Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1a4ad9a-3a1f-4c57-9fed-11fbb2a6f369.roa
File:                     f1a4ad9a-3a1f-4c57-9fed-11fbb2a6f369.roa (raw, json)
Hash identifier:          I+fE9qAGm+w730iJgXBf5rKXXxN3j+YE6vIY0JoQ/pw=
Subject key identifier:   07:E4:51:12:B6:3D:8E:79:4B:97:49:37:75:9C:5D:38:F6:B9:4B:73
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       672B8173E83806B540C8E697C0D426A92613E546
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1a4ad9a-3a1f-4c57-9fed-11fbb2a6f369.roa
Signing time:             Sat 18 Oct 2025 01:41:22 +0000
ROA not before:           Sat 18 Oct 2025 01:41:22 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.8.250.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:2b:81:73:e8:38:06:b5:40:c8:e6:97:c0:d4:26:a9:26:13:e5:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 01:41:22 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=c43e5197d680ad1c5a2315f34bce40b715b33c8dd65215d25d78780a7ad7b015, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1b:26:36:e0:90:01:ce:61:85:8b:a4:68:29:
                    27:59:3d:c2:77:5f:af:31:7d:58:6b:a0:2e:90:0f:
                    d4:15:b3:be:c8:d4:fb:80:ca:3e:86:4c:ff:c1:07:
                    28:c9:6c:e8:b5:55:18:89:7d:d5:7a:3f:f3:44:22:
                    9c:8d:5a:8e:d6:a2:cf:5b:c1:46:ab:4f:bc:48:e2:
                    eb:32:b1:36:bb:9e:52:4d:71:22:cf:00:8d:91:6d:
                    b2:7d:65:8d:6c:53:30:dc:2f:e6:33:2c:b7:c6:4b:
                    5c:34:d8:e6:67:23:4d:47:8f:a7:e8:75:8e:c5:8b:
                    16:25:c5:c2:e9:2d:eb:65:9c:9a:38:1a:8f:1f:cd:
                    03:25:7d:c7:c3:1d:f3:a8:72:a2:cb:4b:17:cd:82:
                    e7:11:30:a0:69:b0:43:73:1c:14:66:c2:90:36:0e:
                    0c:02:75:f1:5c:c7:ad:33:b1:af:4b:32:38:07:d3:
                    77:29:29:97:20:49:08:59:76:45:32:50:fc:c0:bb:
                    91:7a:9d:02:4f:f0:8e:fd:1d:b9:ff:3b:ea:6a:98:
                    c0:10:60:73:92:da:76:04:06:c2:16:07:ee:23:de:
                    6e:bb:ab:70:f7:1d:49:23:4e:94:dd:f2:d8:4a:d1:
                    00:3b:24:26:02:0a:2e:39:90:68:dc:da:52:62:9b:
                    10:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E4:51:12:B6:3D:8E:79:4B:97:49:37:75:9C:5D:38:F6:B9:4B:73
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1a4ad9a-3a1f-4c57-9fed-11fbb2a6f369.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.8.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:0c:e2:04:e1:46:24:a4:15:ef:02:85:99:69:cd:dd:05:2b:
         22:0a:35:41:2e:74:fb:af:12:b0:00:e7:d7:6b:ef:87:52:0e:
         75:a9:39:a2:44:5b:cf:90:9f:2f:d7:96:53:8a:44:1f:1c:69:
         a3:be:3f:bf:df:b3:d0:bb:87:69:85:aa:88:b5:4b:b8:6c:a5:
         b7:af:3a:c0:87:5d:f7:11:c5:79:33:98:8e:a0:6b:03:45:be:
         62:74:0e:7d:18:df:a9:4e:4f:ad:d3:ce:eb:f3:83:b7:33:be:
         a8:13:4e:31:a7:2c:f7:05:6c:51:92:ca:d0:a4:7e:9a:bf:82:
         67:a5:61:64:0c:36:6b:de:92:a4:e5:d2:d6:38:af:0a:66:d0:
         f9:5a:3f:02:77:6f:9c:82:40:f1:10:ee:25:4a:c8:ff:b5:e7:
         c3:9a:b3:4e:25:de:26:d5:b4:bf:be:69:3b:1e:0e:60:5f:62:
         e4:91:89:b1:a0:10:1b:4c:8d:16:b0:d6:4d:66:08:cc:d2:48:
         81:fa:89:05:ca:50:06:65:24:56:60:ea:53:ee:c0:69:2a:93:
         22:b6:62:85:df:80:0f:af:60:f5:70:46:c8:f0:56:91:1e:11:
         8c:ee:2d:bd:81:31:57:0e:19:a6:5f:5b:75:cb:2d:2b:9b:4e:
         b6:81:3e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----