Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5f10326-ab82-4d73-a49a-9b759e8f8f93.roa
File:                     e5f10326-ab82-4d73-a49a-9b759e8f8f93.roa (raw, json)
Hash identifier:          l2AWo5qv0l12xKHrFier0QF+wZ4hNLqCRsbDJ+tWx80=
Subject key identifier:   DB:D4:74:1F:B1:17:B8:4E:60:EF:42:EC:A8:79:F5:42:06:B4:C1:2C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       15280DDB59D619AA8466D20AA09CD9497B6146B2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5f10326-ab82-4d73-a49a-9b759e8f8f93.roa
Signing time:             Wed 01 Oct 2025 00:52:50 +0000
ROA not before:           Wed 01 Oct 2025 00:52:50 +0000
ROA not after:            Wed 05 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        96.0.56.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:28:0d:db:59:d6:19:aa:84:66:d2:0a:a0:9c:d9:49:7b:61:46:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  1 00:52:50 2025 GMT
            Not After : Nov  5 23:59:59 2025 GMT
        Subject: serialNumber=472e42df27ad51b1f2beb0f69219edeb947e9b7ff9a6315500152068667ca17a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c0:a2:5e:b6:bb:cc:a7:b0:4d:bc:8a:5d:bd:
                    40:64:af:03:0f:95:6e:e9:f2:5c:12:38:3e:e9:82:
                    00:b6:9f:5e:4c:45:eb:7e:e8:ee:5e:72:7c:c2:c7:
                    a7:3f:88:34:bf:7d:80:45:28:53:74:65:37:99:bd:
                    22:cf:33:e0:e1:ba:8e:79:2d:ce:6d:3b:6e:d8:dc:
                    d7:f3:9e:dd:67:9b:21:80:31:af:bd:14:a3:58:49:
                    ab:25:46:f3:ef:68:4f:a7:75:ec:ed:ad:dd:47:bb:
                    cc:a7:8d:d7:e2:c3:a8:cf:37:cb:04:82:6c:a4:fc:
                    bb:2e:b6:f6:19:e8:c1:76:33:67:47:1a:f9:4b:e4:
                    ad:ce:cc:31:3d:ea:35:b7:22:96:83:8a:96:8a:e1:
                    7c:bd:e2:2e:0d:a7:54:ea:81:61:d8:75:46:3c:4d:
                    5a:a5:58:37:7e:69:f7:fa:c5:6a:9f:c0:1b:74:e5:
                    d3:56:b8:37:70:be:62:bc:65:9a:21:51:07:fd:82:
                    bf:d1:67:b2:31:ab:c5:71:fc:3c:1a:12:84:8b:a2:
                    de:68:60:3f:c8:1a:4e:33:a4:a6:69:90:8e:84:74:
                    9e:f3:54:92:3c:f3:be:36:19:19:53:0e:5c:6d:28:
                    99:94:fd:7e:f2:40:b4:b1:43:76:ee:a2:10:f6:41:
                    2f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D4:74:1F:B1:17:B8:4E:60:EF:42:EC:A8:79:F5:42:06:B4:C1:2C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5f10326-ab82-4d73-a49a-9b759e8f8f93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.0.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:f0:2d:4b:e0:4a:51:fb:75:f3:46:a6:66:e0:a0:86:87:5d:
         44:0a:0a:bb:0c:a8:ca:3b:2f:9b:f6:94:4e:cd:33:7e:6e:39:
         f5:b0:6b:55:99:ab:35:b1:3e:f6:03:62:a2:42:18:1c:5f:49:
         ee:c3:06:87:f4:e6:06:df:30:5a:b1:1b:03:70:df:77:9a:7f:
         e7:38:0d:34:24:6c:67:39:d5:ee:6d:04:56:da:31:e9:d7:36:
         68:40:c5:be:d8:83:d1:9b:81:56:38:6c:a5:a4:ee:4f:02:4c:
         fa:ad:da:74:ae:d0:74:86:02:07:b4:fe:0e:a6:e5:cd:d9:92:
         e4:39:81:d8:0a:42:7a:9f:f7:06:dd:34:3a:04:5b:be:2f:fc:
         d1:57:e5:c3:0a:dd:90:b7:bb:ab:d1:33:0b:0c:79:25:57:b6:
         9e:bd:c2:95:f2:31:a7:94:9f:78:18:91:42:ec:64:5e:50:e2:
         ec:b4:45:d9:0b:27:e2:0f:32:d8:e0:c9:1c:88:3f:ac:58:3e:
         00:21:d0:b9:86:84:b6:ab:c5:26:9d:8f:83:79:03:86:fa:03:
         af:28:02:2e:22:ad:d8:da:5a:8e:6b:d2:3c:bf:48:d0:39:f1:
         3f:84:95:a7:73:51:b0:3a:5c:e6:4b:1d:09:64:c6:8c:a8:1d:
         7c:42:96:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----