Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3732605d-e89e-4ee3-b46d-7df664583874.roa
File:                     3732605d-e89e-4ee3-b46d-7df664583874.roa (raw, json)
Hash identifier:          VUQBYOb7YnKqbo1oVzQ8UUrmgPo/QDpTrOomIpbw5rk=
Subject key identifier:   CF:15:E9:C3:FD:01:95:81:7F:79:8A:BA:39:C5:A8:83:AD:03:4E:F4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       53BFC1A54C3E7A1F029201B483E0165639C0E3F7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3732605d-e89e-4ee3-b46d-7df664583874.roa
Signing time:             Sat 01 Nov 2025 00:20:16 +0000
ROA not before:           Sat 01 Nov 2025 00:20:16 +0000
ROA not after:            Sat 06 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.130.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:bf:c1:a5:4c:3e:7a:1f:02:92:01:b4:83:e0:16:56:39:c0:e3:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:20:16 2025 GMT
            Not After : Dec  6 23:59:59 2025 GMT
        Subject: serialNumber=b28f9fd6baf624b51e0541870ce76592b5aee9d6014c5534a147d8d123b4b24b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ad:c2:f2:9c:f1:0c:a6:9c:74:8e:7a:6a:88:
                    11:e3:5a:eb:8f:f1:82:c5:3f:b5:a2:9e:28:49:01:
                    fb:fe:fe:e8:1c:30:91:7c:3b:17:5b:ea:3e:41:d8:
                    8a:62:86:e3:57:6d:54:31:f8:36:75:70:9a:28:69:
                    92:a7:f9:f1:3f:37:56:8d:03:01:98:d5:39:ea:b9:
                    68:f7:fb:90:5c:91:ce:64:56:ff:2f:c2:40:17:1f:
                    20:ad:13:b9:86:b9:6f:cb:58:be:6f:bb:45:68:67:
                    4a:ed:6b:da:70:a8:3d:bf:27:e0:56:8e:0b:be:35:
                    68:4e:d0:c2:74:2d:93:c6:19:82:3c:8c:5a:01:ed:
                    89:66:83:e6:42:97:8f:4d:49:e9:5b:fb:25:f7:6a:
                    c0:6b:69:86:82:c0:9c:2a:e9:72:0a:0a:ab:b3:25:
                    76:40:08:1e:2c:fb:1d:bd:95:5a:26:73:17:cc:2c:
                    33:3b:1c:c2:d5:38:ce:0a:f8:47:b1:27:f0:9b:1e:
                    95:a5:96:f2:ba:13:16:49:60:9e:80:b7:ad:94:76:
                    4a:98:32:f0:c4:c7:dc:9b:01:1b:1b:e3:c0:72:89:
                    b2:08:1d:69:9d:35:c6:09:3e:73:e1:ce:7a:f4:96:
                    da:be:eb:fd:f0:ce:04:18:4d:ae:cb:42:bf:b9:07:
                    36:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:15:E9:C3:FD:01:95:81:7F:79:8A:BA:39:C5:A8:83:AD:03:4E:F4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3732605d-e89e-4ee3-b46d-7df664583874.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.130.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2a:d8:65:e5:08:2f:82:b9:fd:ed:7e:f7:b0:ea:05:e3:ac:6d:
         e5:f0:55:ba:8f:e9:d5:ed:f1:2f:5b:b6:36:c0:08:6b:0c:2c:
         9f:3f:7f:1d:be:fd:58:96:5e:9e:9d:80:8a:f0:07:22:ae:c4:
         bf:46:27:fd:aa:a8:db:2c:55:04:18:0c:23:35:e0:14:35:1d:
         00:91:f8:b2:9f:d5:46:e7:da:17:79:f3:ba:be:e3:22:0b:46:
         e8:ba:db:06:9f:a5:e3:5c:b9:dd:61:58:83:bc:a4:7f:da:e3:
         74:a2:bd:c2:1d:52:4e:a4:7b:1c:71:1c:e8:fc:4b:05:1a:bd:
         86:97:0a:b2:f1:3d:04:32:6f:b5:c6:79:97:70:3b:b0:2f:3f:
         9d:1c:09:2b:bc:72:8f:7b:7a:e0:7f:d4:50:5e:e5:74:34:ad:
         b2:ee:20:0c:b7:57:33:55:10:d6:8e:57:f3:3b:d1:16:51:aa:
         7b:fd:a7:2d:91:a9:77:8d:9e:2c:7a:89:38:39:87:c0:da:59:
         3c:f1:ad:a3:a3:d9:2a:ae:4b:41:57:db:ee:0b:b1:ca:d0:ed:
         15:b8:81:f0:ae:3e:16:82:8a:96:c9:ae:ed:51:7f:58:06:5f:
         84:79:99:2a:ad:7a:89:74:10:02:e1:f7:54:a6:39:3a:4c:68:
         31:a4:04:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----