Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d099ff7c-e0f9-4de5-bfd3-bea4976575cb.roa
File:                     d099ff7c-e0f9-4de5-bfd3-bea4976575cb.roa (raw, json)
Hash identifier:          Zj2VHNEC/j3dRK20jvXxMOsUXHVF11t42Ywz8Q3LV0U=
Subject key identifier:   51:6D:83:B7:2C:8B:43:57:9E:C5:9A:03:E6:F9:56:73:EF:5F:40:3C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       22E14A23CFEB4EB27E198A4BAB960D1E6FE6C40D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d099ff7c-e0f9-4de5-bfd3-bea4976575cb.roa
Signing time:             Sat 18 Oct 2025 01:00:11 +0000
ROA not before:           Sat 18 Oct 2025 01:00:11 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.124.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:e1:4a:23:cf:eb:4e:b2:7e:19:8a:4b:ab:96:0d:1e:6f:e6:c4:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 01:00:11 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=928b4ef6b1d6e55215ba0ccee1d52383b34ddcb9e82060000dd7fefc02460cd5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6d:6a:20:3f:b3:bf:bd:3c:80:94:1a:6b:f6:
                    3a:75:1e:5f:04:75:d7:02:f3:2e:89:01:30:0f:3e:
                    3a:8b:a8:a6:97:ee:1a:2b:bd:c7:f7:62:2c:48:77:
                    56:4f:76:db:1b:40:0e:7b:22:92:78:2d:16:96:a4:
                    94:aa:ed:57:e1:96:7d:0f:46:4c:4e:05:f1:78:58:
                    7a:87:ba:10:e2:dd:f0:98:0a:3d:b9:d1:e3:e1:21:
                    47:79:d4:f3:50:6c:47:68:87:6e:02:52:0a:59:79:
                    02:dc:8c:4f:fe:f7:8a:9f:56:34:3d:7f:db:d5:0a:
                    06:a4:5f:16:82:5d:6b:62:a4:79:17:ac:2f:aa:12:
                    e7:50:15:b1:36:db:ae:3f:65:7f:0a:88:3e:89:d8:
                    32:31:ed:81:c5:36:7d:18:53:c3:9d:e2:55:80:47:
                    d0:c1:1a:bf:8d:8d:47:04:fa:f9:e7:ba:3e:86:ae:
                    cf:f5:31:a2:df:1a:f6:9f:52:0d:9c:26:f0:7e:0a:
                    a7:c2:ea:36:99:2b:5a:1d:d2:84:81:4c:5f:e9:cc:
                    2c:83:62:06:00:2f:16:d0:03:1c:76:ed:37:bd:9e:
                    83:35:a6:4b:4e:0a:d7:54:d8:c6:3e:f2:fc:ff:c6:
                    cc:c6:95:e6:36:2b:0d:da:38:46:1a:07:ee:ba:e9:
                    7c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6D:83:B7:2C:8B:43:57:9E:C5:9A:03:E6:F9:56:73:EF:5F:40:3C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d099ff7c-e0f9-4de5-bfd3-bea4976575cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d6:a5:13:57:c8:d0:1f:10:06:1a:3d:76:2c:87:00:24:9e:85:
         3c:c8:90:5e:99:fa:d8:77:42:25:3b:a9:43:66:5c:0d:19:bd:
         ba:21:33:a6:f9:60:30:4f:7d:e1:6b:61:58:5d:5a:0a:79:2d:
         dc:5e:ba:03:1b:72:82:c5:b4:60:a1:2d:b3:2c:9b:9c:94:6c:
         77:7b:5b:af:ad:6e:ff:5f:03:bf:31:46:50:5e:c4:1a:3b:73:
         a3:df:9a:bb:4d:e3:6b:e7:b5:bf:4f:1d:dc:9b:4b:54:f6:df:
         dd:36:a9:6a:44:83:e3:31:95:cd:e7:f2:15:f7:b1:20:dc:0c:
         96:74:e0:a5:27:e7:5c:59:d1:9d:9d:66:98:91:50:a7:e7:51:
         0e:69:19:21:17:35:d6:5f:3b:26:f0:09:73:26:95:95:a4:71:
         91:3a:3d:a4:6c:87:a2:61:b5:6f:6a:89:27:6f:62:c5:b9:7c:
         ee:cf:e1:0b:2d:ed:b0:1a:bf:c5:39:99:fb:4e:08:07:f8:0e:
         05:5c:b0:ea:72:f4:bb:1e:88:4e:54:61:ea:ab:6b:10:40:ef:
         d4:d8:85:e3:b1:13:7d:45:64:24:c9:65:dc:83:0a:1c:8a:72:
         24:f9:a4:58:07:fb:ef:d3:23:06:93:ac:eb:f6:4d:17:ec:de:
         56:b0:c8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----