Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cb0ac6a-ca60-4958-a561-37454c1f561b.roa
File:                     0cb0ac6a-ca60-4958-a561-37454c1f561b.roa (raw, json)
Hash identifier:          9ZUXRrK04fGCyy/Cn165mu4Wk8ywAAFeCoIQIn6Moco=
Subject key identifier:   92:A1:44:28:89:F8:BC:DE:3A:16:22:BD:4E:13:15:F3:18:80:D7:30
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6C959514ABF0BAA1BA3B81601BBA5CE7BC8A6511
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cb0ac6a-ca60-4958-a561-37454c1f561b.roa
Signing time:             Sun 19 Oct 2025 02:01:07 +0000
ROA not before:           Sun 19 Oct 2025 02:01:07 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.193.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:95:95:14:ab:f0:ba:a1:ba:3b:81:60:1b:ba:5c:e7:bc:8a:65:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 02:01:07 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=e76105a2a6db16a99b06790f6e33eccc6a4a87d9dbe8936be3c00a6ccb0b80aa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e2:57:de:57:63:d6:44:60:a6:41:3b:ce:63:
                    60:09:aa:80:7a:0d:c3:df:28:64:d2:2c:0d:68:8a:
                    22:5e:9a:66:ba:76:c3:08:00:da:98:5e:a7:7e:04:
                    eb:96:80:8d:c4:1d:48:e5:9a:c7:5b:3e:e5:a6:62:
                    b4:f9:d0:f1:17:0c:c8:34:d9:7d:5c:74:35:9b:c5:
                    c5:ed:7d:e0:bc:4e:0a:ca:d1:33:37:d1:53:76:2b:
                    b6:16:52:ed:8a:7b:c3:68:c4:7e:66:da:5c:d0:79:
                    a7:3d:db:20:36:1c:64:27:79:10:0c:ba:6b:d4:56:
                    5b:b9:25:37:66:43:e4:4d:fd:65:03:71:a0:e0:41:
                    ea:53:ea:f2:5b:b0:66:33:16:4a:2d:19:45:a9:26:
                    02:10:4a:c1:a4:7f:f7:fc:c9:93:40:16:64:c9:e0:
                    b8:16:05:f5:fb:4e:21:19:35:d1:c3:79:3f:98:30:
                    81:39:34:ee:45:1e:9b:fa:29:21:98:8f:92:d7:4a:
                    75:7b:e1:cc:30:ec:3e:4e:eb:fa:ab:82:b3:9e:65:
                    83:e0:01:25:c7:02:95:4e:d2:17:3c:78:88:6f:c0:
                    b1:52:06:61:77:4e:85:68:64:52:76:09:16:02:6f:
                    50:6f:97:30:d0:05:6e:ec:bd:19:80:f6:46:58:90:
                    31:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A1:44:28:89:F8:BC:DE:3A:16:22:BD:4E:13:15:F3:18:80:D7:30
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cb0ac6a-ca60-4958-a561-37454c1f561b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.193.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bb:82:a0:fa:be:6e:ca:be:d2:c3:f0:c5:fc:bb:0c:d1:f0:ae:
         5a:94:aa:43:81:cf:c2:46:9e:29:43:20:27:83:9d:67:6a:7c:
         17:0a:a6:77:87:0a:b4:aa:3b:ec:c9:22:64:99:e3:b0:27:14:
         65:c7:33:ab:e3:c1:68:7c:25:31:88:aa:7d:b0:bd:7c:3c:a6:
         63:0a:b0:87:7e:08:24:67:eb:7d:28:13:07:3c:65:21:ac:10:
         fb:b8:e5:10:ad:20:e5:73:e5:fe:8b:32:24:d1:47:d6:5a:dc:
         b4:e9:9c:53:bc:3c:c2:86:f1:63:6c:32:30:73:19:20:71:d2:
         0a:45:b1:00:96:b8:b5:25:e6:ab:ea:21:7c:39:e1:24:c3:ac:
         e0:e1:06:e6:40:33:4f:f7:4a:7c:2e:58:2b:eb:b7:01:17:24:
         f5:5f:24:fb:76:89:4f:30:c6:91:38:13:e4:1f:c4:3c:eb:78:
         f5:89:4e:52:c4:ba:36:4f:a6:6a:28:25:14:8e:b9:13:c0:ce:
         ba:7c:2f:01:09:03:76:c0:bd:c3:65:29:f8:4b:d3:c6:75:e1:
         e5:0d:5a:ad:20:ff:b0:8c:95:9e:63:06:bf:b6:f4:34:4a:e0:
         b5:ea:bc:21:20:90:b9:42:84:9b:cb:35:47:c6:1c:fc:c6:9a:
         c3:a4:3a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----