Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5954d8b-f938-433d-91b4-fb7f300fa4b4.roa
File:                     b5954d8b-f938-433d-91b4-fb7f300fa4b4.roa (raw, json)
Hash identifier:          wSoyZOYyW3BfKWbL/ldK4ppFeNAtzr52FUQ6Cx5QrG4=
Subject key identifier:   44:99:11:AA:90:2D:7F:F8:14:5A:31:2C:2A:A1:50:0A:00:C7:F4:C3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       17D2EB387A308C9C19BC80C17C63ABE73F881038
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5954d8b-f938-433d-91b4-fb7f300fa4b4.roa
Signing time:             Sat 18 Oct 2025 04:50:52 +0000
ROA not before:           Sat 18 Oct 2025 04:50:52 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.8.64.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d2:eb:38:7a:30:8c:9c:19:bc:80:c1:7c:63:ab:e7:3f:88:10:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 04:50:52 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=c6be67c1317baad00c4ad0ed9df396057a4a4eb2677716ef6e41a2048ee4062d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f2:3c:3d:14:34:dd:30:1a:b0:b6:60:66:42:
                    fb:00:2f:89:e3:e3:03:16:44:6d:5b:fd:77:c9:2a:
                    d6:87:03:21:81:60:7d:4c:13:4f:31:98:4b:6d:d2:
                    64:dc:82:f2:28:47:70:20:d9:72:16:b7:a7:20:8d:
                    cb:9b:d2:a1:ba:5a:91:f5:f7:ca:bf:00:c6:54:dc:
                    90:ec:fa:ea:03:de:f5:06:2f:49:46:55:5c:07:45:
                    86:4f:ab:1d:8a:86:1a:eb:06:a8:3a:6b:8f:ba:2f:
                    3c:09:98:c0:da:06:ab:15:54:9f:80:dc:52:c6:46:
                    a6:ce:ee:f6:80:b5:7f:cb:73:15:20:c2:0a:c3:44:
                    bc:4f:9b:47:7b:7a:1d:d5:9f:46:85:fd:48:a1:fb:
                    a8:e9:75:1a:e3:39:f1:a7:1e:ce:d6:09:87:18:47:
                    fd:77:99:37:64:0c:90:f6:d7:08:52:39:a9:ad:02:
                    9d:ae:a7:01:5a:fe:bb:5b:c2:16:7d:e4:13:6e:df:
                    2e:93:75:b7:77:f4:b6:06:7b:25:01:aa:23:6c:f6:
                    ff:4f:6d:50:dd:90:ec:2a:49:2b:08:d0:e0:d6:cc:
                    b0:bc:eb:f4:ef:e4:9d:03:8b:1d:6a:b5:fb:83:fc:
                    bd:d7:5f:b8:f4:f9:70:e2:50:15:22:b7:97:39:f7:
                    23:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:99:11:AA:90:2D:7F:F8:14:5A:31:2C:2A:A1:50:0A:00:C7:F4:C3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5954d8b-f938-433d-91b4-fb7f300fa4b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.8.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         74:61:ad:a5:b8:74:46:9f:be:b0:5e:33:a8:f9:ca:45:ed:35:
         ab:3c:96:3f:d3:56:4b:74:dd:f7:09:f8:a9:e8:f1:2a:2a:47:
         5c:76:ee:61:27:f5:88:3f:40:13:42:a9:3f:a3:9e:20:2e:7a:
         47:e1:5f:9d:2c:3e:9e:7a:d0:97:35:5a:56:ac:38:16:65:12:
         b5:c6:d3:14:fd:8a:26:44:bb:27:26:da:c0:6b:4b:96:fd:c8:
         f3:f1:d7:cc:ff:90:c6:d4:b4:ee:60:20:19:9b:22:84:6c:db:
         c0:f3:60:eb:48:83:bd:cf:b2:e2:77:aa:d0:bf:85:0d:4a:a6:
         0d:63:a1:4e:7f:37:89:0a:9d:02:a7:86:18:f3:2c:af:49:6a:
         3d:02:0b:27:ff:fc:fc:83:4a:44:7f:2a:e0:ca:a3:2d:d7:13:
         3b:a9:8b:25:80:d3:b6:fc:ba:4f:be:7a:d0:e0:ca:c6:c1:10:
         9d:11:f2:62:fc:00:a0:01:b4:62:2f:7c:a9:e1:90:c6:46:5e:
         df:1f:1a:54:dc:23:05:1a:47:cb:e3:0b:2f:35:f2:21:68:c2:
         f2:65:f0:63:e4:45:f0:c7:98:28:65:ef:97:8c:e7:6d:dd:b4:
         cf:28:be:44:d4:0c:52:24:65:b4:10:10:4d:dd:5c:a3:08:8d:
         32:a5:09:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----