Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1fdd8eea-7b9a-457d-b718-af924152bc1e.roa
File:                     1fdd8eea-7b9a-457d-b718-af924152bc1e.roa (raw, json)
Hash identifier:          aI56JjF24VBW0+rwsaJEUB1Vbc0xoXcgIkeDl2dtUNQ=
Subject key identifier:   D0:8A:DC:96:C6:45:E7:B0:84:8B:B8:A1:3B:12:B9:06:D9:AE:06:95
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       053875C2301588815ED9CB1D154865CF3E3D163B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1fdd8eea-7b9a-457d-b718-af924152bc1e.roa
Signing time:             Tue 14 Oct 2025 17:12:44 +0000
ROA not before:           Tue 14 Oct 2025 17:12:44 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        70.132.56.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:38:75:c2:30:15:88:81:5e:d9:cb:1d:15:48:65:cf:3e:3d:16:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 17:12:44 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=a6dd4af3622f78ec7eafb05a06e4b652ebda1282b4e3f93c6d6775dbe549060b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:dc:25:15:17:34:44:1c:8a:25:01:8d:70:a1:
                    9f:3d:23:b7:cd:23:17:d3:70:a1:9f:9d:1c:35:f1:
                    8e:81:06:fa:ff:fb:b6:80:4c:a9:7b:84:ce:61:e8:
                    66:1c:57:d5:1b:9a:0b:1d:56:8e:7e:b6:40:77:57:
                    2f:b9:bc:cc:38:5c:28:c9:26:a4:72:c6:49:a2:f3:
                    5d:28:2c:7b:a8:1b:0f:b2:48:ba:9f:97:ad:bd:53:
                    17:ea:57:b6:82:ae:d3:6d:96:e9:0a:6a:07:7e:36:
                    c7:dc:19:e0:26:64:0a:02:de:24:a2:1c:ac:ad:b6:
                    dd:83:19:60:32:49:20:ad:02:d6:4d:c5:13:c2:e1:
                    78:7b:f4:32:f1:43:42:c0:71:44:03:98:d6:1c:76:
                    b2:7c:0c:87:e1:bd:b2:2b:e9:36:a8:4a:9b:41:c3:
                    dd:a4:e5:ad:86:1c:03:dc:37:9b:c8:ad:7e:e1:d7:
                    d7:ef:3a:74:75:2e:17:41:8b:91:4c:31:53:63:53:
                    77:36:e1:39:f6:d8:14:cb:34:9c:57:94:15:b1:0e:
                    e9:f5:e6:e3:59:85:98:d3:5e:e8:64:a3:68:41:c3:
                    b7:47:7d:7b:33:22:bd:2a:15:d4:20:9f:71:c5:a9:
                    e9:89:ac:83:ed:30:82:8b:40:21:3a:0d:b1:27:d9:
                    8d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:8A:DC:96:C6:45:E7:B0:84:8B:B8:A1:3B:12:B9:06:D9:AE:06:95
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1fdd8eea-7b9a-457d-b718-af924152bc1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.132.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:49:b2:0e:9b:15:ea:da:16:80:bf:2a:e0:d5:86:ac:ea:13:
         26:c9:d7:cc:a8:89:d0:28:6c:29:73:d7:b8:4a:15:6b:b9:25:
         f4:f5:fc:44:8e:41:7e:11:58:4b:33:14:f6:57:d6:20:46:fc:
         d0:4a:31:48:f8:55:11:15:df:e1:f8:f4:98:8e:5f:1e:7d:a3:
         f0:96:3f:62:31:d1:a1:14:1c:dc:9f:60:b8:71:e8:74:d5:7d:
         4b:6f:2f:b7:74:72:87:33:ad:e6:11:cf:db:3e:79:59:ed:d9:
         f2:fe:3e:b2:a4:82:d7:4e:9e:cd:b5:d8:81:6f:e5:55:24:31:
         9a:f9:52:da:fa:ee:db:4d:cc:9e:36:90:91:6c:3e:df:1d:65:
         e0:46:b3:4c:18:05:16:55:14:9a:29:55:1b:7e:dc:7f:0f:52:
         a1:bf:f9:0d:ca:02:20:97:96:2c:cf:41:eb:e7:7d:86:23:46:
         d0:88:00:68:50:69:20:09:65:39:08:38:a3:ae:e7:54:4e:7a:
         0f:e3:49:69:05:a4:71:1b:22:fd:9b:d3:f3:82:07:c4:df:9a:
         1e:6f:cd:d6:d6:d6:b0:23:f0:b8:9e:e1:73:c5:39:f3:21:d5:
         2a:ba:19:7b:1e:e8:a9:16:ea:8f:de:32:57:55:63:0c:34:b6:
         ba:ae:73:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----