Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7f8ef53-70ea-4b4d-bba9-5067cfc4791b.roa
File:                     e7f8ef53-70ea-4b4d-bba9-5067cfc4791b.roa (raw, json)
Hash identifier:          mDlJewOgqgIw/S8xjc/Az/c8qGFR7tpHSMh4s3Qj8Qg=
Subject key identifier:   3E:EF:76:57:DD:A4:23:6E:E5:4E:BA:23:5C:3D:72:24:F8:84:5B:87
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       766354933BD78F5DAA805D9EF13FBCBED01CED9F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7f8ef53-70ea-4b4d-bba9-5067cfc4791b.roa
Signing time:             Sat 18 Oct 2025 04:41:33 +0000
ROA not before:           Sat 18 Oct 2025 04:41:33 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.8.16.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:63:54:93:3b:d7:8f:5d:aa:80:5d:9e:f1:3f:bc:be:d0:1c:ed:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 04:41:33 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=87c3c06b6f7bfab04eb9281346e15f9eaab2ffe0b066ab86ade0bfa0d91d1706, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9e:23:01:2d:fc:6a:71:ff:47:cd:d9:57:ab:
                    c0:16:26:c1:bc:7d:bc:5b:db:69:ff:b6:8f:61:3a:
                    18:3c:2a:ad:40:0b:99:5e:cf:bd:e6:48:bf:47:3f:
                    8a:5f:c3:7d:df:71:44:ce:df:ec:c3:a4:9a:14:14:
                    c8:53:3f:70:a4:4e:3f:1b:7b:76:c5:8f:f8:7c:23:
                    9a:36:e0:d3:ef:bc:99:19:fc:da:9b:a7:2a:25:38:
                    27:8d:0b:10:1f:9b:8b:84:2e:bb:c8:c1:3f:cf:58:
                    33:3e:70:fc:61:40:9e:c6:12:49:99:b4:f6:4e:e8:
                    c3:45:4d:09:15:e4:3a:b6:3a:4d:e0:25:b7:57:41:
                    3e:07:b1:66:48:81:3f:7b:80:9d:93:c7:7f:c5:21:
                    a0:c0:06:d3:c9:ce:e4:a6:71:f6:2b:9f:9b:3d:74:
                    be:09:aa:b7:40:f5:73:7a:bc:c4:27:f3:27:55:a2:
                    a4:f8:0f:c9:5f:83:3c:54:d0:d9:7d:d0:fb:42:ad:
                    35:ec:d3:09:07:f1:02:d7:e8:ca:b7:75:e1:33:80:
                    b7:50:f5:d0:66:e4:1d:90:42:91:d9:de:4a:98:9b:
                    89:54:cb:cc:a8:53:62:9f:2f:c8:a6:0b:9a:a7:20:
                    90:72:30:da:da:35:b6:ff:3e:91:f3:70:8c:59:3d:
                    67:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:EF:76:57:DD:A4:23:6E:E5:4E:BA:23:5C:3D:72:24:F8:84:5B:87
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7f8ef53-70ea-4b4d-bba9-5067cfc4791b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.8.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         cd:12:0c:3b:c7:23:5e:3c:72:26:e6:7d:2a:db:9d:06:16:c2:
         9e:e5:f5:d0:28:96:7d:b9:44:1d:d5:5b:80:97:91:40:83:0d:
         6f:83:da:62:92:5d:99:f1:76:1a:77:42:50:c3:7d:42:2e:fd:
         41:6c:36:6e:44:aa:4d:4c:f4:36:38:aa:cb:c7:96:c9:70:f9:
         e3:92:3e:5d:61:3a:4a:63:d1:f6:cf:dd:c4:51:2a:a9:01:72:
         0a:0a:11:4f:51:9b:45:30:75:5e:58:3b:27:ef:43:0e:df:69:
         6a:43:64:ca:36:cb:41:96:f9:07:84:73:00:22:e6:c0:85:dc:
         6c:08:2f:85:a0:a6:e7:2a:27:84:5e:13:d1:f3:04:46:97:cd:
         f8:76:62:f4:86:36:28:7e:96:96:3e:bb:75:e3:42:2d:c5:a2:
         73:71:43:4e:99:1b:7a:3c:74:12:45:88:c8:76:0f:6d:ce:74:
         5e:5b:0c:aa:3f:22:57:04:1d:a8:2f:21:59:58:2f:bb:d6:d2:
         8a:e5:9d:29:f9:32:14:df:da:47:fe:57:af:51:f2:a9:3f:25:
         da:36:90:43:03:fc:94:93:4a:d6:39:1a:42:c0:ca:2f:fb:38:
         82:5e:dc:eb:0b:ec:bc:46:a2:d3:8a:62:47:82:af:7b:0f:32:
         a6:e0:6f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----