Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc32ee35-d685-4fda-b2c4-60537f999822.roa
File:                     dc32ee35-d685-4fda-b2c4-60537f999822.roa (raw, json)
Hash identifier:          wc/zxCE8Ele8r8X8b5Ahv0b/Nn8xgXDH3TvmpToZVtg=
Subject key identifier:   52:F0:D6:0D:30:65:12:C0:92:8E:30:9F:81:5E:CD:FC:68:03:0D:FD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1F04B88454FC4765F3A5F98648CAC2F4B97888DF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc32ee35-d685-4fda-b2c4-60537f999822.roa
Signing time:             Sat 18 Oct 2025 03:21:00 +0000
ROA not before:           Sat 18 Oct 2025 03:21:00 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.8.162.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:04:b8:84:54:fc:47:65:f3:a5:f9:86:48:ca:c2:f4:b9:78:88:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 03:21:00 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=2466ee6d14b659228aacfcf9d263ef664acc96091755fce8614e4c24d999efa7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:91:62:f2:1c:e0:aa:e6:ba:74:55:80:4b:6c:
                    1d:19:bf:aa:37:c4:74:90:da:9a:be:82:5c:c3:9c:
                    35:62:fa:3f:e3:f3:ae:18:f9:2a:e0:b9:7e:ce:5d:
                    ef:22:1f:8a:79:6e:7f:3d:2e:f4:ad:df:58:6a:3c:
                    d6:7f:05:4f:79:1b:66:d8:39:cf:ca:b9:3e:62:58:
                    34:75:96:48:eb:6f:26:69:9b:5c:b8:03:93:a0:d8:
                    06:ea:f9:da:39:df:a1:b0:51:dc:ec:4a:07:41:ae:
                    35:15:7f:38:4e:2e:40:e8:dc:c4:32:30:d9:db:84:
                    9d:b8:07:2c:40:52:f3:a8:12:e3:71:31:26:93:cc:
                    22:d2:2a:ae:ca:51:d6:ad:43:6c:2f:61:fa:ff:2c:
                    8f:51:e1:e0:cd:c5:d2:65:a8:87:17:7f:87:47:29:
                    e2:aa:68:70:b6:42:2d:c8:0a:8a:97:38:34:d2:46:
                    8a:15:64:75:df:ff:b6:fd:b3:51:7e:3e:15:12:f1:
                    4b:7a:3c:56:b5:9d:bc:c9:b1:d5:e0:29:c1:d0:c7:
                    07:af:03:9e:42:1b:37:64:38:e6:38:07:c8:2c:de:
                    28:07:ab:2c:ae:0c:11:12:f4:86:63:47:6b:a8:5f:
                    bc:3f:4b:8b:35:0f:07:ce:99:20:be:18:5e:19:b0:
                    c2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F0:D6:0D:30:65:12:C0:92:8E:30:9F:81:5E:CD:FC:68:03:0D:FD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc32ee35-d685-4fda-b2c4-60537f999822.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.8.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:d7:57:fb:87:93:e2:81:10:f4:6d:b8:1f:3c:de:4c:30:6f:
         0b:05:d6:9d:9e:2d:00:5a:25:31:6b:8d:3b:d2:c2:82:d1:05:
         3a:b6:14:66:10:d1:a9:a2:ec:76:5a:6b:cf:4a:e2:5c:50:ab:
         4c:38:6f:00:63:a2:aa:29:fa:6b:1e:ad:ca:28:5c:d3:8f:f0:
         aa:e3:a6:de:a6:ee:a1:87:2f:b4:c3:1c:fb:95:27:0a:17:7b:
         5f:ac:4a:0a:e2:bc:a8:5b:ee:f9:e9:6b:26:57:ef:11:28:4b:
         6f:f5:9f:a5:11:79:d6:e3:2b:7c:d8:16:d6:65:61:52:b1:52:
         43:91:ec:e0:cc:0c:ce:91:e9:93:c3:51:93:8c:d2:b9:a4:77:
         f6:f9:5d:03:19:cb:eb:dd:83:20:3f:d9:7d:a8:99:16:5d:53:
         c5:56:86:51:a3:bd:15:72:9b:e6:bb:f6:f6:66:5b:4e:5e:e5:
         1e:71:1d:12:aa:52:a6:e1:c0:c8:bb:b1:6f:23:50:a2:c2:2b:
         bb:98:e8:60:ba:07:bd:41:d8:fb:a2:ad:a3:ed:1d:33:dc:99:
         7a:b8:27:f8:35:47:fe:21:9a:43:fa:f4:22:9d:e9:5f:17:82:
         bf:45:a1:ed:ed:3c:85:2e:9a:1d:d1:37:60:a0:74:75:13:6b:
         41:25:df:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----