Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d484a06-5c86-4f33-a91d-70e2aa3e89a5.roa
File:                     5d484a06-5c86-4f33-a91d-70e2aa3e89a5.roa (raw, json)
Hash identifier:          69Kg3jwJJxrAdrBvRTtfDmREcxjNPr/YXFvvG8n77eQ=
Subject key identifier:   2C:66:BD:4A:CB:C5:21:5A:52:FC:66:27:0B:DA:A7:7A:E5:70:88:5C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       24C2953B2A30E4644AD964E2B7F2777C524B9B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d484a06-5c86-4f33-a91d-70e2aa3e89a5.roa
Signing time:             Sun 26 Oct 2025 00:50:06 +0000
ROA not before:           Sun 26 Oct 2025 00:50:06 +0000
ROA not after:            Sun 30 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.233.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c2:95:3b:2a:30:e4:64:4a:d9:64:e2:b7:f2:77:7c:52:4b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 26 00:50:06 2025 GMT
            Not After : Nov 30 23:59:59 2025 GMT
        Subject: serialNumber=00d86e8755ca54c15107fcb14b3128e0d397747ebd62b3e08392456ea173032a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a3:d5:f5:4e:47:af:60:39:88:00:72:bc:85:
                    22:81:74:18:99:62:62:f2:c1:d0:c5:f9:ca:ce:1e:
                    c2:36:ea:83:29:8b:36:b1:f5:62:72:2e:0d:e8:c6:
                    e9:c8:19:98:7c:9f:ca:73:8f:e8:72:3b:47:22:21:
                    0a:5d:8a:eb:14:f1:7a:fc:df:0e:97:3f:03:b6:b1:
                    c8:0d:3b:41:0d:c1:e0:ce:eb:30:68:b1:13:de:5b:
                    42:7b:9c:01:65:68:01:94:3c:cc:55:92:18:94:9c:
                    fa:e2:d6:e2:27:d0:59:5d:7d:74:31:98:c0:b3:95:
                    7b:7f:70:26:e5:20:79:a6:67:6d:d0:9a:3c:0e:cb:
                    20:a8:63:d0:b1:45:ec:ae:9e:4b:42:fb:f3:5c:74:
                    88:e9:cb:10:57:b8:4a:ef:11:e1:b7:7f:43:c3:0c:
                    7c:8c:43:c6:20:94:d7:40:da:ec:65:87:b1:fe:8c:
                    a5:ee:64:17:6f:41:7d:19:1c:58:da:08:ad:d6:89:
                    7e:5f:27:34:8c:94:de:19:ba:4c:87:b9:7e:1f:6f:
                    ca:29:29:59:a0:25:e3:dd:be:0f:90:fa:4b:af:f2:
                    43:ff:68:5b:3f:31:58:d7:8b:f4:d5:dc:27:d9:09:
                    a7:68:b2:b0:3e:a8:f9:42:df:8a:21:de:be:c1:88:
                    a6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:66:BD:4A:CB:C5:21:5A:52:FC:66:27:0B:DA:A7:7A:E5:70:88:5C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d484a06-5c86-4f33-a91d-70e2aa3e89a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.233.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b1:f6:8c:50:42:ca:64:9e:3f:cc:e2:8f:b0:b2:a9:9e:ad:c9:
         00:92:f1:44:55:d2:88:d0:0e:b7:54:c2:d8:d0:20:90:a8:e0:
         32:4d:63:25:2f:a7:1b:20:2d:68:e2:1c:29:21:16:fe:ac:4a:
         a0:08:57:13:96:77:7b:bc:a2:07:bc:cc:b8:0e:87:ae:2b:31:
         25:da:03:1d:0e:67:16:a4:28:5e:8a:13:57:11:51:55:b6:4f:
         61:1d:e4:48:95:8b:73:a6:55:72:7e:9b:da:17:14:17:68:81:
         fa:18:94:3c:80:84:71:7d:b8:a5:c6:56:3e:ed:f6:7a:48:89:
         2b:3f:cf:7e:c5:0e:73:2a:81:c6:e0:6c:85:9f:e0:2e:b5:62:
         7a:60:46:19:40:c0:70:b9:a6:25:9a:37:31:bc:a8:86:be:1e:
         27:80:23:2c:8a:98:ad:1f:a0:65:c8:1d:ab:2a:ac:24:39:88:
         b8:e9:66:56:38:d5:4d:03:d5:b2:44:a0:85:ff:01:5e:86:e3:
         0b:59:0a:83:a6:d9:a3:25:42:b5:b4:6b:12:52:10:77:35:98:
         8c:c7:fd:77:c7:2d:85:ac:b2:7b:6f:cf:2b:dc:84:8e:3b:22:
         a4:c9:ef:24:9f:00:81:82:bc:f5:9c:0c:7f:57:47:1a:b0:9a:
         68:2b:94:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----