Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54d14e2d-f193-4a62-bdde-ea160b2a6780.roa
File:                     54d14e2d-f193-4a62-bdde-ea160b2a6780.roa (raw, json)
Hash identifier:          5WahKETkaR1/1NNAvGs+lsDDfEQk+c9wMyU0dJMK+es=
Subject key identifier:   7B:26:8C:DE:63:C1:50:D8:6D:65:61:EA:B7:A3:FA:91:5E:6C:69:38
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       55E27770AE170AAB793B519FD0F498549E9C93CA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54d14e2d-f193-4a62-bdde-ea160b2a6780.roa
Signing time:             Sat 18 Oct 2025 04:50:12 +0000
ROA not before:           Sat 18 Oct 2025 04:50:12 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.40.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e2:77:70:ae:17:0a:ab:79:3b:51:9f:d0:f4:98:54:9e:9c:93:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 04:50:12 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=3b735fd8e06c16afd775b84d3ad358d12db0ffcef452ecf257083cc20cadc1b7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8d:56:90:01:40:ca:63:f7:f8:0a:58:7c:43:
                    13:74:f3:ec:ed:ae:dd:fc:de:d9:03:ba:b8:e8:96:
                    71:6f:f5:fe:e2:d2:37:68:fb:f5:3f:69:5a:1b:97:
                    11:be:91:23:df:a4:28:49:cf:f9:8e:e7:cb:3a:6c:
                    8e:63:fd:ab:d3:3c:be:87:45:8d:bb:de:19:d6:a6:
                    0e:00:d9:1c:ce:25:8e:58:a2:36:37:85:9b:1c:f4:
                    8c:33:9a:f7:b1:8c:49:7d:43:9e:29:75:03:c0:d9:
                    e3:b1:dd:65:a4:9f:87:31:44:3f:30:21:bc:66:3b:
                    2c:fc:21:ac:61:f3:df:e2:49:ad:24:36:8e:1d:7e:
                    78:1a:ec:88:cc:69:cc:7e:fe:b9:c5:b2:c9:65:ea:
                    31:47:57:6c:32:33:d6:2c:4e:35:66:ef:0d:05:10:
                    39:b7:38:9a:37:8f:f9:c4:45:e0:27:8a:59:7d:9d:
                    7f:67:c5:f2:62:91:7d:d2:9d:25:8b:4e:32:ba:8f:
                    5f:18:5f:c6:2f:83:b2:c3:e5:8c:e3:a6:9c:ba:04:
                    6e:10:fe:35:ca:de:41:35:60:5c:62:0b:8b:08:7e:
                    68:b3:66:c7:eb:08:8d:b5:a4:ff:57:ef:c5:ac:eb:
                    b5:33:59:a2:8a:fb:9e:73:98:75:df:b5:cd:4c:f6:
                    ff:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:26:8C:DE:63:C1:50:D8:6D:65:61:EA:B7:A3:FA:91:5E:6C:69:38
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54d14e2d-f193-4a62-bdde-ea160b2a6780.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ae:07:0f:da:6a:4a:2b:87:53:dd:de:5f:81:90:71:2b:8e:d4:
         3a:55:41:21:9c:53:47:4e:22:0f:2b:16:ae:2c:0f:a9:e4:7e:
         fd:43:39:b2:b6:0a:67:53:99:54:4f:89:fe:e1:1c:7f:87:6c:
         65:06:85:cd:e9:09:52:9d:fd:f2:e9:37:04:1d:4e:db:1e:1a:
         62:87:d1:09:e6:7c:eb:7d:38:62:e7:5c:ff:ab:8a:8c:ac:71:
         9b:a6:09:67:3f:56:5e:96:dc:63:f5:8e:73:f0:39:4c:56:18:
         f7:5a:18:ad:a0:4b:30:31:06:4f:4d:91:9b:54:50:50:22:59:
         b2:11:40:d0:96:b5:00:05:a5:fe:1b:c1:8e:51:70:7a:b0:78:
         ff:be:72:b7:50:1d:04:c6:63:9c:e8:77:5f:5b:90:83:23:1b:
         6d:0f:78:15:85:ba:bf:dc:71:81:37:00:9f:fb:65:29:66:1b:
         3b:3f:73:bc:e7:3f:bc:04:4f:43:a9:8e:f2:9b:9e:e7:c1:32:
         3f:b6:f0:28:57:2d:d6:99:6c:1d:68:a2:41:b8:5a:e9:74:e0:
         1a:08:e1:6c:92:e8:df:7e:16:24:42:6d:83:f6:31:b9:b8:7b:
         c2:fc:cb:8c:50:d5:65:b8:1d:51:30:5b:3b:89:2d:4f:b1:61:
         f7:e7:36:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----