Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b9624f6-f4c4-46d5-97c9-0950b5ae1241.roa
File:                     9b9624f6-f4c4-46d5-97c9-0950b5ae1241.roa (raw, json)
Hash identifier:          hm34KZGLV7+ZvBKdFoiAU0AcAruG4JGUKfS+C4B3T3k=
Subject key identifier:   16:29:DB:B4:1C:E0:AC:A9:1A:1E:F0:24:52:8D:A1:79:AC:3E:6C:66
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       73066BEB64EF028FAB7E45CD926F117D02FD4D97
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b9624f6-f4c4-46d5-97c9-0950b5ae1241.roa
Signing time:             Fri 26 Sep 2025 00:40:30 +0000
ROA not before:           Fri 26 Sep 2025 00:40:30 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.147.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:06:6b:eb:64:ef:02:8f:ab:7e:45:cd:92:6f:11:7d:02:fd:4d:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 26 00:40:30 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=22433ca557a29c12a0c857eb56a7baeaa94b6e2e187c04a75dd7e93921ea531e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:03:66:cd:47:20:34:e5:6a:1a:04:86:64:5c:
                    b4:5b:da:18:60:24:f7:99:a6:65:68:3f:ff:88:bd:
                    a0:f5:24:47:93:e5:a9:ab:80:0c:7a:9b:3e:7a:80:
                    9b:fa:80:12:f8:81:62:11:ec:18:4c:46:ff:f6:b9:
                    c7:4f:2f:72:01:ff:42:c3:8c:6b:35:45:d9:04:7f:
                    34:ec:2e:0b:75:ba:8c:87:a9:85:c8:5c:56:c2:9c:
                    9c:bd:77:83:85:19:e1:e7:a7:bd:c6:62:c1:62:b7:
                    89:80:3c:4b:ad:5c:54:0e:df:45:c4:ae:14:1c:71:
                    e5:5c:de:7c:1f:e6:99:57:6f:b4:22:cf:27:10:b2:
                    0f:51:81:a3:1c:83:0f:26:7a:5a:87:c5:47:e0:19:
                    f0:7d:34:eb:b6:89:d4:2b:67:4a:55:87:83:a0:49:
                    cb:77:5c:d2:aa:18:43:2e:4c:af:75:00:be:5d:39:
                    48:0f:f2:37:a4:66:83:77:f1:fc:86:02:de:00:d2:
                    dc:dd:47:7d:cc:37:43:65:ba:2d:c4:65:6a:0e:8f:
                    20:a5:4f:81:fc:e4:ca:0e:c9:0b:12:87:9c:27:aa:
                    b2:54:73:6e:6d:be:5c:ba:af:2f:07:bd:10:e0:3f:
                    7a:ba:a5:6b:51:4b:d4:fc:ff:b5:f9:12:78:0b:8f:
                    4e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:29:DB:B4:1C:E0:AC:A9:1A:1E:F0:24:52:8D:A1:79:AC:3E:6C:66
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b9624f6-f4c4-46d5-97c9-0950b5ae1241.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.147.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d5:6b:e0:5e:02:59:7a:05:ba:f0:90:d6:42:6b:4c:d0:48:ec:
         a1:04:f1:8d:40:d6:6a:7a:35:96:26:7f:cf:a7:e3:18:df:ce:
         40:d2:36:c3:24:19:2e:63:de:bc:43:ae:65:34:d7:89:99:98:
         cf:b3:0b:b5:58:f1:8c:e3:fa:a8:a4:88:0b:5a:c4:52:c3:7d:
         ef:7f:56:9b:a5:52:93:44:a5:c1:72:f7:b0:b6:49:7e:de:1e:
         b7:66:d4:6f:db:56:02:1a:9a:4b:df:d3:83:03:5a:58:ce:8f:
         da:44:ad:48:c8:0f:f7:89:42:16:70:9f:b4:af:89:e9:79:53:
         54:b2:ae:6c:d3:26:98:b4:aa:d7:ad:35:63:22:8c:1e:28:45:
         2f:94:27:78:9d:be:2e:f5:95:a7:91:d7:08:cf:ab:b8:6a:41:
         50:e9:12:5f:1e:4b:d5:1f:8e:63:1c:34:41:ed:fe:f7:ab:75:
         02:be:db:6e:7d:c1:9b:29:3a:71:55:98:22:79:be:d3:10:0d:
         49:6f:1d:d4:7f:b3:ab:49:0e:d6:2f:fa:6e:9b:06:e9:8a:52:
         8c:e7:9d:39:4b:c8:26:d3:ab:42:bf:af:da:90:4a:21:f9:fc:
         fc:28:98:e2:d8:1f:81:54:dc:5c:2e:5b:93:0e:ba:84:d4:55:
         95:b4:f6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----