Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83165766-7e0f-46aa-bc2a-013252fb2527.roa
File:                     83165766-7e0f-46aa-bc2a-013252fb2527.roa (raw, json)
Hash identifier:          KGDYpGEvmuHOWBqB8vQ97k0+/0+pHbXJjkoJ22UipVc=
Subject key identifier:   B7:2B:C8:0F:48:DF:92:FC:25:46:60:D3:96:3A:55:A6:3F:31:6C:2C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1770A3A51A6F64DDC7E8D1F869A0DFB9ECF06F08
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83165766-7e0f-46aa-bc2a-013252fb2527.roa
Signing time:             Sat 18 Oct 2025 05:21:23 +0000
ROA not before:           Sat 18 Oct 2025 05:21:23 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.57.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:70:a3:a5:1a:6f:64:dd:c7:e8:d1:f8:69:a0:df:b9:ec:f0:6f:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 05:21:23 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=7af62655f05f0c381da242fbb7c532b3df0549faba6c2985ade27150202e51c9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8b:64:b3:ce:e4:e6:ec:95:90:ae:f3:ee:1d:
                    99:3a:24:8f:a5:49:8a:24:11:9b:81:bb:ee:c2:a8:
                    3c:27:98:2e:4b:c8:09:8b:3e:2a:1c:c3:df:15:f9:
                    7d:36:51:e6:31:57:90:0b:be:31:31:e4:46:b3:20:
                    4a:fa:38:5f:b4:bf:10:5c:9b:e8:2a:b6:6a:e5:13:
                    e2:59:d1:bd:6a:b9:00:df:32:b7:03:b0:a6:4c:cc:
                    72:71:f8:8f:ba:2c:48:d6:a3:48:eb:83:be:0e:96:
                    04:38:9a:5b:5d:76:da:c8:f9:6a:99:c8:39:06:12:
                    ea:54:e4:78:e1:81:9e:8b:13:5b:37:f4:7d:dc:00:
                    15:8c:c9:41:63:64:51:2a:09:23:21:45:5a:50:f0:
                    b6:5f:14:27:64:9f:2b:2b:a5:34:d9:c9:e3:14:ca:
                    c9:3d:c2:6e:7d:78:0c:65:11:fc:9c:25:20:2d:a2:
                    9d:e1:ad:97:15:de:06:c7:e5:79:a3:e8:ac:8e:9a:
                    01:59:71:0c:d5:89:36:68:c2:25:fa:9e:c5:ab:06:
                    ab:12:d7:d6:fa:73:97:27:89:c9:fd:c0:7b:86:18:
                    8e:c7:17:e6:0d:93:43:4c:69:84:b4:5c:80:df:83:
                    af:f8:50:81:15:a2:64:95:8e:75:37:7c:b0:12:6b:
                    d3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2B:C8:0F:48:DF:92:FC:25:46:60:D3:96:3A:55:A6:3F:31:6C:2C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83165766-7e0f-46aa-bc2a-013252fb2527.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:13:d1:f9:a4:59:dc:64:bf:53:97:3e:85:68:3e:1a:3d:37:
         e5:f5:f8:36:0c:ac:ef:81:4f:fb:6d:eb:8e:91:f9:b2:8c:1c:
         03:be:2b:67:e3:1a:64:48:96:04:4f:f0:46:fa:85:9f:f3:c2:
         27:93:69:61:62:bd:7f:60:61:2d:c3:5d:a5:52:4b:3b:47:7b:
         aa:28:68:33:f6:c9:cc:5a:7b:de:e0:c1:04:b0:fa:06:6a:90:
         1f:d1:51:ee:3d:e2:94:a6:43:16:b0:ac:13:d7:30:df:ef:5d:
         23:5d:b5:d0:34:29:5e:cf:61:4f:3e:6e:aa:b6:90:52:26:2e:
         dd:a0:ed:01:3f:45:e5:12:ed:b9:a5:3c:0a:45:23:45:0c:2e:
         cc:5e:83:97:61:16:12:52:47:ce:19:ca:c8:26:a0:61:57:21:
         4b:84:2b:a7:ec:2a:ed:e4:b6:20:92:d0:24:8d:2b:dc:ad:d8:
         04:33:9f:39:e7:47:af:4f:71:ab:4a:09:47:fc:4b:d4:42:15:
         c0:e1:14:44:a1:44:94:ba:90:28:67:c9:60:ea:cb:84:44:0d:
         c1:16:cc:33:9e:b3:6c:69:42:40:dd:05:e9:6e:c5:db:97:21:
         1b:65:fe:f8:9d:5a:3f:8a:32:3d:37:38:39:87:14:56:82:be:
         12:3e:ea:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----