Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/184fe8e5-ade4-422f-8cfe-238885651489.roa
File:                     184fe8e5-ade4-422f-8cfe-238885651489.roa (raw, json)
Hash identifier:          sAlU13pAL9aX7uoBqHZ1ja9meizZc0oekN3SSxSsJBE=
Subject key identifier:   B7:99:01:DD:AC:18:88:AF:5E:20:50:49:ED:3F:7F:8A:5F:4F:7A:EC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0DB360D08D9439A9E32BE8FF72A2F742BE25DC99
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/184fe8e5-ade4-422f-8cfe-238885651489.roa
Signing time:             Sat 18 Oct 2025 05:20:09 +0000
ROA not before:           Sat 18 Oct 2025 05:20:09 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.56.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b3:60:d0:8d:94:39:a9:e3:2b:e8:ff:72:a2:f7:42:be:25:dc:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 05:20:09 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=36c71cfc21611a0b00b8db9f26e65a9039e01762029766c9d2309b796db6e033, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:88:43:69:72:f8:6f:dc:5e:0e:23:73:8b:e8:
                    3e:82:00:75:5f:ea:1f:42:3e:ed:2c:fa:86:c9:06:
                    be:18:67:cf:ed:b8:5e:9e:c6:b9:e9:a0:4a:56:60:
                    14:ab:57:0f:c6:5c:3d:74:f7:a1:61:80:02:ea:86:
                    1c:df:d5:b5:37:e9:08:04:7b:d7:2e:f5:cf:87:7d:
                    0b:8a:d5:68:64:c6:a7:17:81:06:07:e0:9d:09:34:
                    44:c4:db:78:cf:47:db:04:56:44:8c:72:87:b9:2d:
                    14:86:e4:0c:e3:fb:15:bc:dc:20:a5:d5:b9:5f:75:
                    50:a0:13:26:d9:e7:05:71:78:db:4d:0c:1a:db:df:
                    29:75:59:ea:d8:af:4e:70:cb:c3:16:65:65:4a:c5:
                    6a:d3:48:85:fe:68:d0:ff:f9:7b:25:22:0b:0f:c7:
                    dd:7d:e9:20:c3:55:45:8e:2c:39:ef:b6:44:c4:b0:
                    b7:e1:6b:b7:31:a8:3b:53:cc:32:53:e6:16:50:59:
                    7e:e7:ea:17:34:80:67:70:48:9f:df:23:ce:2b:de:
                    b0:93:4a:31:d0:9b:e6:8b:88:a4:d3:65:84:41:eb:
                    78:e3:f2:26:9a:e5:2f:05:8f:ee:75:c4:fe:d8:b1:
                    5c:5b:bc:48:56:60:63:7f:62:2e:b0:f1:f4:5e:d7:
                    21:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:99:01:DD:AC:18:88:AF:5E:20:50:49:ED:3F:7F:8A:5F:4F:7A:EC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/184fe8e5-ade4-422f-8cfe-238885651489.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         55:eb:40:b9:23:da:0d:4d:d4:0c:86:39:20:13:af:df:13:b0:
         4d:30:f0:70:3c:6d:e2:e4:43:75:7c:58:14:c6:e8:48:c2:8f:
         e6:cb:b7:3e:3a:09:5b:e6:18:f8:72:0b:ad:34:0f:db:d4:fb:
         35:25:45:f3:88:2f:7e:32:cf:6c:e5:dc:c7:cf:a5:2c:ef:09:
         75:3f:4e:50:dd:ba:ad:57:68:d1:c4:3c:01:bb:9c:b1:e0:27:
         68:23:cd:8c:59:6f:32:4e:fe:46:f1:d6:78:49:7d:8d:d0:50:
         55:b6:fd:d5:bc:a3:fc:8e:b0:50:7a:88:49:bb:6c:bb:8e:18:
         47:df:d2:34:ae:ad:72:5f:b9:e5:a1:cc:cc:84:de:8f:0d:1b:
         54:f0:56:2e:6b:8e:da:db:dc:b3:e7:51:76:ce:d3:73:9a:06:
         bd:4f:c4:00:7a:32:bf:f9:a5:06:01:3f:8a:f8:95:e9:8f:ca:
         aa:58:e0:79:4b:21:63:7c:98:10:59:be:33:d3:e2:8f:63:f6:
         4d:57:41:7e:2c:5b:55:83:c5:bf:62:60:62:75:65:38:dc:fd:
         ed:2e:65:f3:0e:fc:86:1a:25:b4:fc:98:e3:b9:b2:17:d6:43:
         33:72:88:8c:14:8c:ac:f8:e8:85:7d:5b:fb:5d:83:82:11:4c:
         a1:04:03:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----