Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0ef8095-734e-4cd7-b03a-0e1b889c3786.roa
File:                     a0ef8095-734e-4cd7-b03a-0e1b889c3786.roa (raw, json)
Hash identifier:          QvcG1iLfM9ueEylNrP9s9gbREE/zS39J/vJFXBVAfE4=
Subject key identifier:   D0:6F:93:C2:04:B5:FF:C8:C0:40:F8:20:19:B8:D5:14:31:A1:F6:61
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5D3B06830D526EF6CC2094EFB709B7FCF6B2B00F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0ef8095-734e-4cd7-b03a-0e1b889c3786.roa
Signing time:             Sat 18 Oct 2025 04:31:48 +0000
ROA not before:           Sat 18 Oct 2025 04:31:48 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.20.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:3b:06:83:0d:52:6e:f6:cc:20:94:ef:b7:09:b7:fc:f6:b2:b0:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 04:31:48 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=72c1f31939072a76dc40db0f8e564fb3f683b002b992cfe9c7cbf1a8cf4d5bda, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b2:b0:9b:ab:b1:a0:5d:fa:e0:01:b4:2b:b4:
                    12:b1:71:ec:50:ab:bf:d5:9d:9a:6e:f7:82:ef:4b:
                    b0:1b:8c:97:b6:e0:be:09:2f:9e:ea:a3:75:45:c4:
                    be:f0:97:cd:d6:e6:cd:92:fa:87:fd:82:14:ac:0d:
                    ed:c0:de:05:35:9d:24:fc:d8:1c:26:d1:5d:84:ef:
                    d8:93:b3:fa:b9:d0:c6:d4:56:5c:05:83:4a:05:f0:
                    02:12:1d:08:fa:02:2a:bd:fb:3d:6a:45:d0:8b:df:
                    7c:27:f8:df:ae:7d:96:f5:14:30:fb:0b:98:c3:88:
                    00:83:a0:14:64:41:f4:33:40:68:92:f8:82:9d:bc:
                    d5:6d:b2:3f:99:5f:fa:a8:1d:ec:9d:ea:39:05:e7:
                    55:18:11:d3:6d:7b:2b:60:71:58:94:46:ea:5d:69:
                    97:11:93:7e:26:0e:16:aa:53:26:9e:78:42:c1:09:
                    66:5a:ce:57:79:e6:03:4c:7d:cd:dc:5e:13:f6:dc:
                    7f:a8:42:19:02:2f:9b:3c:c1:10:02:9a:4d:1b:b0:
                    a1:06:04:12:8e:c0:ce:86:2d:cd:ac:86:93:0f:0c:
                    bb:1e:7b:0d:87:6b:8c:6b:e9:e4:41:62:87:61:e1:
                    24:b2:ce:1c:56:5f:0c:ed:1e:fa:8d:7b:42:e4:ad:
                    93:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6F:93:C2:04:B5:FF:C8:C0:40:F8:20:19:B8:D5:14:31:A1:F6:61
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0ef8095-734e-4cd7-b03a-0e1b889c3786.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:c3:3a:e6:26:c1:84:90:e1:a7:80:47:2b:a2:bd:0c:98:99:
         8b:69:a0:37:b9:47:c7:56:a8:80:65:dc:d0:c1:76:37:bc:a3:
         65:3a:66:e2:e5:bd:14:57:6b:5e:c2:73:7f:3a:d7:c3:94:7e:
         e6:ef:6e:98:60:1a:b3:68:3f:31:5d:34:b2:dc:7c:3c:c9:ee:
         29:7e:18:2a:c6:65:b9:ad:78:e0:7a:2e:f9:f8:ce:b1:9e:09:
         e5:7c:a3:4a:c3:3e:06:75:b7:54:af:b8:8e:62:f4:ea:d5:0f:
         8e:bf:31:a4:5e:11:1c:d2:cb:71:83:76:bc:84:08:ed:b4:e0:
         81:f5:79:59:33:ec:5d:fd:79:0f:f6:53:58:96:00:c6:f9:2e:
         7f:34:ca:7f:8f:1a:59:34:ff:28:5b:d6:35:ef:e8:95:9b:d5:
         3b:a0:49:ff:93:1b:89:69:0f:75:8d:ca:f8:25:61:53:a1:a8:
         58:a0:4b:03:6c:cb:ca:72:c5:6b:13:4a:d9:c6:05:de:be:96:
         70:da:b6:f1:a4:86:c4:82:69:b5:db:d4:99:db:7d:c8:1d:9f:
         06:da:1b:a0:b9:78:b6:80:3c:df:20:e0:76:59:71:06:9f:9a:
         07:a8:61:f7:ae:52:c9:8b:3f:2d:bc:db:7f:50:eb:9f:b3:3b:
         c3:b7:b0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----