Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c0d17be-256c-4d26-83ba-b3ae68aeef6b.roa
File:                     7c0d17be-256c-4d26-83ba-b3ae68aeef6b.roa (raw, json)
Hash identifier:          xtJUyd1Wyc/Dx79QaStnskygSM4zhf5nzXkeWugtABM=
Subject key identifier:   D4:09:E0:D6:7B:7E:37:0D:59:D9:FB:7B:F6:59:B0:46:97:D0:FB:A7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       66E38E8DA82DEBD94C06F73BC7839A6873E9A8B3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c0d17be-256c-4d26-83ba-b3ae68aeef6b.roa
Signing time:             Fri 03 Oct 2025 00:01:24 +0000
ROA not before:           Fri 03 Oct 2025 00:01:24 +0000
ROA not after:            Fri 07 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        104.255.56.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e3:8e:8d:a8:2d:eb:d9:4c:06:f7:3b:c7:83:9a:68:73:e9:a8:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  3 00:01:24 2025 GMT
            Not After : Nov  7 23:59:59 2025 GMT
        Subject: serialNumber=b73fc35dba39096040055de65798e04cccef232ce0f38cd891762c2c344ed404, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d2:29:81:6b:4a:b9:c1:46:11:2a:f9:fc:1e:
                    80:c6:29:43:12:f2:a0:e1:61:fd:66:ea:23:06:1e:
                    3d:f3:e0:82:f9:40:9e:f9:81:db:8a:0e:52:c8:02:
                    70:67:8b:ff:20:85:b4:99:8b:0d:70:dc:6d:40:67:
                    a8:43:51:b9:fc:03:fd:ee:fe:f7:6f:d4:00:db:d6:
                    bf:bd:d4:5e:0e:ba:f8:11:df:c4:34:d8:b4:7e:32:
                    b5:d5:2c:12:18:c9:6d:d2:f8:e0:ac:08:13:91:e6:
                    51:8c:36:ce:91:c3:55:44:6d:f9:84:00:52:82:20:
                    98:e1:5a:60:ff:8a:11:a5:46:fe:82:85:ab:e2:44:
                    4f:a7:0b:6f:73:ae:db:bb:89:d2:fb:b1:c3:a0:93:
                    6b:07:90:40:a8:1a:81:43:e2:e8:e1:53:e7:ae:29:
                    f1:0e:dd:4f:39:82:57:44:af:6f:1a:66:40:d1:31:
                    09:70:4d:40:e2:0a:c6:9a:f8:56:70:4d:aa:4f:10:
                    02:b1:f5:e5:4f:1c:17:9b:fb:df:a8:17:b9:7c:b7:
                    8a:05:50:db:92:8b:51:da:b0:20:98:26:59:14:7a:
                    ce:9a:21:d3:ff:c9:5e:04:f6:ba:db:8e:b4:42:66:
                    56:b1:04:1d:ee:68:41:e4:b6:cb:c0:32:36:e9:a3:
                    c2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:09:E0:D6:7B:7E:37:0D:59:D9:FB:7B:F6:59:B0:46:97:D0:FB:A7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c0d17be-256c-4d26-83ba-b3ae68aeef6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:dd:6a:ba:48:71:4f:d1:c8:9f:6c:bf:42:3a:22:a3:ea:85:
         8c:ec:4f:23:a8:a5:f0:8b:7c:84:69:88:92:5f:4b:ed:06:6c:
         23:5b:94:da:57:f3:aa:56:73:12:f7:2a:85:f7:7d:04:58:58:
         16:15:26:c0:4d:0f:33:6b:1f:6b:2b:04:e1:f9:47:02:28:31:
         08:db:27:79:17:16:47:cc:7a:b8:1d:1f:fe:d7:a5:1a:05:8d:
         6d:c6:42:3e:4b:2b:4a:a5:46:87:0f:22:42:9a:41:7c:56:a7:
         f4:87:1d:c4:59:09:c6:35:6f:db:69:81:0e:b2:b7:26:a5:5a:
         65:d9:ef:5a:e3:b9:c6:a2:d7:74:ae:bb:ae:e8:82:42:97:91:
         a0:1e:5f:5a:34:06:eb:d3:f4:38:0b:78:2b:8f:b1:ab:93:7c:
         2d:12:7c:6f:98:78:bc:57:a8:d2:51:0c:ce:3f:35:2c:da:2a:
         e2:ed:d8:53:25:d0:e2:92:87:f6:bd:4a:47:c9:d5:23:1c:21:
         b0:a7:ac:9e:1f:55:3b:c8:df:83:89:0a:d1:da:19:63:1b:f3:
         53:f1:91:5d:84:1a:73:9d:0e:40:96:80:d7:7b:9a:7c:8a:ac:
         4e:61:f9:6c:68:97:53:37:f5:de:fc:20:c2:e4:eb:b6:11:67:
         84:ac:67:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----