Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a78ff198-e6dd-430d-9225-4f016327415c.roa
File:                     a78ff198-e6dd-430d-9225-4f016327415c.roa (raw, json)
Hash identifier:          LjahRKA2rizjWbnJTCq4YaCFo12h5Uv2KjXwk8elz3o=
Subject key identifier:   82:27:B8:FB:0A:81:E1:53:20:55:38:90:A6:F8:3A:F5:66:C9:1E:7C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0C88D1C67F33E1D2628B4D2C4E03D0DCFAD45670
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a78ff198-e6dd-430d-9225-4f016327415c.roa
Signing time:             Tue 07 Oct 2025 00:51:47 +0000
ROA not before:           Tue 07 Oct 2025 00:51:47 +0000
ROA not after:            Tue 11 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.129.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:88:d1:c6:7f:33:e1:d2:62:8b:4d:2c:4e:03:d0:dc:fa:d4:56:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  7 00:51:47 2025 GMT
            Not After : Nov 11 23:59:59 2025 GMT
        Subject: serialNumber=37bb318ac3090fbe0cf1125da08c759920a7dc1e022b4397374794d09c9dc84c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:77:04:f9:86:dd:bf:0c:84:bb:74:3c:20:00:
                    74:57:3b:c0:0c:6d:b7:dc:88:6c:da:fc:93:39:c5:
                    15:fd:53:51:a7:20:da:93:c8:4b:a2:b9:66:7a:08:
                    4d:cc:77:77:8b:25:f0:6c:e9:8a:0c:6d:6b:da:31:
                    40:9b:7d:82:d8:9f:01:9e:0f:5b:84:9a:c0:d6:30:
                    c9:0a:f0:5e:0b:ae:7e:00:53:d2:b6:fa:74:9b:1a:
                    b9:af:16:60:62:3c:b1:d0:ab:cf:f3:4c:61:79:43:
                    fc:52:50:64:d9:79:68:b4:8b:bf:37:78:d0:76:30:
                    73:c5:7d:e8:98:d7:54:76:7a:09:c0:08:74:c2:9f:
                    67:65:01:01:0c:00:12:f0:5c:e5:ed:9e:90:35:e6:
                    a0:6f:3a:e3:b1:33:dd:5d:19:76:bf:b4:00:f7:47:
                    e3:dc:0e:df:67:66:e9:7d:b0:f8:00:1a:ee:20:b1:
                    5e:80:48:e2:c0:9b:67:c4:16:5e:b7:18:eb:4e:c2:
                    bd:85:ca:23:a5:47:cd:d5:66:87:82:69:14:54:43:
                    38:c8:7d:b4:2c:cf:8a:19:66:4b:9a:c9:d7:1e:2a:
                    d6:42:e0:bd:65:c4:08:b1:fd:f2:f6:c7:6c:bc:95:
                    1e:cc:c2:d6:95:4b:7f:f2:ba:df:dc:cb:18:24:df:
                    a8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:27:B8:FB:0A:81:E1:53:20:55:38:90:A6:F8:3A:F5:66:C9:1E:7C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a78ff198-e6dd-430d-9225-4f016327415c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.129.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a3:7c:2b:b1:69:ed:54:82:90:ea:91:68:7f:ff:58:77:db:be:
         3b:ac:be:42:01:04:cd:8f:56:3d:d9:56:4e:6d:37:0d:68:07:
         06:ec:ec:59:1e:38:67:c6:21:e6:e5:84:06:ab:49:87:7c:56:
         d0:3e:92:60:9e:ac:53:52:a4:2b:46:17:af:ba:08:b9:d8:74:
         4f:5f:64:61:81:58:fe:63:90:3b:2c:9b:51:e8:ac:c9:ab:23:
         6d:f6:6c:dd:14:75:41:44:26:dc:31:75:89:50:e2:b9:ba:3d:
         45:87:58:45:fd:cc:ea:ad:7a:30:48:20:a5:75:b1:41:82:3d:
         bf:01:b1:38:c4:ae:e0:80:f4:7f:89:15:82:35:a9:d3:2b:23:
         47:58:ba:6d:41:9d:e9:32:0a:39:b5:72:1b:e4:6c:dc:c7:7d:
         12:75:97:a1:b1:87:f6:cf:df:f6:b0:15:a6:53:1c:80:01:60:
         40:53:12:77:6e:a0:73:99:2c:21:f9:90:14:00:22:a3:2f:7c:
         04:a5:fe:07:cc:78:52:39:7b:ba:4b:f4:a5:fc:eb:49:a5:cc:
         50:e6:02:84:a0:f0:28:9b:df:4d:a2:48:ec:92:e7:f5:b3:af:
         36:95:e4:a0:b3:b9:99:48:14:aa:be:a3:4f:c2:a9:bb:44:fc:
         0c:84:21:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----