Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ff67b07-091b-43da-9723-1a94e29d65e8.roa
File:                     1ff67b07-091b-43da-9723-1a94e29d65e8.roa (raw, json)
Hash identifier:          KGWDHuMv1HATdxEMJjzmfwKdCfL2mm0ELj19nVZ9ZbY=
Subject key identifier:   A5:E3:E2:BE:72:2C:9B:3A:30:3D:95:06:EC:44:0A:21:D7:53:6A:D7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7C64B8CDD6DD3F8E4074E82FF8AC6CA806A34859
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ff67b07-091b-43da-9723-1a94e29d65e8.roa
Signing time:             Fri 26 Sep 2025 00:40:31 +0000
ROA not before:           Fri 26 Sep 2025 00:40:31 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.43.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:64:b8:cd:d6:dd:3f:8e:40:74:e8:2f:f8:ac:6c:a8:06:a3:48:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 26 00:40:31 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=445dab2fd7e4825dfde8b3fa36a22e9b7caad5d9f6f939139f17d4f8f2699375, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3d:8a:05:b4:55:3f:be:68:b3:20:d7:e3:b0:
                    6f:24:bb:b7:ba:b9:e8:9d:18:91:a0:33:75:05:0d:
                    8e:bd:14:b3:f1:18:81:3a:dd:db:b3:76:1b:a6:8a:
                    70:52:6f:aa:00:8b:cf:e5:56:47:c0:79:84:2b:5b:
                    5e:57:9d:73:11:1b:65:a3:25:e8:4e:ca:17:eb:d0:
                    47:35:0f:6a:95:a3:ad:ee:64:2b:cb:ba:17:3b:3a:
                    cd:86:d1:cf:f7:a9:73:0d:a8:47:cf:0c:6c:d1:55:
                    69:97:bc:da:6f:d5:0b:e7:bc:d5:e7:61:ef:d3:30:
                    fe:ba:e5:5c:51:cb:b6:aa:fb:6f:47:71:6d:21:f0:
                    16:ed:6b:fc:99:66:2a:fa:83:ea:c4:45:ba:af:49:
                    3d:42:74:33:e9:fe:86:4b:08:8a:06:69:6c:2b:b1:
                    b4:db:0d:63:1f:01:3d:72:4a:08:a5:35:0b:18:a6:
                    78:c3:8f:40:30:b8:cc:82:ac:8e:65:9e:9a:f3:08:
                    67:1a:ec:32:b7:99:9d:ad:76:e6:51:64:2a:28:8a:
                    14:3c:ba:53:6c:af:4b:f4:61:65:b8:1f:a8:76:2c:
                    07:4e:e4:8d:98:3f:8f:ea:f2:52:84:42:12:ce:e8:
                    85:64:2f:5c:59:a9:50:56:47:f0:73:f2:d9:91:1a:
                    1b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E3:E2:BE:72:2C:9B:3A:30:3D:95:06:EC:44:0A:21:D7:53:6A:D7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ff67b07-091b-43da-9723-1a94e29d65e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.43.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a9:41:2a:fd:c3:7c:78:d7:61:4b:e4:84:53:0f:23:5c:f8:c4:
         59:27:ed:a1:88:e0:14:a1:d3:12:09:6b:22:69:3a:97:c0:bb:
         b1:9e:2c:ed:21:0a:4d:6a:66:72:5f:16:e1:f1:41:d2:a4:54:
         40:29:e4:1a:cc:d9:fd:22:eb:7a:0b:58:ed:fb:b9:08:58:5e:
         0c:e7:06:6b:cd:00:bb:ba:9b:ab:4a:ee:82:d0:cb:f3:bb:78:
         ce:22:68:63:a1:da:fe:bd:2a:29:1f:62:3e:c2:8c:31:96:e8:
         78:9a:eb:2b:04:3b:47:2c:1b:d2:08:47:78:6a:91:a0:86:91:
         d0:92:77:b9:93:61:f5:70:4f:7b:a9:0e:4a:e4:e6:04:37:a2:
         4a:ba:32:d3:0e:aa:db:17:f7:5f:dc:3e:42:14:d2:15:65:f9:
         ef:00:52:90:3e:59:21:a9:ab:f9:8a:94:ae:1e:21:5f:17:50:
         8a:0a:6f:0f:61:5e:75:2d:38:b4:b0:f7:b8:d4:00:93:8e:c5:
         b6:b6:4e:7f:fd:72:e0:bd:eb:94:ee:b5:1a:72:58:7e:4c:b6:
         bc:11:7d:28:41:08:77:89:d0:b3:36:a6:c2:dc:8c:30:d7:42:
         54:cb:40:94:99:8e:df:df:9f:a9:37:57:01:03:2d:d1:3d:43:
         01:11:07:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----