Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/979075fe-5e31-4991-89a6-32d53a57687d.roa
File:                     979075fe-5e31-4991-89a6-32d53a57687d.roa (raw, json)
Hash identifier:          6E7vi4uCpiZHUVQaQM6KFIeN//fuTl/LIDs9lZpgu3U=
Subject key identifier:   06:D1:8F:19:D7:C2:3E:0B:C6:7D:50:95:3B:8C:3D:8C:E0:34:EE:D0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3BF85D5CAC62A44E4FE797F5D9E78616213CD6C0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/979075fe-5e31-4991-89a6-32d53a57687d.roa
Signing time:             Fri 24 Oct 2025 11:25:15 +0000
ROA not before:           Fri 24 Oct 2025 11:25:15 +0000
ROA not after:            Fri 28 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.128.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f8:5d:5c:ac:62:a4:4e:4f:e7:97:f5:d9:e7:86:16:21:3c:d6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 24 11:25:15 2025 GMT
            Not After : Nov 28 23:59:59 2025 GMT
        Subject: serialNumber=77a67c8a561c59c222f2c535f5bfbe8992eaad13ab497d75e98b309a2a55d89b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:60:94:ba:b9:0a:f3:64:6d:bf:82:80:d1:dc:
                    b0:29:8d:03:39:9a:ae:4b:1d:2c:9c:f7:63:83:17:
                    00:87:2b:20:79:e3:08:45:6c:5b:c9:e6:b8:66:91:
                    1c:54:8e:64:7a:48:55:87:79:20:3e:a6:77:e1:87:
                    5f:6b:87:0f:6a:25:e6:a6:1e:a1:c1:27:11:32:85:
                    0a:63:42:05:55:5b:51:8b:ff:57:eb:8e:b3:15:3f:
                    51:16:c0:91:6c:f7:b0:c1:0e:c5:e8:68:a5:c7:53:
                    60:2c:1e:c0:f1:de:76:ca:b7:49:fe:36:b5:81:73:
                    53:8f:c4:08:9a:97:d3:69:69:46:05:0a:ef:d4:0b:
                    a3:6c:e8:f6:22:96:ab:1d:70:4f:29:ed:d5:40:37:
                    fb:79:11:45:57:5c:33:2d:b3:c7:7b:fa:ef:6a:24:
                    d2:e7:1e:30:7e:92:00:10:c1:25:dd:81:02:be:64:
                    fc:30:4f:c6:23:a3:00:2c:c6:1a:11:05:4c:61:68:
                    6b:87:9b:94:9f:b7:1c:d6:e4:5f:9a:e4:74:10:37:
                    d3:c9:1b:03:7b:17:5e:91:75:9c:d0:56:06:d4:69:
                    e5:ba:82:5d:88:dc:c9:22:3a:6e:bd:c4:e9:5d:a1:
                    28:3a:36:78:8e:2e:27:a5:5a:d4:74:fe:37:86:5d:
                    c6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D1:8F:19:D7:C2:3E:0B:C6:7D:50:95:3B:8C:3D:8C:E0:34:EE:D0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/979075fe-5e31-4991-89a6-32d53a57687d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d0:3e:2a:47:75:42:87:74:66:b5:c1:9d:e0:b3:cf:a2:f6:88:
         76:b4:e7:f8:78:2e:d2:f6:16:92:bc:09:e9:9c:14:75:42:e2:
         ec:7c:33:81:30:20:9b:5c:e1:58:56:a5:cf:a5:b4:2c:8b:29:
         c2:ba:8a:41:6a:c3:f4:ad:b2:3b:23:3b:5c:33:8d:33:d4:7d:
         21:cd:59:b6:ab:58:98:b8:a5:db:0d:c8:8d:bc:a7:d5:28:cc:
         e3:76:34:c1:88:db:df:ec:2d:33:59:98:e4:a7:ad:47:8c:55:
         82:bc:33:51:8c:0a:8a:a7:cb:dd:c2:63:2c:7c:ec:cd:90:9e:
         2b:c7:42:6c:21:5b:67:6c:67:0a:68:b7:75:12:80:02:18:7c:
         d4:69:6a:5e:59:2b:38:c4:59:8e:34:24:5d:66:6d:fb:92:08:
         35:81:df:94:31:39:74:05:67:a6:b0:f1:41:c9:a7:ff:0e:f0:
         bd:34:d5:7c:4f:c0:3f:57:b7:66:0a:08:f2:95:8b:2b:91:95:
         bf:13:9a:2e:24:eb:76:06:fc:d4:e3:96:be:e6:94:bf:a1:d5:
         7b:e8:69:e8:26:7a:76:3c:f1:93:fd:a9:06:1b:a8:3a:22:88:
         e1:22:ce:d6:be:86:73:33:d2:65:7a:9e:d5:27:d7:92:9b:dc:
         5d:86:ae:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----