Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c062243a-4107-4583-9b72-8262cf105ede.roa
File:                     c062243a-4107-4583-9b72-8262cf105ede.roa (raw, json)
Hash identifier:          Wo1tgLBRrEzwfF/cHBEIUXsrp/qkWEX3cT36c+PQSNM=
Subject key identifier:   7F:47:9D:07:CE:2C:3E:CE:F5:AE:8D:12:43:49:45:ED:4A:5D:5B:9A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       13882B9CB117314754C92B1B196BE277B4A4C94B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c062243a-4107-4583-9b72-8262cf105ede.roa
Signing time:             Sat 18 Oct 2025 02:21:34 +0000
ROA not before:           Sat 18 Oct 2025 02:21:34 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.8.192.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:88:2b:9c:b1:17:31:47:54:c9:2b:1b:19:6b:e2:77:b4:a4:c9:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 02:21:34 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=194f0197abbc9fbf849de626a0be62b8357a7b81a964f7fea1215e849b95baad, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f9:86:83:dd:97:1d:6b:45:52:08:4e:df:39:
                    89:12:b3:9e:f2:aa:7e:64:fb:43:0c:a5:77:28:9c:
                    80:1f:25:1e:4f:25:22:d1:c1:9f:b3:af:52:57:64:
                    5f:ee:62:3f:34:63:ca:2b:30:ea:d6:eb:3f:50:f8:
                    8f:b2:35:0f:88:e1:5d:5e:98:51:3b:8e:dd:49:33:
                    1f:35:20:73:88:fd:ba:00:8d:9a:13:6d:2e:dc:bf:
                    b4:b2:b5:9f:ac:14:87:6e:17:8c:c4:c6:15:d9:33:
                    41:de:24:de:48:ba:51:e5:25:d8:74:91:36:d1:07:
                    0f:3e:8e:4c:81:e7:2d:31:20:bc:7e:37:4f:70:0f:
                    59:b1:70:f2:41:ce:1a:a8:cc:fd:ff:16:c4:f3:a7:
                    fd:76:ff:73:68:cd:90:44:10:5e:3f:97:f3:6c:1a:
                    bc:83:fc:8f:8f:b9:c5:ed:4f:83:6f:eb:69:c9:62:
                    26:8a:4f:3e:6f:21:c9:5d:91:fb:04:4c:83:d5:69:
                    a2:bf:85:f8:db:ff:8f:b3:02:0c:95:17:a6:5d:cf:
                    7c:9f:b8:f1:34:ff:2e:ea:b4:9b:93:3c:f6:ec:7e:
                    80:ca:59:2e:92:43:ed:d8:db:a1:f8:9c:3d:79:d9:
                    58:e1:ec:c4:30:56:7f:37:2a:b6:bf:6b:b0:9a:bf:
                    ef:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:47:9D:07:CE:2C:3E:CE:F5:AE:8D:12:43:49:45:ED:4A:5D:5B:9A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c062243a-4107-4583-9b72-8262cf105ede.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.8.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         80:59:28:6c:8a:d6:97:f5:f9:32:5f:a7:af:3d:d1:bb:07:d5:
         19:03:c8:80:fe:91:90:74:18:1b:ad:29:7b:1a:c1:59:b3:fc:
         9a:39:29:fe:a8:58:b0:57:c3:43:ad:89:63:06:b0:3d:6f:15:
         e0:a4:b7:d4:e3:78:86:35:0b:3a:04:d7:8a:de:e5:89:ed:61:
         8e:39:48:6c:ce:d2:64:c5:83:50:ae:57:cf:4e:b1:59:95:1a:
         c1:4b:6c:30:f4:b7:27:e8:02:07:aa:d2:48:c5:21:fe:e5:6e:
         e0:70:31:5d:b4:94:72:3c:a6:43:66:50:58:9f:0b:40:c4:51:
         d2:93:14:aa:a2:7a:25:3c:d6:97:c4:f0:e5:16:3e:e5:30:7b:
         fc:13:55:43:67:33:72:2c:32:d8:b6:8e:20:78:4f:be:f4:55:
         d4:5c:c3:0d:e0:79:19:0d:fe:27:03:7a:31:fe:90:2f:b6:f8:
         c2:3a:33:39:39:74:25:9c:a9:37:f4:aa:74:c8:cc:bf:72:da:
         76:84:2c:dd:dc:ed:d1:03:e5:b8:53:5b:7f:e7:b0:a4:2f:bc:
         2c:bb:ac:eb:ce:10:93:22:b9:b2:ba:2c:2b:c6:43:d0:1d:fa:
         9c:d9:cc:c2:3c:df:d2:fb:93:9b:d9:cb:1b:65:4b:3c:76:df:
         cd:ab:e5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----