Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7526092-d72d-4a35-8e3c-cf5e3b610432.roa
File:                     c7526092-d72d-4a35-8e3c-cf5e3b610432.roa (raw, json)
Hash identifier:          BGIUXPItZBmkDu6VMLnSUJfYiOvxRZ0J5F2uT5M7BRA=
Subject key identifier:   72:55:E7:46:76:A8:30:36:6A:58:EC:DE:2D:76:A1:BC:12:6C:B7:A1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3F2FE638E73B998403EB48239E7600FD35892313
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7526092-d72d-4a35-8e3c-cf5e3b610432.roa
Signing time:             Sat 18 Oct 2025 02:40:07 +0000
ROA not before:           Sat 18 Oct 2025 02:40:07 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.8.236.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:2f:e6:38:e7:3b:99:84:03:eb:48:23:9e:76:00:fd:35:89:23:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 02:40:07 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=79bf55b42d6794fbbb685832220925b93180b3a4d43eb6a1918ce3cd74206b11, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2f:7a:5a:78:ad:24:36:0a:c1:23:61:10:be:
                    a5:0e:37:92:35:50:d7:82:6e:dd:e8:e8:81:dd:cf:
                    2e:01:07:20:a0:45:f6:bf:1f:9b:77:04:3c:5b:66:
                    7e:52:59:58:f2:80:1c:85:02:23:8b:6f:be:fe:72:
                    9f:a7:a0:df:d6:df:33:aa:ed:69:9e:1a:a0:b1:2f:
                    7a:bc:9e:c8:db:d4:d4:30:8e:0b:da:2f:7c:79:b8:
                    c8:62:3d:78:ac:5d:55:c4:39:b2:cb:fb:c2:b8:85:
                    32:f6:12:07:05:f4:75:d3:84:fb:c6:35:d4:0c:5d:
                    69:90:c8:35:37:32:47:5d:96:a0:9e:b1:a3:4a:5a:
                    27:a4:94:3a:9a:f8:a5:11:03:5d:8c:82:4c:36:32:
                    6b:83:ff:98:ea:6b:31:f2:9a:ce:f8:d9:cf:47:f7:
                    5c:c2:c1:3b:d3:c6:88:de:7a:16:3f:c2:bc:e0:07:
                    aa:b6:28:ea:2a:88:54:7c:a4:f2:73:f9:89:4a:d6:
                    33:60:bb:c5:11:d0:5a:49:50:78:2b:7d:0d:83:98:
                    fb:ba:2d:00:a5:5a:47:8d:70:e6:81:49:f2:62:f6:
                    32:20:c7:e9:36:be:46:bf:44:b7:9f:23:90:f4:ad:
                    cd:47:25:62:5a:8c:dc:46:fd:4f:db:55:89:00:ad:
                    27:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:55:E7:46:76:A8:30:36:6A:58:EC:DE:2D:76:A1:BC:12:6C:B7:A1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7526092-d72d-4a35-8e3c-cf5e3b610432.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.8.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c7:0f:de:39:82:a7:b1:18:4f:49:15:79:e3:e2:8a:81:01:4d:
         b3:48:63:4f:03:af:f9:df:29:82:87:cb:d9:a0:d0:e6:b6:16:
         49:38:34:06:fb:46:2a:eb:98:3a:5e:bd:24:7e:3e:12:fd:bb:
         65:00:13:51:81:1a:00:69:f1:fa:93:50:81:e4:fe:0e:8c:03:
         0c:c1:bb:c0:63:17:27:2b:9e:0d:b9:38:76:06:f4:8f:76:95:
         fb:54:15:54:0c:2f:33:28:bf:1b:01:28:82:e7:de:3d:0b:41:
         a0:b1:51:74:7e:c4:be:3d:b6:3e:f3:ca:37:92:da:33:59:9d:
         46:ee:31:a1:2b:a8:62:44:a8:d5:8b:85:6f:f2:3b:e1:86:9e:
         b7:b5:5e:e8:58:b7:4a:81:3c:12:3b:c4:71:09:1d:31:0b:ed:
         2d:90:77:7f:14:69:a3:da:dc:70:f8:2f:44:5c:a5:ce:68:1e:
         71:ce:db:b3:80:37:b2:84:dc:3a:2f:df:a6:34:8f:86:7f:03:
         48:c3:f9:34:d6:a8:b3:d2:0f:2d:25:82:79:e2:7e:36:2a:48:
         ab:e3:38:1a:a7:dc:95:b2:bc:0e:10:6c:69:72:18:7d:1a:ec:
         db:7a:b2:de:77:d4:0b:b4:ff:d5:da:eb:82:4b:4b:34:4a:73:
         2e:f8:7f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----