Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98d88ba5-4974-477a-aab7-643f31122ab0.roa
File:                     98d88ba5-4974-477a-aab7-643f31122ab0.roa (raw, json)
Hash identifier:          9ak9JudGdhdqOfz4W1Iy3IrAZ7ugSW1CVr/5j8ZQmqg=
Subject key identifier:   62:65:AA:40:89:91:F8:F7:A9:54:F2:FD:BC:FE:C8:93:A5:9F:E8:38
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7C213B0FA285CB182B967BEF1950509EE51DD044
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98d88ba5-4974-477a-aab7-643f31122ab0.roa
Signing time:             Fri 03 Oct 2025 00:39:25 +0000
ROA not before:           Fri 03 Oct 2025 00:39:25 +0000
ROA not after:            Fri 07 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        65.176.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:21:3b:0f:a2:85:cb:18:2b:96:7b:ef:19:50:50:9e:e5:1d:d0:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  3 00:39:25 2025 GMT
            Not After : Nov  7 23:59:59 2025 GMT
        Subject: serialNumber=f25b8e72ec2a33fa07e62584b8afdef5c1ab23e4199b82855a3afa0501bb30ac, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:29:fb:cc:b6:c5:0b:ad:49:21:aa:b7:66:a0:
                    ed:f9:ee:a2:43:66:88:b1:3b:12:03:39:ab:3a:f8:
                    9e:d6:a0:54:3e:43:6c:a2:94:83:72:43:a5:66:fd:
                    e4:42:7d:01:aa:25:c7:2b:b2:af:48:fd:ab:48:d6:
                    cf:c4:ed:c2:dd:88:13:05:fd:06:68:81:66:de:99:
                    1f:29:3e:18:36:f1:ce:e3:81:3e:d7:c0:9f:08:d1:
                    5b:dc:39:b7:51:43:1c:24:a5:04:2c:67:76:00:1d:
                    cf:5f:77:68:01:73:cb:22:db:12:33:d8:1a:90:ff:
                    ab:1c:07:63:39:91:cc:27:a1:33:1b:cc:13:44:6f:
                    32:88:0e:02:66:39:54:98:d5:ec:f1:63:83:53:94:
                    62:93:47:82:ec:f8:3d:89:57:6e:63:36:98:c2:9c:
                    ae:4d:b8:af:32:2d:93:21:66:70:8d:9a:29:0f:3f:
                    0f:b4:45:4f:29:f9:db:d1:92:f0:f3:88:9d:da:75:
                    88:09:60:3b:bb:61:01:d9:a1:d4:4b:22:40:ad:81:
                    cb:a0:e2:18:49:7d:8a:77:4e:2f:ed:b5:2d:b2:21:
                    4e:f3:81:64:2c:7d:38:98:34:7a:ab:a2:52:bc:10:
                    ba:92:95:a9:c8:19:fb:30:2b:e1:55:87:d5:c6:68:
                    7d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:65:AA:40:89:91:F8:F7:A9:54:F2:FD:BC:FE:C8:93:A5:9F:E8:38
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98d88ba5-4974-477a-aab7-643f31122ab0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.176.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         96:a6:94:48:d3:20:79:3c:85:3f:8c:5d:4c:66:9a:b4:38:56:
         cc:b1:71:eb:6c:3c:b7:4e:6c:22:2e:4b:41:27:55:40:cf:57:
         15:ab:25:2a:ac:bc:84:4e:f2:9c:a1:d6:6e:7d:e0:06:9f:92:
         44:a7:a8:09:a3:7a:e2:39:9e:f9:f0:0f:3d:bb:06:d4:1e:01:
         3f:3b:0f:12:10:ed:32:b9:27:2c:ae:f4:b6:bb:e2:14:42:e2:
         bd:40:d8:d2:6a:71:52:df:45:cd:36:fc:da:77:86:7f:bd:85:
         16:40:96:fa:ba:b3:c4:97:a9:7e:73:2a:45:07:7b:04:79:bd:
         22:30:cf:10:c4:23:28:ed:f6:0f:58:bd:f7:05:c0:6f:80:e7:
         ae:f4:ee:96:74:28:31:a2:22:84:89:16:e9:8a:d4:51:bd:f1:
         e6:03:52:05:80:33:08:b8:cb:56:48:f0:65:13:fd:05:e3:e2:
         aa:d1:5f:87:97:76:dc:4f:e2:8e:a1:51:55:b2:2e:54:9d:25:
         ab:e8:02:7b:f8:92:b7:70:56:2c:df:c6:10:cf:a7:a6:8f:b4:
         db:7d:cb:15:a1:82:10:7f:f1:02:af:9b:62:7f:01:f1:25:96:
         47:d6:d1:39:d8:f4:ae:eb:10:bb:b2:5e:ce:b8:2f:98:cd:50:
         e7:f5:53:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----