Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e107b291-bc99-4be5-8ed6-215dbdf104f0.roa
File:                     e107b291-bc99-4be5-8ed6-215dbdf104f0.roa (raw, json)
Hash identifier:          MXBAweQMI+2217XaDY4yNeI1kJgpd8BgtrY82jPJ/qU=
Subject key identifier:   F4:4A:7D:48:46:6C:72:FD:3C:E8:71:81:53:C2:D5:06:FA:65:81:7F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       788AD43D0BD11CA39BEF0280B9BB5FCB320C696C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e107b291-bc99-4be5-8ed6-215dbdf104f0.roa
Signing time:             Sat 18 Oct 2025 05:22:07 +0000
ROA not before:           Sat 18 Oct 2025 05:22:07 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.8.192.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:8a:d4:3d:0b:d1:1c:a3:9b:ef:02:80:b9:bb:5f:cb:32:0c:69:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 05:22:07 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=dfcc7a71e1f338f809b0e770fb8023069fca208e472503f7c816081c6aa1d128, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:51:7b:68:51:fb:ff:39:89:9c:13:25:1f:0b:
                    80:40:ea:cc:57:08:76:de:a2:cb:05:dc:87:9c:5a:
                    ce:a4:5f:f9:e0:03:fa:64:8c:e9:9a:2f:fb:8f:80:
                    fb:fc:00:f8:a1:12:bf:cc:e0:8e:c6:8c:91:64:30:
                    af:77:fc:50:df:df:c4:8b:d2:88:50:a7:9e:24:9f:
                    c0:1b:0c:b5:2c:1e:df:4b:1f:10:b6:06:3e:82:6e:
                    ea:0b:9f:85:d8:e7:78:ad:6e:3c:4f:25:65:1e:ca:
                    a2:b2:bb:e0:1a:ff:23:8b:99:af:40:2f:e9:71:38:
                    55:e3:c0:20:3d:b9:a8:f8:e9:1e:73:9c:57:03:7c:
                    5d:55:77:2a:b1:48:99:8b:ca:5f:3a:66:0b:11:19:
                    02:58:da:7d:1f:26:a0:49:c9:29:a1:21:21:47:4a:
                    49:d4:1b:71:05:26:e4:9e:3d:d8:25:09:c9:ff:99:
                    5e:e9:87:ea:68:eb:88:a0:1c:e0:0c:eb:52:73:c8:
                    ec:f0:cf:87:69:c8:9a:64:e9:1b:b0:f7:5b:d3:e0:
                    99:b1:c3:06:4d:a9:50:d8:f2:6e:36:1d:c9:dd:84:
                    ed:8c:8e:7f:43:89:d9:80:3f:6e:4f:f2:8b:64:03:
                    f6:e1:93:2d:4b:2c:8c:25:5d:02:65:b3:40:3c:be:
                    b3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:4A:7D:48:46:6C:72:FD:3C:E8:71:81:53:C2:D5:06:FA:65:81:7F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e107b291-bc99-4be5-8ed6-215dbdf104f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.8.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:19:8b:0b:7e:a7:c6:fd:21:e6:7b:eb:74:c7:85:c0:1f:3c:
         0e:9f:0a:0e:8c:02:4c:fd:3e:1f:38:e6:a3:17:f3:34:ed:d8:
         17:af:4c:1b:2c:7e:54:2a:da:35:66:6e:aa:14:a7:18:62:ba:
         86:26:ec:5b:1a:d6:57:15:69:03:5a:39:57:54:08:2c:40:bc:
         a1:60:a9:d2:c1:7f:1a:fd:c1:c9:b9:b5:cc:79:f2:0a:a7:00:
         4a:b5:bc:c9:8b:16:e2:62:c2:f6:64:73:ac:0b:74:03:04:24:
         fa:2e:93:2a:a8:b4:f4:1f:e8:68:d5:95:45:de:4e:3e:4c:60:
         72:52:7d:eb:26:17:5c:d0:56:b0:60:50:b8:e5:ca:bc:38:58:
         86:e8:a2:a5:a9:30:55:99:4a:05:df:7a:d1:3c:af:7c:58:80:
         e2:3f:14:af:17:ff:72:0d:ff:06:fd:dc:c3:ad:d3:f3:eb:40:
         37:91:c0:37:e5:38:c8:ff:c4:f6:a2:15:17:77:c6:c2:23:39:
         2e:7f:aa:15:4f:e6:bd:73:73:62:01:a5:c0:b2:ec:13:9d:39:
         b9:2f:67:07:8b:e8:81:82:50:c1:f1:b2:b7:e6:b3:0e:8a:8c:
         05:9a:d2:e7:21:d5:9e:b9:b7:5a:da:b6:96:a9:a0:5b:c2:82:
         79:0f:2b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----