Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75dc0196-dbba-412b-92e6-c3cb6a606623.roa
File:                     75dc0196-dbba-412b-92e6-c3cb6a606623.roa (raw, json)
Hash identifier:          yGENzSbZkDYs25YLxL8+txc269VTUw1GgvBYvO3swk0=
Subject key identifier:   A2:61:6F:F9:0D:D0:68:7D:2C:32:BE:E1:34:2B:3F:51:3E:EF:72:06
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       70BFE5B8A38C4758F3350DDC0157D9D4CD6CB054
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75dc0196-dbba-412b-92e6-c3cb6a606623.roa
Signing time:             Sat 01 Nov 2025 00:40:16 +0000
ROA not before:           Sat 01 Nov 2025 00:40:16 +0000
ROA not after:            Sat 06 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.145.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:bf:e5:b8:a3:8c:47:58:f3:35:0d:dc:01:57:d9:d4:cd:6c:b0:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:40:16 2025 GMT
            Not After : Dec  6 23:59:59 2025 GMT
        Subject: serialNumber=88431d1a9f7c4fb3d8ce2cadc493a4144a8cbfbd60c7adff5889a498e7c83051, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c6:d5:97:51:48:92:94:e3:c9:e2:1e:b4:4a:
                    ac:ef:d0:12:34:a4:e2:7d:eb:36:f7:08:6b:22:6d:
                    70:dd:b1:03:4a:ac:97:40:79:e7:50:f6:9b:a1:1c:
                    fb:22:51:d3:f0:f2:d4:94:d3:ba:3b:18:bb:4e:bd:
                    8c:f2:a2:77:db:46:67:58:16:41:fe:4b:da:d8:10:
                    4e:f7:dc:13:fb:49:f7:8d:86:fe:9e:d1:01:6e:28:
                    99:e1:9a:6e:af:84:44:28:60:d2:4d:9b:11:05:dc:
                    00:5d:a7:29:d8:1d:f5:de:94:ad:2f:39:9b:a6:b9:
                    90:26:63:d6:f6:e0:49:f4:f3:d3:cc:b3:89:99:6a:
                    d8:1f:cf:46:48:d8:7c:9f:9b:14:1d:e5:e4:87:f1:
                    7c:37:84:6c:f5:d2:1b:be:91:28:26:cf:d8:f7:fc:
                    85:02:a8:b7:1b:2a:c2:fe:76:bb:e0:ab:17:44:3f:
                    fa:24:00:67:50:0b:82:4d:c5:db:55:ef:68:c7:a7:
                    7f:13:52:1a:a8:05:45:13:15:50:62:34:0d:de:9b:
                    5d:a3:a0:0b:91:70:6e:19:d6:ae:cb:35:31:d1:8c:
                    a1:f6:35:dc:2e:b4:be:b1:70:f7:11:fe:a0:5a:b7:
                    98:58:c1:1a:ac:3b:cf:76:04:29:9f:c8:b4:f8:c3:
                    f7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:61:6F:F9:0D:D0:68:7D:2C:32:BE:E1:34:2B:3F:51:3E:EF:72:06
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75dc0196-dbba-412b-92e6-c3cb6a606623.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.145.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b7:44:73:a4:95:ef:64:b8:15:51:e3:77:2e:ed:5e:07:b0:86:
         17:e8:78:d2:4b:aa:a9:e1:36:ac:e7:bc:7a:18:83:d2:5c:35:
         09:7e:4f:76:31:3d:83:16:24:26:57:1c:56:34:4d:d1:e1:81:
         0c:4f:f4:bd:a2:d1:54:8d:c0:90:fa:21:1b:43:21:ae:88:c5:
         cc:31:75:35:99:7e:d6:8f:ed:30:3e:2b:d3:2f:a6:01:d8:dd:
         c2:be:15:77:1e:6a:ba:1c:f0:a8:59:06:18:20:9e:27:b4:68:
         a6:11:fc:87:98:c9:fb:13:26:a7:9c:0b:de:14:63:44:5a:d4:
         55:dc:81:f3:bb:ba:ee:7c:00:08:40:9f:d1:fe:3b:81:6b:5d:
         8d:c9:3d:f2:62:d4:7b:50:c3:5d:12:3b:e6:5e:52:c6:c2:12:
         88:0e:b3:a9:f9:94:33:7d:bf:fb:eb:70:8c:a8:00:06:80:b6:
         7c:fb:f3:50:68:bf:61:0e:c1:d5:74:5c:84:26:e8:6b:e6:21:
         f2:15:8f:5d:78:bd:32:03:56:eb:fe:cf:30:02:eb:2b:0f:c5:
         25:c1:5e:b7:96:04:8f:1c:12:15:11:91:b4:b6:9f:85:c6:b3:
         d8:83:b3:d2:c0:6a:a7:e4:68:d6:03:00:47:e6:2a:fd:e7:47:
         b2:a9:c8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----