Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bdfead64-4e75-4a67-8f59-c39d4710777c.roa
File:                     bdfead64-4e75-4a67-8f59-c39d4710777c.roa (raw, json)
Hash identifier:          W6kukPHOH/5P7Waak9zcqVxiO4kFIJvpwcBsELBYg88=
Subject key identifier:   42:8C:C3:81:6B:BC:F4:3B:98:28:2F:46:9A:69:AF:28:1F:B1:38:0A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3D67A5F631EBAB331961A2205B65E91E4F1A64D1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bdfead64-4e75-4a67-8f59-c39d4710777c.roa
Signing time:             Sat 18 Oct 2025 02:30:22 +0000
ROA not before:           Sat 18 Oct 2025 02:30:22 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.47.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:67:a5:f6:31:eb:ab:33:19:61:a2:20:5b:65:e9:1e:4f:1a:64:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 02:30:22 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=1c8ae7307129e33347543076260ab7e52c36220ccf8c5029003ea6101a88c1af, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:02:ec:12:a9:18:c7:19:0d:75:32:6d:f1:bc:
                    f1:a7:c5:e4:78:59:c8:9b:f3:74:9f:84:ee:4c:13:
                    b8:c1:c9:b9:0c:2d:55:f0:4f:39:58:0d:bc:14:55:
                    fd:d1:87:df:62:d3:17:f7:7d:04:07:ed:fc:4f:f0:
                    26:9c:c0:34:30:88:6d:cf:9e:33:21:ec:bd:63:79:
                    53:8f:a4:ab:56:79:44:57:8b:d6:7b:c6:1f:0e:b9:
                    68:70:f4:04:62:31:da:18:25:30:c7:0b:a1:ae:a4:
                    a7:b9:ee:25:54:08:2d:11:93:04:65:48:75:10:7d:
                    58:94:00:82:be:5d:a2:54:46:dc:29:4b:06:65:75:
                    3b:b1:19:a2:86:24:56:69:ef:10:56:04:ea:00:8e:
                    20:33:46:82:c6:6e:2b:a5:3e:89:ff:e1:aa:89:f9:
                    ad:ba:1a:dc:91:cf:11:31:24:c3:31:a8:47:4a:85:
                    8f:31:50:fa:30:71:22:72:dc:6d:51:28:95:5d:ca:
                    09:e7:14:fa:6d:0a:ce:d2:71:5b:fb:1e:98:6b:86:
                    cb:cc:ed:ea:e8:8a:fc:93:52:6d:77:65:d6:2d:d4:
                    a7:a5:4d:c4:c5:f2:12:96:67:4a:8f:cc:8a:3f:9c:
                    7e:e8:ad:22:bb:4d:5d:07:85:0d:14:f5:39:f2:9d:
                    c2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:8C:C3:81:6B:BC:F4:3B:98:28:2F:46:9A:69:AF:28:1F:B1:38:0A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bdfead64-4e75-4a67-8f59-c39d4710777c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:c7:7e:e1:37:ac:a7:21:15:8a:a8:ba:b0:42:c1:f9:fd:e9:
         18:ee:ec:9b:2b:85:53:26:db:18:b0:f2:72:5a:e4:a5:e1:60:
         f6:d3:94:03:96:15:35:c9:5c:c8:12:5d:97:31:d6:f4:e1:60:
         e9:61:94:f0:bc:d3:26:97:9b:21:ad:53:51:a3:89:11:71:96:
         75:e8:1a:49:99:01:27:b0:75:5b:a1:03:80:cd:b8:72:25:c5:
         f6:bb:5d:03:26:79:56:88:c7:d6:53:37:3e:82:11:f5:4c:54:
         d2:9f:b9:38:4b:02:5f:d5:df:08:9b:fe:6b:48:3d:95:6f:82:
         b0:7c:f0:18:8d:99:43:da:db:6e:ec:8d:ab:3b:1e:bb:d7:92:
         74:6e:44:de:3a:56:53:49:6b:9e:44:aa:16:45:6f:55:3c:33:
         3b:df:a0:bc:4f:af:eb:45:a0:5e:9c:5d:40:65:1f:5c:b2:81:
         1c:1f:93:e8:d3:df:63:da:5b:d8:f6:7d:03:9e:b3:a1:5e:f5:
         a0:cb:6a:8b:4d:d0:81:f8:b4:93:a8:60:4f:98:cd:61:e4:de:
         02:8e:5f:4e:2c:ea:58:81:98:e7:49:07:26:fb:5d:63:4d:54:
         a7:bc:ab:ce:23:92:f3:0c:81:23:39:e1:3f:16:6f:cc:b3:0e:
         06:b0:2b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----