Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfeebbb7-d95e-4bb4-bf1a-d53c32d3d571.roa
File:                     bfeebbb7-d95e-4bb4-bf1a-d53c32d3d571.roa (raw, json)
Hash identifier:          kGY7ala/H/yUtDQiEung45aD+XRQU7lpLLpadJsSo+w=
Subject key identifier:   6A:4E:26:32:47:B3:3B:D5:07:C2:48:0E:6C:7F:BC:0F:BB:B0:30:18
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       27719DD6E70F28D3FDFE7A641120E6E9C347E9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfeebbb7-d95e-4bb4-bf1a-d53c32d3d571.roa
Signing time:             Fri 10 Oct 2025 00:01:10 +0000
ROA not before:           Fri 10 Oct 2025 00:01:10 +0000
ROA not after:            Fri 14 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        114.56.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:71:9d:d6:e7:0f:28:d3:fd:fe:7a:64:11:20:e6:e9:c3:47:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 10 00:01:10 2025 GMT
            Not After : Nov 14 23:59:59 2025 GMT
        Subject: serialNumber=502198e4b43b5ef18cbf3ee03e332209a2c3aef36d1e6cfd37083d848885a5e7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0c:ab:37:2b:bf:f2:dd:b4:4b:7c:21:75:60:
                    be:a0:0d:2e:dc:a4:ec:03:24:42:df:4c:d5:76:7f:
                    77:e2:8e:bc:94:93:4d:96:01:c5:9e:a4:b6:22:c0:
                    7b:2f:86:40:72:9f:b1:57:b6:18:bb:c3:e9:27:bf:
                    fd:1a:b1:51:b0:df:ed:25:f5:36:a2:52:c1:16:65:
                    95:a4:f4:66:27:26:b1:dc:74:48:b7:f7:5b:f7:54:
                    8d:91:ed:9f:55:44:7a:e2:7d:1b:3b:9b:23:96:0a:
                    00:11:0f:31:df:d4:60:c3:1e:c1:6a:80:60:cc:17:
                    c3:d3:56:13:62:5b:18:70:bd:3e:3e:e7:14:47:88:
                    80:4c:ed:58:75:eb:5d:f3:e1:59:eb:25:d0:c8:8e:
                    67:29:8c:8c:d6:28:e5:07:e5:9e:0b:d8:02:69:64:
                    6e:ac:22:ce:02:2e:fa:1d:d3:d5:fa:88:e0:ba:cd:
                    20:1d:b2:ba:d0:41:79:60:5a:11:f7:84:2e:4a:a3:
                    df:4c:3c:82:b4:f3:2e:c9:23:32:24:a8:cf:b8:03:
                    37:d6:eb:e1:7a:af:13:8b:72:e1:ef:dc:6e:6d:39:
                    02:80:b2:e3:87:4a:57:ab:d7:62:b4:fe:33:f3:d1:
                    d1:1a:1e:b5:8a:dd:a2:12:0b:9a:30:39:8f:54:da:
                    63:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:4E:26:32:47:B3:3B:D5:07:C2:48:0E:6C:7F:BC:0F:BB:B0:30:18
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfeebbb7-d95e-4bb4-bf1a-d53c32d3d571.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.56.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:08:b6:98:26:c8:33:f1:12:e8:0a:d6:21:d2:68:01:f5:08:
         e0:63:5d:ea:3d:46:6d:24:82:ed:48:fe:d1:6e:2b:a7:06:5b:
         07:4a:fd:b2:57:d5:bd:7b:a2:03:67:ac:c1:45:fd:64:d1:05:
         5a:92:76:5a:fc:cc:0f:40:37:52:4d:46:2b:5f:d7:51:28:02:
         52:a7:6c:30:78:2d:6a:a6:da:a9:38:76:2e:3f:b0:83:b2:c9:
         6e:b1:25:38:3b:b9:09:ea:8c:7f:4a:1b:71:f9:dc:91:50:23:
         57:f9:39:31:e1:e1:4d:20:9e:9e:45:3c:b7:70:04:d0:a4:dd:
         46:f6:49:bb:55:6c:c0:90:73:bc:6c:3d:d5:63:a0:a7:6a:b1:
         24:b3:82:a1:97:00:96:85:5f:1c:32:b0:f7:d0:44:76:45:4c:
         85:87:57:f5:e0:34:ec:cd:a4:6e:de:7b:31:88:5b:87:e6:37:
         66:8f:39:a1:79:f7:88:28:9a:79:e8:e5:50:29:cf:7c:0a:d2:
         52:28:c2:da:b6:fb:bc:81:09:e5:9c:88:a2:f9:b0:90:65:e9:
         80:2a:c2:35:4a:a2:59:be:03:35:34:40:d0:2c:19:93:fe:ea:
         7a:71:d4:29:b3:95:a1:1f:14:b3:73:6c:60:0d:20:44:54:00:
         cd:17:25:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----