Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/929a3b2b-92c7-45f2-905b-1ffb4708fcf7.roa
File:                     929a3b2b-92c7-45f2-905b-1ffb4708fcf7.roa (raw, json)
Hash identifier:          OEMAC4GRlk0g0YpUkP/Nb+OSS0jdmsdpQrufMxvazl8=
Subject key identifier:   12:E9:45:10:4E:8B:18:A7:FA:27:71:67:63:CA:83:EA:7A:16:1F:2A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1E50B0497238096709B1290AD19CC7DEC11441AF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/929a3b2b-92c7-45f2-905b-1ffb4708fcf7.roa
Signing time:             Wed 01 Oct 2025 00:40:36 +0000
ROA not before:           Wed 01 Oct 2025 00:40:36 +0000
ROA not after:            Wed 05 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.249.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:50:b0:49:72:38:09:67:09:b1:29:0a:d1:9c:c7:de:c1:14:41:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  1 00:40:36 2025 GMT
            Not After : Nov  5 23:59:59 2025 GMT
        Subject: serialNumber=538eba7e7163eb0a83bea24eb537fe3124ef95e61616df9e77d0ca357864a916, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6d:c8:08:d3:b8:07:31:cb:f7:0d:35:74:c9:
                    ae:e9:13:db:5e:e1:27:e7:53:92:64:0e:4a:ce:83:
                    20:d9:10:e5:39:c1:67:ea:82:92:a9:97:ab:f3:88:
                    95:b9:23:4c:e7:07:08:39:44:1c:c0:cb:34:74:03:
                    71:a6:82:4d:9a:34:ee:f1:c5:b0:78:8f:e2:c0:6c:
                    aa:46:02:76:77:6f:f2:8e:c9:2d:3b:83:7f:ef:2d:
                    8b:04:de:bd:ac:6a:08:68:7e:7d:fd:73:c4:7e:7c:
                    9d:80:55:5f:62:66:db:94:5a:9e:73:a5:6a:8c:24:
                    7f:59:db:d1:06:75:2c:80:27:11:e0:63:f4:bf:e4:
                    78:16:e6:d3:77:1e:4f:1c:e1:92:76:ad:85:cd:c8:
                    dd:db:fd:29:5b:26:9f:cf:01:fc:94:31:84:97:7d:
                    9f:0f:6e:6a:8f:59:64:8a:89:9b:d0:28:39:62:3e:
                    cc:cc:b4:05:ef:98:d9:01:9d:42:9d:06:3c:84:2f:
                    7c:90:54:08:87:0d:36:bd:82:5d:22:9b:3e:af:36:
                    47:2e:ca:8e:37:a2:fd:dd:ef:17:de:ec:95:22:39:
                    24:bc:fd:2e:88:8b:83:23:19:9c:9d:95:50:45:bb:
                    a9:6a:0e:cd:f0:7f:42:67:fd:27:1d:5f:76:a4:1d:
                    df:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E9:45:10:4E:8B:18:A7:FA:27:71:67:63:CA:83:EA:7A:16:1F:2A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/929a3b2b-92c7-45f2-905b-1ffb4708fcf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.249.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4f:9b:5b:8b:92:71:9d:70:d2:9b:ae:81:90:84:6a:7d:46:68:
         e8:56:5c:65:d6:18:fa:64:1b:93:6d:3b:67:ec:3d:83:84:a0:
         cf:ad:93:6a:f0:9f:dd:74:4d:1f:ee:6e:73:47:e4:77:d6:23:
         f1:43:ed:c6:f9:82:52:6b:c5:e8:9e:aa:0f:89:5b:dd:79:20:
         81:af:15:92:c8:fd:9f:92:c8:ab:b1:47:38:16:f9:26:db:5a:
         af:ae:88:c3:16:ba:7a:16:b0:93:81:85:69:2e:ef:0a:e3:39:
         4d:7d:9d:d3:b2:c2:e3:0a:8b:a8:26:e9:8b:46:90:48:c0:bf:
         88:71:db:ab:14:40:c5:5b:c5:95:f8:02:e5:dd:12:ec:91:6b:
         c3:d1:69:97:6b:16:4b:5e:45:5b:ba:c3:45:fe:2d:dc:13:66:
         d4:7b:ea:bf:62:e4:eb:48:8b:5e:0d:70:5c:d5:03:09:58:a6:
         8a:9d:f2:81:84:2e:9b:bb:ff:c8:34:f6:c6:a5:4f:90:fe:c6:
         06:65:b4:c7:e8:25:9b:cf:e2:ad:0f:cd:07:47:bc:4c:22:38:
         bb:12:70:0f:4d:4d:8c:28:9c:65:01:f9:99:b4:cd:85:d2:62:
         62:20:01:4e:d4:92:c8:6a:01:a8:f3:df:2f:21:4b:d0:b5:2e:
         7b:28:a8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----