Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aec5606d-b8a4-46f2-b7ce-1d6f75bef390.roa
File:                     aec5606d-b8a4-46f2-b7ce-1d6f75bef390.roa (raw, json)
Hash identifier:          hkvFoAPGi3ylG9BCGe4nXDDhnKBPw5QIw7DViQv6SLs=
Subject key identifier:   71:61:8F:C2:C0:A5:1A:6A:52:51:AD:2B:7A:20:CF:B0:D1:D1:EB:CC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       37309B1B43799DED26689A92DC3E7EFA9F2DBC33
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aec5606d-b8a4-46f2-b7ce-1d6f75bef390.roa
Signing time:             Wed 08 Oct 2025 00:12:44 +0000
ROA not before:           Wed 08 Oct 2025 00:12:44 +0000
ROA not after:            Wed 12 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.100.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:30:9b:1b:43:79:9d:ed:26:68:9a:92:dc:3e:7e:fa:9f:2d:bc:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  8 00:12:44 2025 GMT
            Not After : Nov 12 23:59:59 2025 GMT
        Subject: serialNumber=0e1707d5dcc215aa1adc737062f0f6e6b676698d72538b8ae716f65b140c2b1d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c1:3c:04:94:88:98:46:3f:31:8b:62:88:2d:
                    63:2a:6e:8b:da:9b:bb:5a:5d:e0:e8:11:51:60:3e:
                    62:79:50:28:e2:b1:bb:1a:eb:b6:46:87:f2:a4:21:
                    e9:96:ae:e6:24:51:a2:87:0e:6a:da:e7:68:27:f8:
                    a9:37:8d:d6:14:0e:d7:cd:d9:89:58:68:99:92:af:
                    e0:a7:d5:7c:7f:8a:ad:fe:d8:be:f8:16:ba:3a:56:
                    e6:f3:28:86:31:3f:d8:4c:77:63:e2:6c:99:14:a8:
                    ae:c8:6e:48:9c:30:20:ea:da:86:07:17:a9:8f:f5:
                    d5:c3:ef:a8:6e:e3:29:eb:3d:6d:9f:c9:09:44:bc:
                    29:db:3c:92:17:c8:dd:6b:90:6c:e7:4a:06:81:90:
                    5a:cb:82:98:a3:9d:ae:0c:80:ec:b8:e3:6c:21:73:
                    54:b1:68:ab:08:aa:74:ff:9d:99:c5:f4:86:3c:37:
                    b9:70:08:18:cd:1d:49:a5:c8:f8:f8:97:b6:0a:80:
                    83:26:f2:60:9c:d3:09:b0:6f:c2:df:eb:fe:ee:d5:
                    36:3c:20:4e:9b:96:74:d6:68:5d:59:19:97:60:cb:
                    92:3f:1f:c3:9e:7a:70:18:e9:43:78:8f:87:82:03:
                    74:e7:6b:af:13:3f:b0:6c:6d:e5:ac:9b:c9:51:38:
                    96:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:61:8F:C2:C0:A5:1A:6A:52:51:AD:2B:7A:20:CF:B0:D1:D1:EB:CC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aec5606d-b8a4-46f2-b7ce-1d6f75bef390.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.100.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b0:2d:46:9d:38:89:6f:59:f8:0b:52:05:d4:93:d5:ba:d1:af:
         a4:da:3e:34:5e:b0:4e:ed:5b:3b:68:40:b6:cc:fb:98:dd:5f:
         64:93:80:2c:1a:e7:b5:6d:13:66:88:28:d3:9e:f9:b4:c6:ec:
         e4:18:1b:9a:56:58:57:4e:20:bb:66:53:ef:dd:e9:91:db:43:
         7a:aa:b6:dc:cc:16:6b:23:29:5f:cb:1c:21:e4:27:82:98:85:
         ce:3d:89:48:88:f0:7e:89:52:54:c2:f6:09:0a:42:af:ae:e6:
         6f:9d:90:d5:0b:21:c9:72:1a:21:55:b4:3b:e6:cc:d6:d2:27:
         3c:fa:12:23:f7:f8:2b:42:91:30:a8:53:9a:13:31:81:8f:8d:
         34:91:62:6e:00:b5:cd:b1:2a:5e:53:32:14:7e:41:90:05:61:
         d7:6f:77:a4:7a:c1:f1:56:5d:bd:8e:16:d2:7f:b5:b2:cb:c8:
         60:df:79:da:b0:3d:c2:0b:f6:00:78:cf:a4:03:3a:a6:3a:67:
         eb:33:2f:6d:1f:27:8b:65:64:70:f0:f8:6a:d4:69:a9:98:82:
         2f:d5:f1:28:56:f9:79:76:18:e7:a0:22:2f:04:d8:37:e5:02:
         31:04:c3:af:c8:79:4e:e5:c5:b9:52:69:4f:c5:83:fa:6a:32:
         85:7e:3b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----