Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0dad2532-6857-41ee-911e-bd20f0a17ed4.roa
File:                     0dad2532-6857-41ee-911e-bd20f0a17ed4.roa (raw, json)
Hash identifier:          x3UXjsq5m17dn8q8l04jy3LQJguA3xmY8LqnMFwfPKE=
Subject key identifier:   4D:4B:B9:3B:D4:7C:79:F2:6C:59:31:6B:02:41:CF:73:AB:F6:49:26
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6F7416AB4AA6836266256F09F52BB3BB4964F5E5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0dad2532-6857-41ee-911e-bd20f0a17ed4.roa
Signing time:             Sat 18 Oct 2025 02:50:53 +0000
ROA not before:           Sat 18 Oct 2025 02:50:53 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.8.152.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:74:16:ab:4a:a6:83:62:66:25:6f:09:f5:2b:b3:bb:49:64:f5:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 02:50:53 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=671e6fbf66605d89a2d350eb2fc36d1978795f3428563210f88e22d0ab3c5d1d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3c:9f:8f:21:74:03:dd:48:45:2f:af:bc:ef:
                    93:2b:42:84:29:33:e0:aa:75:ac:14:ad:5f:df:b7:
                    00:42:81:97:9e:92:a7:78:bb:a9:7e:f2:98:e0:50:
                    a3:13:05:c2:0e:95:47:74:d3:6d:d8:89:1f:88:eb:
                    53:c7:6c:8f:63:10:93:b6:8c:74:29:fe:df:f1:74:
                    df:31:51:b6:fe:64:b0:68:07:8e:0f:a8:7c:7b:7f:
                    3a:28:19:a4:b0:7b:83:72:48:94:1c:fe:c5:86:79:
                    5d:6c:80:c8:56:af:c8:30:88:28:7e:e5:41:81:ac:
                    02:84:0b:aa:ce:13:74:48:e4:ea:5a:64:ef:16:32:
                    d0:26:1a:65:34:3b:2f:30:b7:5e:68:c6:90:18:a6:
                    f6:ba:fa:9d:79:49:25:48:8e:d3:df:50:e7:99:50:
                    53:83:95:7a:c2:d5:bc:18:cf:aa:4a:2c:60:36:1b:
                    98:f1:cf:3f:b7:c7:b6:19:01:be:96:d1:1a:ef:80:
                    1a:1a:3d:ac:30:07:ee:ad:61:30:67:fe:1c:9a:2b:
                    d2:f3:ff:4c:dd:ac:62:89:75:f4:3c:e5:86:df:22:
                    5b:0c:25:21:8e:be:d0:67:cb:20:ff:ad:62:28:8f:
                    45:87:39:58:09:b5:a3:73:37:fa:5c:8a:dd:64:74:
                    b5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:4B:B9:3B:D4:7C:79:F2:6C:59:31:6B:02:41:CF:73:AB:F6:49:26
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0dad2532-6857-41ee-911e-bd20f0a17ed4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.8.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c4:1c:c5:e7:f7:d1:90:16:58:4b:33:1e:8b:f3:29:95:c3:0f:
         9e:f7:b2:e8:7b:63:47:fd:c2:07:cf:bd:c4:c6:66:98:df:31:
         ff:75:42:e0:cf:3d:5e:6d:8d:80:11:eb:af:37:7e:e6:c3:ac:
         53:32:21:0a:f2:39:ce:eb:32:a8:d1:a5:c3:2a:3e:00:8e:4b:
         70:8b:7a:9b:d3:29:52:07:27:a3:04:e4:96:a3:ee:15:dc:75:
         3b:2f:1d:72:da:73:99:5b:41:80:9c:f6:d9:0d:d4:1c:30:8e:
         21:d1:62:b4:13:de:68:0b:50:2d:5a:50:41:82:2b:99:65:4c:
         99:f8:18:ac:30:9f:77:f9:d7:02:ff:93:e0:39:9f:88:2c:1d:
         b8:cc:95:97:60:cf:2b:82:b2:e1:20:2d:a1:93:5c:6d:83:01:
         9c:2c:c0:d9:27:ce:74:87:dd:39:d1:1a:59:e8:66:b5:4a:31:
         49:2a:7e:0c:d6:18:f1:bd:f8:59:f0:de:6e:f1:bd:60:ae:72:
         bf:62:97:25:37:ac:af:16:36:d9:fc:72:fd:51:17:ff:b4:54:
         30:fd:16:7c:a2:58:88:57:c8:c9:64:87:89:2b:2a:88:ff:68:
         45:6f:61:48:78:a9:87:e7:1f:2b:18:cd:39:6e:77:07:e6:ea:
         2a:68:8d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----