Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1f93cd0-cb26-445b-8116-102635c56144.roa
File:                     d1f93cd0-cb26-445b-8116-102635c56144.roa (raw, json)
Hash identifier:          upBfnD1lAcVCPoNrS7UApLjEhdTisfkp4bpx9/3RLjY=
Subject key identifier:   AE:52:F0:62:37:09:6C:13:6D:87:BF:4E:AE:0F:CE:0D:57:9E:C1:82
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       17D9745EF9A19900C7CB47E4C33EA8826B4A0AB1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1f93cd0-cb26-445b-8116-102635c56144.roa
Signing time:             Sat 18 Oct 2025 00:10:13 +0000
ROA not before:           Sat 18 Oct 2025 00:10:13 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.46.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d9:74:5e:f9:a1:99:00:c7:cb:47:e4:c3:3e:a8:82:6b:4a:0a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 00:10:13 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=907ca284bcec513eee4cfc10874655818f5588ef211b0b65f7bb3a92f087f0a5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e3:3c:d8:27:05:5c:5f:39:92:f4:f3:3e:c6:
                    93:e8:ad:88:40:94:c9:d0:f1:ed:08:d0:63:ef:47:
                    ad:07:e1:2e:03:52:71:de:5f:4f:fe:20:c0:e2:77:
                    44:b1:39:01:f6:bc:09:5c:a0:9e:40:15:80:e1:11:
                    69:66:13:cc:6b:1b:b5:87:b6:2a:a9:bd:ec:4b:07:
                    54:6c:ca:93:c5:26:d4:8f:5d:c1:67:f0:5e:66:75:
                    3f:c7:5a:cc:c3:13:a8:d5:fa:c7:9e:84:8f:2c:b3:
                    f4:22:3e:bd:10:29:6d:28:82:c8:28:ae:e4:f8:82:
                    70:f6:48:68:e0:24:cd:6d:b5:e4:3c:f4:b6:6c:a0:
                    a8:05:86:57:e6:9d:9b:c5:a6:63:38:cf:cb:7f:8f:
                    5e:0a:f3:94:a7:42:75:ae:e0:91:57:83:2b:73:d3:
                    6e:94:d7:61:44:2d:8c:dd:f0:8d:af:30:1b:84:29:
                    99:b8:a3:9f:a9:18:41:d9:2b:18:31:15:44:99:9d:
                    bd:12:ad:3d:28:92:0d:99:9f:4d:a0:bc:ce:63:53:
                    59:1f:79:33:0e:a5:49:c6:26:2a:47:d3:57:c2:bb:
                    6c:43:4c:16:b2:0d:53:10:c5:3d:9d:4b:7b:02:d2:
                    3b:ed:11:fe:eb:c8:11:aa:a2:b0:d3:ac:52:0c:4a:
                    07:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:52:F0:62:37:09:6C:13:6D:87:BF:4E:AE:0F:CE:0D:57:9E:C1:82
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1f93cd0-cb26-445b-8116-102635c56144.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:16:03:b1:85:47:9d:01:a3:31:9a:e3:19:f1:f8:5a:50:8b:
         c3:76:3d:7b:e0:ec:74:a8:d2:69:db:59:fc:63:45:16:ec:8d:
         a2:12:56:cf:7c:b9:57:c5:bf:1e:62:d6:d6:90:07:b5:5b:f2:
         07:58:12:df:ce:53:5e:cd:4a:80:f4:61:d9:df:3b:e4:a4:a3:
         f1:6d:99:22:8c:46:53:8d:dd:d8:59:f5:3c:cf:74:e6:02:ca:
         dd:a3:40:be:70:dc:b1:5b:71:1f:53:89:5f:0f:a2:16:5d:16:
         fc:57:02:9b:7b:0a:7d:55:78:70:35:39:52:bc:38:ba:ae:33:
         72:ec:7a:68:c6:2b:2f:0a:2d:00:bb:75:bf:4f:ec:72:ab:6c:
         39:12:5d:4f:b5:f7:86:6a:df:12:f9:87:37:81:00:b9:4a:89:
         c2:dd:6f:09:47:85:ae:61:0a:37:5b:70:a7:6a:b8:5a:1f:e3:
         c9:8f:2b:d0:27:d4:60:94:cb:d4:a5:fe:cf:5d:6a:e3:8e:06:
         b3:86:c6:21:bc:25:46:8d:30:3a:00:d3:78:fb:01:d8:04:3c:
         96:cc:94:55:ed:40:22:76:ea:04:82:95:ac:ca:3e:7a:ec:f1:
         b8:54:1e:e9:cf:ac:01:d6:b0:7a:ff:bb:2b:76:2a:60:61:a3:
         35:0c:da:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----