Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4f55687-13a4-4d88-adbb-fd74132e68aa.roa
File:                     d4f55687-13a4-4d88-adbb-fd74132e68aa.roa (raw, json)
Hash identifier:          hsS9gnhdLsVhfvkYArjoM2krnMsZydDoyLn6Q1ix3rs=
Subject key identifier:   AD:4A:98:F0:CA:78:15:FA:FA:40:07:AC:94:77:87:D6:80:E9:D9:17
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1E005D2F727981D45BC549300297ABBE79FEA7C3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4f55687-13a4-4d88-adbb-fd74132e68aa.roa
Signing time:             Tue 07 Oct 2025 00:51:54 +0000
ROA not before:           Tue 07 Oct 2025 00:51:54 +0000
ROA not after:            Tue 11 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.169.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:00:5d:2f:72:79:81:d4:5b:c5:49:30:02:97:ab:be:79:fe:a7:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  7 00:51:54 2025 GMT
            Not After : Nov 11 23:59:59 2025 GMT
        Subject: serialNumber=6ca31b328adac5d182914d2ae4b8fe02c699879d180ad3ffb6d6b9477bb0ac7c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:70:68:32:16:cf:f8:65:e1:46:53:a6:97:d1:
                    d5:48:bb:b1:9e:77:ee:59:2f:08:bc:a6:66:e9:04:
                    81:a4:63:13:02:c7:98:12:73:d0:a8:88:9e:b4:8f:
                    eb:68:75:bd:06:84:ed:5a:56:80:78:21:5c:99:80:
                    c6:37:4a:24:49:06:14:eb:9e:50:ac:5b:11:3e:04:
                    0b:90:ce:3f:da:7c:89:d6:45:84:2b:d4:83:31:ea:
                    76:fe:43:21:f7:54:d1:3e:3f:36:29:77:78:e5:85:
                    f6:50:b9:0c:9f:3b:95:8b:d1:18:e7:0c:70:92:5f:
                    0d:6e:27:ef:82:9a:6f:27:54:b5:be:22:d3:9f:a7:
                    75:74:6e:38:f4:0a:f0:c4:1c:5b:8f:74:05:2c:ff:
                    30:9f:21:97:c3:07:16:8c:d2:a3:94:55:e2:d4:b2:
                    10:8f:ba:9a:f0:95:b8:08:c5:13:04:d3:ec:6d:1b:
                    b9:5d:e4:11:43:39:d6:d4:f6:f2:e3:75:ef:69:0b:
                    d1:de:8a:f7:50:5b:b5:4a:e1:b6:82:76:9f:d2:02:
                    db:5a:dd:70:1a:89:4e:03:c6:11:ae:bb:5d:f3:8d:
                    3e:98:7d:5e:db:3e:a6:5d:bf:11:94:97:eb:68:3e:
                    1a:c8:7f:71:c7:78:f6:23:3c:b5:41:d4:dd:73:d2:
                    2f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:4A:98:F0:CA:78:15:FA:FA:40:07:AC:94:77:87:D6:80:E9:D9:17
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4f55687-13a4-4d88-adbb-fd74132e68aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.169.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         83:94:64:7e:95:88:16:db:96:00:b2:8a:2b:2d:15:b7:e7:3f:
         55:3c:a3:65:06:84:13:f4:9b:9d:80:8b:1b:48:25:fa:4b:7e:
         6f:a7:3c:10:6b:9f:1d:12:bb:86:be:e9:ad:96:d8:ac:95:89:
         c7:00:2f:e9:a6:0d:40:d9:6d:0d:e5:c9:0b:8b:8a:8e:ad:50:
         37:3b:fd:28:f6:95:dd:7c:1d:21:80:04:78:a9:d8:37:8d:48:
         6f:28:8f:d6:4f:01:c9:1c:7c:38:dc:e4:27:e9:cc:92:c6:a7:
         c1:09:6a:2d:47:b7:42:27:42:1c:59:9e:3e:ee:83:74:5e:f5:
         66:a8:23:04:b1:65:43:1d:58:a8:72:f1:fc:85:fa:60:85:86:
         87:6b:0a:bd:e5:dd:36:c1:c3:23:dc:48:ab:c8:61:24:88:51:
         ab:07:51:3b:ed:0d:c9:a3:c1:73:87:97:b4:b5:1c:cc:b1:94:
         1f:7b:b9:5b:19:6c:18:87:27:4f:3c:61:18:69:42:79:02:e0:
         aa:01:60:5f:c3:e0:e2:c6:92:28:1e:5e:21:46:c2:06:ce:86:
         8e:2f:f4:c7:3b:7e:69:85:d4:15:b0:af:30:67:e1:21:43:7f:
         a4:a3:d9:61:7a:d6:2d:b4:66:d7:ab:09:6d:a7:6a:75:6d:d5:
         30:a5:46:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----