Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1dc2493-5518-442a-bf3e-047849db6d66.roa
File:                     c1dc2493-5518-442a-bf3e-047849db6d66.roa (raw, json)
Hash identifier:          dq5wld9Py5j6UZIUCo6KLJeYA0rmswe18cV5PD2ErO8=
Subject key identifier:   D2:EA:83:73:4A:F1:24:6A:2C:41:99:C7:FA:83:1E:EF:CB:DF:9C:B9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       707F27B01A88AB1A6DBB612B7CA7E1A5D1852C8F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1dc2493-5518-442a-bf3e-047849db6d66.roa
Signing time:             Sat 18 Oct 2025 00:21:48 +0000
ROA not before:           Sat 18 Oct 2025 00:21:48 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.153.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:7f:27:b0:1a:88:ab:1a:6d:bb:61:2b:7c:a7:e1:a5:d1:85:2c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 00:21:48 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=50b25bd51ea5a872bcef292dc12b2c9b594f37553e7cc2fb88e266163dec7878, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:41:df:19:0e:9a:a0:1b:18:d0:10:e2:18:f7:
                    de:9c:90:e2:d2:71:82:b2:2b:db:3b:10:9c:03:c9:
                    95:2b:d4:fc:93:46:3c:dd:21:8f:e8:c7:6b:98:c7:
                    27:06:da:f6:75:65:26:a5:c9:df:cf:91:b4:df:6e:
                    3f:ff:a4:3d:12:0d:e2:d8:7e:01:ff:95:57:a8:82:
                    48:19:43:68:74:c6:5c:5b:70:2f:e2:dd:c3:e9:3b:
                    9e:2d:ae:2b:a3:cd:2d:da:6c:69:67:9c:1b:48:47:
                    44:53:12:35:11:fc:bc:04:a6:e8:36:0b:d0:24:f0:
                    90:72:03:ba:fd:73:27:69:97:bd:10:0b:39:31:33:
                    ab:03:bf:ad:8f:b7:d9:32:f6:95:6d:4f:c9:eb:83:
                    9b:23:6e:84:7e:eb:b8:84:65:d8:b1:ce:32:d3:d4:
                    29:d2:66:15:24:22:7c:e4:e2:48:64:5f:1b:62:1a:
                    93:b4:39:27:b5:b3:44:95:7c:98:e7:be:c3:ea:2a:
                    cb:f2:3e:b4:1a:c9:4c:14:df:be:16:bc:4f:da:8d:
                    ae:a8:47:f7:34:fa:01:d9:bf:15:b1:f3:a8:13:45:
                    6c:8a:c2:1a:a1:b9:f6:62:8d:24:70:77:b9:40:81:
                    92:75:e6:1d:20:5f:99:0e:e8:0c:64:91:0c:5f:c1:
                    a6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:EA:83:73:4A:F1:24:6A:2C:41:99:C7:FA:83:1E:EF:CB:DF:9C:B9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1dc2493-5518-442a-bf3e-047849db6d66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:be:e3:68:3c:13:ff:bd:c2:0a:5d:a3:56:92:51:cf:aa:9b:
         73:4f:12:f4:09:1a:5a:0e:ce:2e:8b:b8:d4:91:7c:a2:71:c7:
         d0:25:d5:bd:d7:0b:a7:90:61:ca:66:4e:c8:e3:6b:f9:85:94:
         49:37:f5:0c:9b:97:c8:7f:4b:43:b2:da:27:19:6a:bb:18:68:
         e4:8c:ab:fd:85:0a:cd:fa:59:3b:a3:80:02:cc:81:e9:1e:24:
         79:70:b6:03:aa:fa:01:18:0d:b3:db:ad:41:81:57:59:2a:24:
         3e:c4:71:07:17:aa:18:1b:d3:54:cb:5d:00:e2:5c:0c:4c:9e:
         7c:db:81:71:6b:d1:41:0e:3a:a8:fb:b9:ce:1e:11:60:db:f8:
         2f:50:a3:8d:e4:78:db:a2:99:c4:e1:d1:6b:2c:da:42:80:b8:
         c0:6e:b0:f2:1d:de:34:95:be:53:66:5e:c7:5d:90:95:72:c0:
         e2:6e:02:7e:07:20:f6:50:1a:2a:92:4c:a3:8a:91:a3:38:34:
         b8:16:3a:84:3c:92:85:b7:da:70:92:44:f1:04:e1:e9:5d:8a:
         f1:da:13:5f:a3:00:15:05:6f:b6:f2:8b:5f:91:6a:53:c4:67:
         83:28:bc:e3:19:6c:8c:a1:89:f6:00:15:96:59:ab:4a:d5:dc:
         3b:d2:ca:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----