Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b93e7713-9818-446d-bb13-e1be67b24b46.roa
File:                     b93e7713-9818-446d-bb13-e1be67b24b46.roa (raw, json)
Hash identifier:          eXIT0+s3ZUwP7yaA9qBiqrQaulAOERX9ik2xLdCrpFY=
Subject key identifier:   AD:6A:AD:19:B5:97:23:F5:B4:62:56:89:2C:B5:6F:F4:79:A7:6A:D0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3BEFF32968BEC68C284A38CAF9972E92D6EF7EB8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b93e7713-9818-446d-bb13-e1be67b24b46.roa
Signing time:             Sat 18 Oct 2025 04:30:15 +0000
ROA not before:           Sat 18 Oct 2025 04:30:15 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.8.252.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ef:f3:29:68:be:c6:8c:28:4a:38:ca:f9:97:2e:92:d6:ef:7e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 04:30:15 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=c3fd89aaa7246968aff02b018f7a2f47a2088dbd09aed6387274c7663683691b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b9:3c:44:fb:8b:da:b0:9f:40:e2:7f:85:ef:
                    f1:e4:74:96:9c:9a:09:97:47:46:07:59:27:d7:c4:
                    47:a1:fa:fa:63:59:ff:f6:1f:e0:5a:53:65:c1:44:
                    54:68:fb:48:12:ce:47:cc:98:9c:35:48:0e:09:fc:
                    21:8b:96:6d:82:99:fa:87:55:0f:da:2b:d5:af:49:
                    4a:6d:82:34:77:b7:ee:91:f9:f7:3c:0c:b0:03:9e:
                    f5:7d:cf:58:90:bd:36:9b:ae:4b:ad:4d:e3:01:23:
                    21:4d:64:ba:0a:d1:8c:10:4a:b1:e3:54:b7:e8:dc:
                    fd:95:64:cb:cb:13:d9:d3:4b:19:5c:85:96:ae:65:
                    48:51:6a:d3:a2:a2:7d:16:83:c3:ed:2c:78:60:34:
                    15:57:da:84:a1:3e:ed:7d:f5:c5:dd:24:05:8a:5c:
                    0a:0e:fb:0b:78:ec:52:9e:83:7a:d1:67:44:dc:97:
                    d1:34:e7:42:30:76:ae:7d:48:13:c2:93:ae:3b:95:
                    07:5d:86:36:64:1f:77:b6:d6:46:2e:b0:94:9a:83:
                    70:86:ce:bf:ca:ca:83:ed:08:94:48:1a:ad:e3:43:
                    6e:95:c3:36:6a:e6:fd:22:ef:ba:6d:fc:1f:b5:f7:
                    98:e4:df:9d:ea:16:bd:ad:bb:23:29:11:87:5e:29:
                    9c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6A:AD:19:B5:97:23:F5:B4:62:56:89:2C:B5:6F:F4:79:A7:6A:D0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b93e7713-9818-446d-bb13-e1be67b24b46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.8.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:8c:79:53:ad:1f:8d:14:a3:68:0d:e9:dc:39:35:2d:0a:f3:
         5c:5d:96:63:3a:87:0f:f4:a9:4d:f5:90:45:ea:74:46:5b:ab:
         48:1d:77:e3:0c:62:4d:ae:c7:98:e2:ab:d8:3c:28:91:66:1d:
         2d:7c:de:f4:f6:e3:4c:75:56:fe:83:5d:80:20:e5:a3:6f:de:
         d8:e5:86:c1:7b:a1:66:69:0b:24:b3:b6:86:16:44:63:2b:c8:
         f3:36:b7:80:4e:83:2d:bd:0f:05:24:34:78:b3:e9:81:bc:7c:
         1f:ec:82:9f:76:ba:8a:ed:84:20:f5:df:5c:be:62:62:42:aa:
         36:05:1b:5b:1f:cc:4a:67:fa:8c:75:b8:8a:2d:46:44:04:35:
         de:46:c9:7c:69:9a:6b:03:6d:74:1d:1b:a1:5a:c4:07:c7:7a:
         ef:04:7e:5d:ce:5f:e8:e3:43:1e:ce:73:a7:b3:60:44:4e:8e:
         bb:6e:bf:3c:1b:27:59:9d:fe:3c:a8:dc:61:b4:f0:be:42:7e:
         d7:89:41:84:8d:4e:af:80:b9:ae:55:f8:e7:6a:62:d2:df:94:
         b3:69:7c:40:ef:4f:c9:13:e2:41:20:c5:a3:59:6b:09:9a:a1:
         7d:75:60:dd:65:8b:5e:86:b8:f3:cc:7f:74:1a:18:c7:cf:7e:
         48:32:84:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----