Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7176065-06ff-4cc3-8f45-037bf533d7c4.roa
File:                     c7176065-06ff-4cc3-8f45-037bf533d7c4.roa (raw, json)
Hash identifier:          untjlGMJJatLwYKP83Tgfcd+44GHib0CCYuiWuf3T8U=
Subject key identifier:   7B:F8:47:57:7F:FD:6D:DC:66:DA:79:39:5E:CD:F3:16:C0:23:C9:B0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6880F701038AF9C4928FB234AD2074B0D75F1A4E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7176065-06ff-4cc3-8f45-037bf533d7c4.roa
Signing time:             Sat 18 Oct 2025 00:20:08 +0000
ROA not before:           Sat 18 Oct 2025 00:20:08 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        35.56.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:80:f7:01:03:8a:f9:c4:92:8f:b2:34:ad:20:74:b0:d7:5f:1a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 00:20:08 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=f4be97ef2d5e6cc6bbbb8e3e4137d60122c744fdf06e7da530c75c9de787dde4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:00:14:6a:1e:70:e4:13:3c:68:3a:21:0c:87:
                    0e:aa:40:3d:c7:d1:40:e9:8e:04:13:75:10:5a:fd:
                    20:99:ae:c7:55:db:ec:d6:80:67:7d:04:19:5f:de:
                    53:ef:68:ba:bf:60:10:4e:15:bf:dd:2f:65:c3:53:
                    f3:f8:d7:b9:99:b8:fd:7d:3c:68:44:d8:dc:d4:69:
                    37:c9:e7:0c:03:26:67:86:45:ff:0f:2e:f7:13:e1:
                    ee:6a:64:55:ab:45:21:48:be:61:d8:31:33:07:c7:
                    58:3a:96:94:e3:a2:fb:0b:fb:ee:12:35:e7:ca:e5:
                    7a:f1:99:58:47:c6:1c:46:c7:22:8f:79:50:c3:d8:
                    3e:eb:2b:d4:f8:49:5d:1e:02:3b:32:25:f9:b0:d4:
                    70:60:69:0e:f5:c5:8e:01:cb:3a:09:af:67:17:92:
                    cf:f0:c1:32:5d:29:9c:07:f6:20:32:89:73:ab:e0:
                    0c:fe:c0:06:e0:5f:47:28:df:1e:af:99:b7:89:62:
                    5f:b3:a5:84:67:56:96:ed:8b:79:74:d5:ce:89:67:
                    bb:6f:c3:14:e9:c3:7c:be:22:80:cf:35:a6:89:ed:
                    89:17:a7:68:b0:24:86:43:36:6b:95:ed:b5:b8:f0:
                    28:0d:ec:0e:85:84:00:9f:e2:ba:c7:6f:e5:7c:0b:
                    6f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F8:47:57:7F:FD:6D:DC:66:DA:79:39:5E:CD:F3:16:C0:23:C9:B0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7176065-06ff-4cc3-8f45-037bf533d7c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.56.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         35:53:53:c5:fa:dc:24:bd:54:eb:c9:7a:b7:27:53:0e:e7:93:
         eb:8a:2a:f8:4c:a0:2e:71:9b:e8:43:0e:e6:0b:a6:68:57:84:
         77:93:9d:78:72:94:59:8e:52:ad:f6:42:11:ce:04:f2:be:31:
         ae:8a:3f:4f:b0:cf:fd:1f:69:5d:d1:85:b0:6c:3f:60:2a:e1:
         80:77:48:a5:77:07:fa:81:f2:63:36:2f:c1:6c:2c:79:e3:12:
         2b:20:0c:24:dd:a3:99:3c:ef:71:2c:d3:8b:67:fe:9b:ed:ee:
         0c:e8:68:67:d6:35:a4:35:c0:c5:9f:ec:c4:30:38:d1:49:78:
         6b:f2:19:5e:95:ee:e3:bc:77:bc:85:50:0c:33:66:c9:2c:55:
         c2:66:8a:b9:96:28:30:f4:63:b7:cf:3a:a4:ee:a1:ff:13:f5:
         bd:f3:e0:cb:e3:69:46:d3:ca:c1:ec:7e:38:84:0e:a7:b6:35:
         7c:dd:79:38:34:7c:36:55:6d:1c:41:3e:3a:bd:5e:49:47:50:
         6c:06:6d:2a:ee:44:54:9b:f8:fb:ac:46:69:35:d4:e5:f4:2b:
         88:50:9a:82:b7:b7:29:8a:6a:87:cb:f8:f1:50:b0:f2:d2:eb:
         8b:05:6d:e2:9b:45:17:f9:65:f0:d1:cf:e7:19:1c:0b:fa:01:
         c1:ab:a9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----