Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/beeeaf9a-f784-4ada-9245-94e3744e2409.roa
File:                     beeeaf9a-f784-4ada-9245-94e3744e2409.roa (raw, json)
Hash identifier:          2lNWitdWrqVLUt1xAMPnmPZP7lXVcSZbvXFv6m0rn/M=
Subject key identifier:   D1:38:0F:E0:01:7A:B3:AC:5C:BB:EF:CC:1F:A2:0A:C9:61:BA:F8:4A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0964B593D54997C9729E2EB91309C0B29AAFF6D7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/beeeaf9a-f784-4ada-9245-94e3744e2409.roa
Signing time:             Sat 18 Oct 2025 01:21:29 +0000
ROA not before:           Sat 18 Oct 2025 01:21:29 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.16.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:64:b5:93:d5:49:97:c9:72:9e:2e:b9:13:09:c0:b2:9a:af:f6:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 01:21:29 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=f0b981c35f9c6649bd01a23047182478bc9fcdebb44bae15f635db54c2d6302c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:34:c4:85:73:e3:df:9e:d2:ae:13:0d:47:f8:
                    41:ba:31:b6:16:5e:f7:3b:58:83:5b:44:28:99:eb:
                    08:cd:fd:1e:02:3d:b2:6f:ba:17:d9:67:a5:2e:e5:
                    2a:d1:c9:5d:24:46:8c:46:36:e3:0c:2f:26:93:7a:
                    3e:8e:e8:2c:46:ac:4c:39:74:da:d2:34:58:a9:a5:
                    f0:49:6e:80:4b:e3:df:38:ee:0d:e9:75:8a:8e:7d:
                    fd:c8:54:6b:19:f8:3e:ac:b7:8c:3e:b8:51:7e:3d:
                    e2:ca:96:83:91:c3:c6:73:c3:21:2f:39:23:cd:58:
                    8d:b0:16:e6:ed:33:2b:8d:96:3e:6d:59:8f:88:a1:
                    c1:4c:4a:6f:32:70:ce:53:5d:b6:67:d2:7b:25:3e:
                    7a:27:65:54:6e:d4:02:45:d9:39:cf:de:77:ee:39:
                    31:36:dc:d5:27:40:ed:dc:25:1b:0b:d3:7f:12:95:
                    6a:02:85:50:b7:a3:0b:01:24:29:f6:39:72:58:05:
                    50:b9:e1:a3:d7:f1:3e:69:a3:09:53:b9:ec:9a:fc:
                    41:8d:21:06:b5:07:5e:77:3a:eb:e5:44:32:38:8e:
                    2b:40:5e:2e:52:5b:aa:53:cb:40:ac:2f:89:da:e3:
                    59:9e:f4:39:00:de:15:a4:9f:d0:c5:f8:9c:42:58:
                    92:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:38:0F:E0:01:7A:B3:AC:5C:BB:EF:CC:1F:A2:0A:C9:61:BA:F8:4A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/beeeaf9a-f784-4ada-9245-94e3744e2409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         06:f8:79:af:68:69:13:a0:29:c1:1c:cc:82:29:04:f9:a2:01:
         37:7b:00:16:c8:af:5c:72:fd:29:2f:5a:d0:81:e9:3e:ef:97:
         96:96:99:54:60:b9:dd:01:32:3f:5a:35:73:1d:b5:42:5b:57:
         1f:17:b6:5c:97:41:37:fa:c1:42:c2:67:a4:44:40:2f:94:2d:
         91:fd:6a:b5:38:c1:4d:d1:f7:a4:3b:0c:73:08:07:3a:10:7a:
         a2:2a:38:8a:03:f2:2e:87:0e:d6:e0:c9:6b:de:27:ab:c8:af:
         a1:67:bc:61:a1:a6:a8:a1:a0:0c:54:af:31:c1:09:98:a5:2d:
         87:e9:85:1e:22:f6:c2:4a:d7:1a:30:73:02:13:a1:0f:de:a3:
         23:98:c4:fb:0f:de:69:11:5c:23:40:b6:4a:c3:e7:21:e8:95:
         fd:9b:62:25:00:10:58:a7:2c:06:05:a7:bf:45:0c:73:54:af:
         83:8d:d5:8c:b1:29:de:5b:f2:27:46:81:e6:89:75:99:bf:53:
         f7:6c:8f:a0:0a:ee:aa:f0:08:60:b7:13:58:d5:d5:28:bd:96:
         19:46:d8:1f:d9:04:4f:a6:b2:74:79:33:c5:eb:57:2e:b4:38:
         81:56:b9:71:3e:16:90:38:34:c1:bf:09:54:cf:de:7e:3f:fa:
         02:18:88:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----