Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4581b7c4-1fa0-4e46-b20f-d472b13cdced.roa
File:                     4581b7c4-1fa0-4e46-b20f-d472b13cdced.roa (raw, json)
Hash identifier:          7ONaebYN9aKx5k1jGCfPKLFScm56j03Ncfj7kgZh+Ow=
Subject key identifier:   C5:4C:AA:55:5B:37:4A:13:E2:09:6D:0E:34:C9:30:B1:A3:D8:F0:6F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7CD78344B8D17CDEB80624BBD1E32DF4C7617E16
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4581b7c4-1fa0-4e46-b20f-d472b13cdced.roa
Signing time:             Sat 18 Oct 2025 02:10:11 +0000
ROA not before:           Sat 18 Oct 2025 02:10:11 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.8.84.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d7:83:44:b8:d1:7c:de:b8:06:24:bb:d1:e3:2d:f4:c7:61:7e:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 02:10:11 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=3966ea1ba0eeb2747c7a70e9dcc10b94ec17ce62447413c106e53af01706ff31, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8e:0a:87:0e:8a:ca:37:93:b3:71:33:f2:28:
                    f2:15:69:45:5c:ec:b1:72:1d:04:49:11:cd:82:de:
                    8c:fc:23:fa:63:3b:ee:8b:4c:c2:2c:1a:f1:a8:f9:
                    83:a2:9b:a5:d5:b9:8e:5c:03:79:66:27:cd:9c:55:
                    6a:b1:d0:13:6f:81:db:39:67:34:5b:0c:9f:2a:31:
                    cf:f7:01:6a:18:c5:a2:79:8d:79:69:a6:83:f5:3f:
                    1e:63:0a:57:f2:ce:c6:7a:3c:eb:37:21:45:4e:54:
                    73:83:1b:e1:ff:84:e9:5b:17:02:40:10:73:8c:75:
                    4d:cb:21:dc:4a:10:48:31:87:0b:29:71:19:02:d1:
                    cf:35:dc:3b:23:53:52:fe:88:16:0b:11:47:04:32:
                    8a:2a:86:7e:5a:ed:5d:5b:c9:5b:3a:9e:50:6c:b6:
                    0c:c9:58:56:0b:5d:2e:1c:0c:14:65:0b:2b:4d:ae:
                    c2:c1:27:33:bb:7c:ff:43:1d:c8:6d:66:2a:a8:71:
                    dd:25:0e:1a:f1:2e:6f:7f:63:90:49:e1:a0:f6:f4:
                    e6:47:54:55:d4:1f:82:e5:ee:a6:4b:4a:04:6e:08:
                    66:6b:cd:f7:26:4e:77:9b:15:f2:57:fb:d8:35:da:
                    de:0a:44:86:21:3d:2b:db:69:88:25:6f:d5:44:a2:
                    0e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:4C:AA:55:5B:37:4A:13:E2:09:6D:0E:34:C9:30:B1:A3:D8:F0:6F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4581b7c4-1fa0-4e46-b20f-d472b13cdced.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.8.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:b5:f3:b9:d5:97:48:d7:c7:a7:26:15:15:57:9d:2a:5b:e7:
         00:b4:19:64:c1:ad:ed:46:7e:a3:15:fd:2c:0f:70:0f:c4:3a:
         02:24:79:92:80:fe:db:bd:92:cc:a6:91:86:50:77:2a:61:f5:
         b3:0c:e0:b3:e7:7b:6e:98:dd:98:42:44:7d:f3:cc:a3:96:96:
         be:f9:a1:f8:fb:22:1b:36:68:16:b8:fe:8d:7e:2b:a5:d4:59:
         dd:63:70:10:38:c3:6c:cf:2e:6a:bb:83:7b:67:04:db:10:25:
         d5:9a:4b:41:42:0b:44:a7:e7:b7:df:d3:37:36:28:33:7d:24:
         40:88:7c:f8:10:a5:3e:7b:36:e1:94:d0:1a:a2:93:98:9d:0a:
         cd:87:f5:bd:7b:f9:b9:7a:15:58:95:45:60:56:72:c6:a5:47:
         9f:a5:16:98:35:9b:16:ce:6b:af:86:1c:b1:b3:93:78:40:61:
         c7:76:2f:b9:65:39:7a:8c:eb:d8:5a:81:40:06:ba:c0:94:9c:
         b2:b1:2b:1a:63:a1:d9:71:55:38:00:9f:85:28:a2:da:9c:38:
         ee:28:ee:0b:6f:a3:73:ad:62:fb:12:26:5c:ac:9d:10:25:9b:
         40:b6:da:04:21:15:8e:94:a5:d3:94:3b:55:a6:28:1c:5b:a6:
         c9:c5:af:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----