Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0ee04ef-30f3-45d8-9b67-a5e3a5e27c75.roa
File:                     a0ee04ef-30f3-45d8-9b67-a5e3a5e27c75.roa (raw, json)
Hash identifier:          kULRYg0tCu5TMA1He3KZUINm5beQInhcqsP7X3yGPLM=
Subject key identifier:   58:65:A2:31:85:E8:59:C4:DF:92:03:98:B3:BB:1E:A3:BE:B2:43:19
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2525442AC24C1C5027728D7AF4A9B5C7315E6DA9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0ee04ef-30f3-45d8-9b67-a5e3a5e27c75.roa
Signing time:             Sat 11 Oct 2025 00:42:47 +0000
ROA not before:           Sat 11 Oct 2025 00:42:47 +0000
ROA not after:            Sat 15 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.136.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:25:44:2a:c2:4c:1c:50:27:72:8d:7a:f4:a9:b5:c7:31:5e:6d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 11 00:42:47 2025 GMT
            Not After : Nov 15 23:59:59 2025 GMT
        Subject: serialNumber=fd93c7572ec4567ce5349a004f65425db30e9a0d5ea040381d3af656724a6ec4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:99:b4:fd:b9:34:d7:6e:af:92:fa:d1:de:93:
                    33:b4:38:3b:46:0c:5f:e7:aa:fa:30:42:6b:f1:77:
                    23:91:02:6b:4b:82:73:a7:43:e5:ae:df:b9:1e:e0:
                    61:dd:cf:87:42:7e:ee:ba:64:68:d3:52:07:71:5f:
                    29:f6:5d:f0:26:26:0d:46:60:ed:4e:57:60:cf:cb:
                    d9:06:52:88:bf:bc:dc:95:51:74:b8:63:55:44:b5:
                    4e:94:43:4a:a6:da:71:ec:26:92:f0:07:c4:d7:89:
                    e9:cf:b6:18:88:64:ec:ea:ce:48:f5:d9:51:0f:53:
                    f2:81:a5:db:c5:ad:67:4e:ec:e5:5d:2c:69:19:43:
                    89:0c:7e:6f:b1:af:ec:75:51:80:1c:b3:ac:1b:25:
                    7f:de:5e:60:13:ae:d0:e6:ad:51:1e:3f:bb:1a:f6:
                    f1:d5:06:04:32:b4:f5:cb:a0:96:3d:de:e0:53:17:
                    d6:63:5e:52:00:4d:44:48:97:dd:d6:2f:2e:d6:b1:
                    cd:25:41:57:1c:88:fe:91:ec:1f:35:7f:ed:91:0f:
                    b6:81:e1:be:88:b1:44:2e:85:d9:6f:7e:67:d9:fe:
                    bf:e8:71:bd:ea:10:b1:3f:ba:e2:4f:81:0f:ec:cc:
                    15:db:b9:98:24:3a:84:3b:1e:dd:07:af:95:af:35:
                    c5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:65:A2:31:85:E8:59:C4:DF:92:03:98:B3:BB:1E:A3:BE:B2:43:19
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0ee04ef-30f3-45d8-9b67-a5e3a5e27c75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.136.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a1:ae:80:60:72:fc:81:3b:34:04:9d:a8:28:bf:12:1a:75:f8:
         62:0c:4f:a8:b0:12:19:f3:26:2c:70:56:6c:4f:84:2f:f0:8c:
         2f:a3:a8:9a:fd:4b:db:38:a2:27:6a:0e:d3:d9:11:96:e0:c2:
         0e:f4:52:74:68:b7:6f:35:81:07:c3:8c:c4:45:8f:ad:41:d5:
         9c:ab:3e:8e:66:7a:ce:07:26:fb:0f:07:22:d1:cc:b3:a5:c3:
         5f:11:4d:0d:8c:22:83:19:54:ea:7c:6c:d0:41:ea:1b:74:dd:
         7f:a6:8a:1b:ad:23:cd:10:30:54:70:da:2b:46:21:16:11:17:
         f3:2d:35:fc:88:cc:52:4b:11:e3:f5:fb:6e:f6:b8:af:98:ad:
         e3:59:a0:07:d7:b6:d4:66:15:34:c7:b2:a0:60:d8:7d:6c:6c:
         a1:59:20:52:cf:11:e2:92:73:0f:92:3b:88:30:29:15:63:6d:
         84:16:54:a4:e0:c7:4e:3c:ea:a2:2d:05:ce:3a:31:a1:9e:f8:
         65:6a:39:71:45:25:cf:8e:e6:fa:6f:fd:d7:bb:65:6d:45:d6:
         bb:fb:25:94:d1:bb:91:73:02:62:5c:4c:f4:f2:4b:b6:41:92:
         ee:5a:ef:55:9a:13:54:ac:6e:ab:a2:fd:1c:14:b6:d3:34:5c:
         8e:33:16:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----