Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8deb530-6bda-498d-a591-72495d07fc40.roa
File:                     a8deb530-6bda-498d-a591-72495d07fc40.roa (raw, json)
Hash identifier:          OSKz9hHq6YBd19X8HRdtZLmUKk5lwFNj9QWQzDOCj8A=
Subject key identifier:   0C:3E:C6:AA:7D:47:33:79:ED:69:B0:77:8F:5B:75:19:40:0D:28:42
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       314D862480F8DE2A2DD11B4D4CA1753E6E4836B5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8deb530-6bda-498d-a591-72495d07fc40.roa
Signing time:             Sun 19 Oct 2025 02:42:11 +0000
ROA not before:           Sun 19 Oct 2025 02:42:11 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.20.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:4d:86:24:80:f8:de:2a:2d:d1:1b:4d:4c:a1:75:3e:6e:48:36:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 02:42:11 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=ece321443ad33cc9cc51e7fe4c6627d8595b8f532624009fdc34cefd9b3e4e30, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:77:92:7c:b0:3b:df:5d:f7:5a:cb:af:50:66:
                    59:2f:b6:5a:99:b4:5c:0a:9c:5c:35:3c:d6:0e:81:
                    b5:9a:44:35:02:36:73:06:d2:9f:e6:31:af:80:fe:
                    5a:e6:77:bd:17:2f:5e:ab:e4:34:7d:b0:d1:f3:f1:
                    8c:a2:b3:aa:cb:04:95:04:96:c1:ed:f5:9e:1b:54:
                    a1:16:dc:43:8e:5c:95:cd:6c:36:8f:ca:ce:2d:32:
                    7f:40:0b:bb:71:f3:4b:1a:b5:44:7a:bb:75:7b:b0:
                    fe:a6:31:72:82:70:bd:c2:38:94:47:ab:b4:47:86:
                    da:5b:55:9e:f5:ba:c7:4d:c6:a1:f1:13:ba:db:35:
                    8c:0d:4d:ff:4a:0a:af:3f:6c:53:71:8d:21:65:c7:
                    9c:38:ff:76:f0:77:b3:0c:8c:67:2c:9d:b6:ed:0e:
                    2a:61:16:cd:19:fa:79:b3:39:36:46:2e:de:1a:15:
                    20:39:b8:64:c1:b6:38:53:e2:4c:58:2a:a1:8c:95:
                    52:b0:86:c2:72:26:70:ca:8d:5d:2a:be:33:d6:dc:
                    78:42:39:fc:02:f5:25:92:70:d8:d0:79:c5:76:ee:
                    72:a8:49:75:42:ab:77:58:a4:4e:1d:65:9f:90:af:
                    2a:e6:0a:be:bc:fe:e0:9e:43:a7:7f:d4:f3:da:e9:
                    c1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3E:C6:AA:7D:47:33:79:ED:69:B0:77:8F:5B:75:19:40:0D:28:42
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8deb530-6bda-498d-a591-72495d07fc40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.20.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         48:d5:e9:e5:4f:f7:a0:d5:13:c1:70:65:5b:12:ab:92:be:50:
         42:dc:9f:4d:21:97:7d:58:51:30:3c:60:bc:70:c6:fe:73:c9:
         e4:dd:d7:1d:3e:84:96:36:36:b9:60:b0:dd:0a:17:a0:67:b1:
         74:52:84:c9:4c:bf:38:12:4c:e3:13:93:49:f8:48:ad:ad:4d:
         36:7b:fb:54:1b:a4:cd:2d:7c:c3:dd:c0:25:35:65:66:63:64:
         40:b8:16:27:b1:8a:be:c4:a2:d6:57:ae:f2:92:ad:60:3a:30:
         3e:10:17:f4:64:b4:a2:ea:dd:0a:1f:a0:15:51:c8:74:90:bc:
         59:13:cf:4e:80:5c:11:cf:52:6a:46:90:a8:fa:57:ea:a6:75:
         a4:0d:5a:f4:c7:f6:59:c6:26:b3:55:e9:0a:f0:96:6c:2e:11:
         57:3b:89:83:e1:21:16:b1:f2:60:99:ff:5d:44:6f:88:4a:d9:
         a1:45:d2:5b:95:19:b8:a0:f5:93:37:63:e7:da:63:0d:33:cc:
         b3:68:d2:ab:36:c0:5b:86:dd:b4:58:96:c8:65:c6:05:5e:72:
         fc:8c:72:e9:52:7b:2e:1c:7d:93:87:b4:e2:52:c8:1f:23:d6:
         3f:b2:c0:8f:a4:38:29:1c:01:d3:08:c8:17:ae:85:e1:2f:8e:
         f8:b3:e7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----