Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc616135-8b1d-4ead-a2de-9d36833ec30e.roa
File:                     fc616135-8b1d-4ead-a2de-9d36833ec30e.roa (raw, json)
Hash identifier:          KagTMeiBZ81ryuktwX3lAqUskXzDHTY8RXrzxdWoLEU=
Subject key identifier:   51:DE:F8:7D:88:15:AB:1E:34:FE:0D:E2:C9:95:E0:F8:73:2A:82:48
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       47E86EE89C93EAE312AD83DECCE7D65A74E9491C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc616135-8b1d-4ead-a2de-9d36833ec30e.roa
Signing time:             Sun 19 Oct 2025 03:10:59 +0000
ROA not before:           Sun 19 Oct 2025 03:10:59 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.194.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e8:6e:e8:9c:93:ea:e3:12:ad:83:de:cc:e7:d6:5a:74:e9:49:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 03:10:59 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=ca1de8d6bedeeefc4dc9afe4f0273262c50fb57dacbd45268295689ed9ba3bb1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6d:ac:ca:75:bf:d6:77:42:f3:b6:cc:6d:5c:
                    52:1c:06:9d:f6:a6:9e:67:cf:de:d8:a9:46:f2:dd:
                    1e:49:9a:e4:d1:7e:c8:09:28:ac:d1:3f:a6:2b:05:
                    e9:e1:29:8c:08:69:3a:f6:c5:a5:0f:e1:7d:f6:60:
                    15:a2:43:d1:35:c3:dc:7a:25:37:46:51:f2:30:ad:
                    06:14:76:9f:e1:7a:1d:3d:94:d8:30:93:60:53:d0:
                    dd:b8:72:3b:82:b9:a0:d2:5c:b4:79:d1:9f:5c:e6:
                    bf:1d:d2:ba:e3:ee:68:e2:b8:61:07:f7:b5:dd:3d:
                    08:95:a3:02:92:25:96:09:f8:32:9c:d1:de:e5:53:
                    c6:ea:c2:72:ab:96:f3:eb:a0:e6:75:34:4d:67:58:
                    9c:ef:e8:80:6e:f2:a4:01:12:cc:49:59:2c:f9:13:
                    24:6c:7f:e0:79:0c:39:f5:62:4c:79:e1:8d:fa:0d:
                    a7:d6:0d:51:fc:38:ae:d5:6b:fc:84:8e:db:12:aa:
                    70:aa:03:b7:25:99:53:78:b6:14:b6:2a:84:dd:bf:
                    7e:ed:a3:f3:ca:4e:4a:6e:97:ff:b9:47:a8:bd:eb:
                    a8:2a:3f:8a:be:26:43:78:33:1b:2a:64:0a:3c:67:
                    c8:05:7e:33:92:10:e4:79:ce:d7:2c:62:98:fd:7d:
                    9c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DE:F8:7D:88:15:AB:1E:34:FE:0D:E2:C9:95:E0:F8:73:2A:82:48
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc616135-8b1d-4ead-a2de-9d36833ec30e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.194.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2e:fd:e8:a4:11:e0:32:07:ec:c0:62:49:9d:07:22:0c:76:23:
         f2:06:f1:61:0b:e1:4d:a1:9c:8e:32:99:30:4b:5d:0b:97:a0:
         8c:f5:be:c4:b7:d4:81:5d:15:78:a4:5c:5e:6b:5c:f4:e6:84:
         20:1b:fd:b4:30:8c:fb:d9:46:10:19:b5:ef:d3:f3:d9:8a:77:
         dd:53:e1:4e:1a:0b:b7:ae:1a:06:2a:9a:82:af:65:8d:51:e2:
         41:d9:51:ad:0e:f2:33:e4:d0:c8:b7:2a:8a:6f:e1:0b:0a:55:
         6a:16:e4:fd:fd:e9:23:c3:b7:ce:0e:ca:e2:fa:ba:35:85:f3:
         0e:6e:47:93:c8:52:7e:a7:a5:25:4e:5c:92:ef:12:9a:1c:1a:
         07:b3:04:2f:7c:5d:8b:b8:b2:43:16:fb:a4:da:20:93:f8:9c:
         4a:5f:22:5c:68:60:9a:79:b9:99:de:f8:86:3a:59:b8:41:1e:
         85:c6:1d:80:4a:7b:36:bb:93:b7:94:8a:1c:40:9c:b5:dd:1a:
         96:24:b7:19:fb:91:b4:7a:17:bc:9e:c5:83:82:c2:e4:43:5b:
         84:ad:48:a7:01:06:6c:9e:15:1b:c4:6c:04:cf:11:35:70:ef:
         62:f6:40:89:4d:27:8c:00:d1:7c:c5:26:7a:a8:1e:70:fa:6c:
         c8:d6:ff:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----