Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6687311-488e-473d-bc78-193601f688df.roa
File:                     a6687311-488e-473d-bc78-193601f688df.roa (raw, json)
Hash identifier:          P3B2OlRZy8ecx/U23EntARNL1YN6IKR/blp1NFPewjs=
Subject key identifier:   B1:46:B5:2F:39:4E:D4:AC:7B:6A:BE:7A:0B:30:BC:94:AD:53:0A:E0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       14FAB3A1CCBAFBA96AE3524919DC42C4CCEB38C1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6687311-488e-473d-bc78-193601f688df.roa
Signing time:             Wed 29 Oct 2025 00:20:13 +0000
ROA not before:           Wed 29 Oct 2025 00:20:13 +0000
ROA not after:            Wed 03 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.10.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:fa:b3:a1:cc:ba:fb:a9:6a:e3:52:49:19:dc:42:c4:cc:eb:38:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 29 00:20:13 2025 GMT
            Not After : Dec  3 23:59:59 2025 GMT
        Subject: serialNumber=518a43a77ecc5d2efd56a0a0057c94997d591ed85668239224839025408267c0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:39:c5:b9:29:93:41:80:b6:18:9a:db:7d:73:
                    09:82:f8:9d:59:32:30:fa:84:27:a5:aa:a3:28:f1:
                    99:e8:d5:cd:4c:55:80:a1:11:49:d9:ee:eb:2e:fb:
                    a8:36:b9:9f:75:76:de:35:78:08:9e:3d:1f:d8:45:
                    33:e4:96:fd:a5:01:cf:b6:82:72:5d:f7:72:3f:6a:
                    41:06:9d:7a:34:a0:21:e2:13:58:ce:35:20:79:7e:
                    de:ee:8e:36:47:47:13:f0:c8:4c:54:e3:07:de:31:
                    85:6c:13:86:fd:21:16:ec:9f:c6:5d:81:0f:84:47:
                    21:4f:c9:a4:4a:01:09:f2:e1:b2:51:b0:77:61:19:
                    0e:25:b6:5b:9e:ce:9a:fb:d9:5c:c1:88:38:9c:cb:
                    e5:d7:a1:46:04:6a:ff:ea:5e:3e:c6:d5:31:0b:9c:
                    57:67:a4:21:91:91:54:42:17:0e:a4:e8:e0:c7:18:
                    06:93:1d:c7:57:1c:c3:04:13:26:26:dc:09:e6:48:
                    63:32:b8:a3:b2:83:6a:f4:dc:51:74:ff:e4:f1:ba:
                    e0:9a:83:eb:66:b5:05:fd:5b:c1:b8:d7:1c:2d:0f:
                    10:2f:cf:9f:44:3f:62:1f:81:b7:f7:ad:b0:59:1b:
                    10:30:9b:90:85:7a:a5:2e:55:35:92:da:90:a1:b5:
                    4e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:46:B5:2F:39:4E:D4:AC:7B:6A:BE:7A:0B:30:BC:94:AD:53:0A:E0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6687311-488e-473d-bc78-193601f688df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.10.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         52:77:7c:9e:9b:d0:c1:d2:6e:83:9a:c8:24:24:64:c1:b6:2a:
         cd:59:b3:c5:49:a3:59:5c:72:c3:89:1f:6c:32:5a:a3:22:65:
         7c:18:58:21:b0:19:4c:90:0d:90:f6:09:12:a4:0f:21:94:7c:
         89:ae:f1:ec:2c:4a:fd:38:eb:28:97:52:64:99:4d:91:52:fa:
         70:f9:ab:a8:75:08:d6:ee:de:b2:ed:1a:0d:ba:07:56:f6:8a:
         64:72:3a:cb:e7:8d:44:81:50:24:f8:ef:bb:bd:a7:0c:09:13:
         7b:1f:16:ad:e0:09:db:9d:fe:8b:1d:f3:fd:63:0a:c9:6b:11:
         37:84:32:16:e5:33:ec:53:c7:66:67:6c:b9:60:3a:49:ae:7f:
         db:17:cf:f5:9e:8d:d9:0e:c1:02:77:78:b4:20:2e:1e:63:df:
         9a:a3:55:b4:3c:ab:6a:8a:c5:fa:3c:56:74:a3:a0:bd:f8:20:
         d1:b2:1a:05:d7:0b:91:95:d9:7d:60:f2:05:49:2c:90:27:bd:
         21:e2:fb:15:7e:b8:0d:cf:1a:39:f8:b3:af:9b:55:c2:67:44:
         fb:0b:f6:a8:21:b0:e8:d4:d3:df:30:ec:25:b4:24:f0:e2:0f:
         d9:19:fc:4f:28:f2:b9:ac:4b:35:6e:41:80:0e:37:f2:1b:1f:
         a9:b1:6b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----