d:3a:8f:a4:
                    70:b0:10:e7:56:df:05:97:fb:f6:09:67:5e:49:91:
                    de:42:54:68:72:b5:b5:17:00:39:1a:17:82:cb:f8:
                    43:2d:c5:20:bf:68:1f:df:71:32:10:70:dc:44:1f:
                    b2:d7:57:fc:34:6d:a1:9f:e1:ad:f6:a9:5a:50:bd:
                    7f:3b:57:c2:6e:c3:38:18:fa:00:57:9c:44:47:3e:
                    14:1a:2d:95:ca:c8:65:f0:06:ad:ea:c6:90:8b:13:
                    82:f5:7b:59:1a:47:fb:0c:8c:da:39:8a:f7:6a:fd:
                    d1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1A:71:FA:07:E8:48:3E:B5:B3:0F:0F:92:37:B6:1D:48:EA:80:6C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9eeb10c8-ed33-44fc-8f22-1575d43c3cc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:21:d6:b4:f1:e5:e9:58:f2:56:66:24:b8:66:aa:08:0e:7b:
         4e:82:b3:23:c0:77:c6:9e:1b:1a:c8:ee:24:19:02:40:be:3d:
         96:54:74:74:0a:f7:3f:87:d7:e3:e3:9d:64:12:d4:da:16:da:
         c6:29:42:6e:a4:5d:24:c2:84:99:bc:7a:f8:43:ac:43:22:48:
         9a:1c:7c:4d:84:31:1c:3c:06:c3:c1:98:62:fe:f1:e3:29:a1:
         d1:2a:79:16:c6:9d:a4:88:33:4a:4f:f9:3d:9b:59:aa:94:c6:
         93:c8:28:54:77:ab:29:3c:ed:a0:a0:db:eb:08:91:83:91:d6:
         3a:c3:e6:0d:f1:95:97:e7:50:7a:87:ff:68:45:fc:e7:e2:8c:
         57:b6:2d:98:49:e6:47:3d:34:12:ee:0c:40:f7:27:47:41:5c:
         da:88:18:88:6c:77:47:69:47:e2:30:af:16:92:de:f4:7d:76:
         be:b3:7a:c0:22:14:60:b9:41:96:d0:c4:69:14:24:c8:46:50:
         ad:a4:ed:ba:a9:5a:0e:30:5f:3b:14:d6:6c:1a:7a:9e:bc:fd:
         09:c3:bf:46:58:7a:13:ce:85:44:6f:59:c1:b0:4d:2f:50:00:
         7a:41:e2:03:5f:b5:df:ff:1e:04:9a:20:d9:7c:98:02:03:18:
         f6:41:b7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----