Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/907d1ff6-b72d-4eb8-81e9-4b99b5824d76.roa
File:                     907d1ff6-b72d-4eb8-81e9-4b99b5824d76.roa (raw, json)
Hash identifier:          rNR3bzSvxuo2EM2gx1cL3d1QYyJz0aMVSUrNlUGHZb4=
Subject key identifier:   8B:72:94:7F:12:35:DE:68:2A:61:AA:86:F2:00:A4:58:27:8D:91:36
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7AA027341714AA91A856DC97655E6F8827C07553
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/907d1ff6-b72d-4eb8-81e9-4b99b5824d76.roa
Signing time:             Wed 01 Oct 2025 00:40:31 +0000
ROA not before:           Wed 01 Oct 2025 00:40:31 +0000
ROA not after:            Wed 05 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.187.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a0:27:34:17:14:aa:91:a8:56:dc:97:65:5e:6f:88:27:c0:75:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  1 00:40:31 2025 GMT
            Not After : Nov  5 23:59:59 2025 GMT
        Subject: serialNumber=f9daccffa678af1e64dbe6264bd1979cc6b5964fe2ef62c1dd36e38c412c5560, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f3:7b:0d:00:d7:dc:57:f7:ac:eb:fc:b2:0c:
                    87:17:13:d9:9f:f0:15:3a:da:37:ec:e3:d6:3c:02:
                    e5:86:65:c9:8f:69:9c:03:55:91:3d:0f:76:ef:5a:
                    0f:9a:5a:69:cc:9a:ca:a8:a9:c5:e2:2a:90:43:3d:
                    48:1f:a9:7e:10:6f:83:8d:59:b6:c0:eb:9e:04:04:
                    a9:89:5a:0d:2d:72:d6:4f:83:a2:fa:0a:2d:5f:b5:
                    34:34:85:f3:c3:34:88:b6:c7:26:90:e2:4f:e0:09:
                    c3:68:a9:0f:70:e0:45:f6:f6:be:36:4f:01:e8:22:
                    05:fe:8a:71:41:d2:bc:34:0c:82:f8:25:d8:6c:c8:
                    5b:e2:cd:91:6e:ae:76:60:bf:40:38:3b:68:ca:32:
                    d2:50:f5:cd:30:60:62:6b:4e:09:86:24:96:1c:f3:
                    a2:01:73:6e:4a:8e:78:a0:26:c4:a3:41:f0:ad:f0:
                    39:5b:4e:4c:7b:6b:53:81:03:cd:66:20:35:5a:ab:
                    11:c4:fa:27:34:59:e2:30:42:78:b0:ea:8c:d4:17:
                    88:1a:7a:c3:d5:76:d9:18:c5:50:23:b3:d5:91:e2:
                    40:b9:fb:c3:21:6f:eb:82:2b:21:41:51:fd:17:89:
                    90:1f:ea:2e:c0:cd:dc:ea:99:3c:08:03:25:ea:af:
                    a0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:72:94:7F:12:35:DE:68:2A:61:AA:86:F2:00:A4:58:27:8D:91:36
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/907d1ff6-b72d-4eb8-81e9-4b99b5824d76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.187.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c5:c3:90:50:4d:9f:dd:32:07:e5:b2:c8:4f:d8:dc:ce:30:27:
         e5:4b:aa:d1:4f:35:7e:70:7f:05:f6:d1:36:d2:aa:b2:7d:65:
         1c:99:fb:f9:f0:69:ce:ee:a2:64:0e:d0:a9:83:b9:74:b6:c6:
         3a:72:69:79:61:9e:b1:81:75:e5:5c:7e:e2:42:ce:b6:05:b2:
         6a:7c:8a:9d:5f:ae:6b:42:6d:a8:3c:d4:aa:01:21:8e:95:ea:
         9e:0b:01:d3:08:6a:c8:87:a0:18:97:f1:03:a7:35:e7:a5:a6:
         97:ae:6c:16:92:16:4c:bd:08:e5:ee:03:28:ea:58:77:22:c7:
         a4:50:2d:72:e6:96:98:62:34:06:38:cf:1f:dc:c6:cb:ef:ab:
         2d:5d:e3:06:57:2c:58:0f:a8:3b:2b:43:0f:a2:72:47:74:b5:
         21:fe:b8:a3:52:29:95:bd:12:86:e0:11:11:97:08:33:8f:e2:
         ff:fc:c8:03:a0:0a:67:39:dc:7f:23:94:3f:d7:1d:cc:d9:b5:
         0f:38:64:8a:16:fb:b8:8f:a1:1e:19:81:94:3c:7e:40:4e:dc:
         65:f3:ca:1b:9c:05:61:de:1b:1d:b5:a9:3c:6e:c6:47:76:89:
         aa:25:55:44:b2:4c:6c:db:86:9d:82:39:86:c0:db:09:c7:8d:
         80:c7:48:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----