Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70090ad0-cb21-4f27-97e1-9067e0d8d04b.roa
File:                     70090ad0-cb21-4f27-97e1-9067e0d8d04b.roa (raw, json)
Hash identifier:          pmXJxXOw0c8mkml/z4pNtlVSfSDC13c2C/IOLgpgUPo=
Subject key identifier:   53:52:6B:EA:08:43:B7:CE:9E:B2:ED:92:21:FF:01:A5:49:06:33:69
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1B6EB48828626CE62941123FBD9DE584476F2A36
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70090ad0-cb21-4f27-97e1-9067e0d8d04b.roa
Signing time:             Sat 18 Oct 2025 02:40:09 +0000
ROA not before:           Sat 18 Oct 2025 02:40:09 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.191.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:6e:b4:88:28:62:6c:e6:29:41:12:3f:bd:9d:e5:84:47:6f:2a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 02:40:09 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=e533f191019a7a2260f10ce7deaae96b7f573518392a4389682e44de89c2d14f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8f:f6:46:e1:fe:5e:f6:43:2e:1d:94:21:a7:
                    e2:9f:d7:d2:01:63:f9:64:c8:3c:ce:8c:4a:83:de:
                    72:c0:b9:54:8b:f2:c6:1b:08:a4:0f:db:e1:91:e3:
                    b6:75:39:a0:f8:e4:87:ad:da:43:02:84:5c:57:1a:
                    97:e6:df:61:cf:10:5a:43:99:19:07:2f:f1:09:9c:
                    d6:93:ef:13:21:79:b3:69:5c:a1:8a:18:ef:59:ad:
                    60:a3:9c:30:a7:1f:5b:d1:0e:94:e4:93:de:e8:8e:
                    1c:0b:ba:5e:04:3f:6a:d4:79:f3:e7:dc:28:b1:a9:
                    6d:72:54:63:20:85:bb:2e:c1:ed:ff:44:e4:30:17:
                    da:cf:df:92:fc:2b:43:30:aa:03:c3:f7:ef:96:b1:
                    4f:ef:2c:0c:38:53:8e:53:80:c2:09:a5:43:1a:13:
                    91:96:23:5d:b1:ea:21:c0:5e:54:e2:70:24:52:6f:
                    d9:9a:7d:5c:c9:a4:e9:5c:ce:c3:d2:87:31:33:56:
                    bc:0f:36:c0:6e:d6:63:8b:40:86:cb:61:33:f3:26:
                    8d:33:30:d8:6d:ab:c7:45:a5:81:70:a2:5a:6b:5c:
                    31:95:86:2f:23:5a:07:ec:a3:0d:b8:cf:7a:51:7f:
                    fb:6e:68:43:32:b8:af:ed:ec:80:2a:eb:bf:7f:f1:
                    03:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:52:6B:EA:08:43:B7:CE:9E:B2:ED:92:21:FF:01:A5:49:06:33:69
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70090ad0-cb21-4f27-97e1-9067e0d8d04b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:28:06:d9:6f:e9:6f:68:2b:45:b3:ba:75:44:4c:6d:ab:f1:
         6d:da:1c:c1:24:e9:d5:90:b9:8e:68:12:e5:06:e1:c2:49:5e:
         11:06:1f:2b:76:f2:9d:05:11:52:57:39:69:20:67:48:7f:21:
         83:22:13:57:5d:df:2a:d9:77:06:34:43:14:5e:54:ea:4b:5d:
         29:34:ba:8c:0f:ff:7d:8d:81:75:17:b8:37:0c:18:75:fc:f6:
         45:cf:cc:ef:5d:59:1a:52:3e:c5:89:0e:c7:c7:fe:33:0d:e9:
         cd:c4:7d:ba:c3:32:a1:fd:08:1e:d3:9f:6a:8d:25:ad:96:5b:
         22:bc:d9:3f:e1:d9:31:bb:d2:71:a5:07:6d:d6:b6:2c:5a:f9:
         41:2f:75:47:a7:c2:da:55:7d:7d:97:54:3d:66:a9:83:3f:df:
         f2:3a:83:6e:23:b9:49:8c:2f:50:c9:32:0f:1f:b1:d2:e8:10:
         8c:ca:a8:06:54:23:87:2f:89:54:65:28:9e:6f:f5:87:32:b9:
         62:3c:37:56:ad:8b:cd:40:b3:1b:8b:36:35:a1:85:e7:6f:0d:
         e7:63:a2:b4:30:66:54:bd:41:80:a6:f5:5b:9f:06:20:66:b6:
         81:fe:69:4a:38:52:a1:0c:9e:58:22:e3:1e:3e:74:cc:6e:07:
         10:79:ed:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----