Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbf95d8a-4d2a-464c-9f53-186ec00ccc20.roa
File:                     dbf95d8a-4d2a-464c-9f53-186ec00ccc20.roa (raw, json)
Hash identifier:          tNeewGHNz3MDi7mw/jD8VvNqEWLt28PKDuqgxmEwLz4=
Subject key identifier:   2B:69:F8:CC:1E:25:11:19:47:72:CF:D8:87:CD:E3:A5:70:D8:7A:FC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6D1366EE1CD638D19CF61529E03897BBE604D3C3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbf95d8a-4d2a-464c-9f53-186ec00ccc20.roa
Signing time:             Sat 01 Nov 2025 00:30:18 +0000
ROA not before:           Sat 01 Nov 2025 00:30:18 +0000
ROA not after:            Sat 06 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        56.131.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:13:66:ee:1c:d6:38:d1:9c:f6:15:29:e0:38:97:bb:e6:04:d3:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:30:18 2025 GMT
            Not After : Dec  6 23:59:59 2025 GMT
        Subject: serialNumber=8efb4e028a85b5899c8a11ec623b67ba5ebe5f8f2df0ce28ef14a06c92e4d009, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:af:c3:b6:e4:07:cb:2f:c9:09:a4:21:14:9d:
                    08:c3:6f:4e:a3:69:f0:39:56:bb:d4:27:95:2c:48:
                    94:82:7d:f1:8f:f8:fa:e2:e0:47:bc:b3:33:aa:5d:
                    1f:e6:c3:57:72:39:f7:80:af:75:4e:52:95:e1:4c:
                    bd:45:32:6c:fc:34:88:37:a4:9d:af:36:6d:be:5e:
                    d2:f8:99:42:c0:c3:d4:aa:15:1c:3c:f4:de:bf:1a:
                    6d:3f:44:be:d4:9e:83:01:14:cd:bd:72:53:3f:23:
                    4a:c2:0b:79:20:4a:ed:5a:bd:25:b2:55:0d:c4:c8:
                    af:e8:db:31:fd:70:cb:99:28:f1:c6:00:ae:04:ae:
                    d1:4d:aa:d9:2a:78:f2:60:87:0b:75:f2:7f:e1:de:
                    92:e3:a9:7e:6d:1e:49:60:f1:27:89:1d:19:ba:d8:
                    5f:7e:d2:88:0f:90:37:7a:79:5d:07:fb:1a:c6:21:
                    7d:e2:78:0d:12:4f:07:91:e0:17:58:23:43:c4:c6:
                    0d:9b:be:83:a5:3a:11:1b:b3:41:88:ca:f6:af:9b:
                    fc:ba:88:f9:c1:54:71:67:ce:2e:93:86:48:89:20:
                    fe:d6:21:e9:3e:e1:88:83:4b:22:d7:cb:67:a8:c7:
                    ab:29:94:06:2f:5f:39:a2:06:99:ef:34:8c:82:21:
                    86:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:69:F8:CC:1E:25:11:19:47:72:CF:D8:87:CD:E3:A5:70:D8:7A:FC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbf95d8a-4d2a-464c-9f53-186ec00ccc20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.131.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         51:d9:9e:c9:c8:aa:67:df:f9:de:33:d3:ee:89:d5:a3:5f:73:
         4a:40:dc:96:1d:8d:b5:7d:87:50:e5:e2:0e:29:07:fa:e9:4f:
         96:09:97:4e:c5:65:b7:21:96:f4:31:71:40:19:0d:8e:22:c2:
         c4:1c:64:c8:0c:39:ee:8a:d8:64:f1:b5:8c:07:ea:e9:c3:d1:
         d6:c4:fc:4d:24:59:fe:f4:09:af:0c:ec:ac:26:a7:fb:65:a8:
         73:e2:36:03:79:a9:3f:2a:32:fc:2e:15:88:3f:52:bb:7c:9c:
         4c:65:62:40:d7:0a:b2:e2:39:cc:0f:71:bf:26:7c:cf:3a:04:
         0a:65:78:d2:fb:27:77:04:b2:43:bb:05:83:f5:32:8d:f5:f4:
         76:cd:e5:bc:33:43:7a:dd:7b:13:c1:00:72:af:be:59:ae:ac:
         39:29:f5:7c:0b:fc:54:5f:a3:86:b4:74:65:2c:e5:03:c3:06:
         4c:87:44:a6:6d:fa:81:6e:d4:39:12:a4:58:82:ed:8a:64:d3:
         02:29:8d:bd:78:c0:ec:67:de:da:52:06:99:39:64:9b:69:f7:
         16:94:b9:cb:2d:5d:11:3e:29:15:64:9e:a2:4d:a7:2f:6f:e1:
         78:44:71:17:11:bf:5c:ed:f0:60:7e:ef:b2:89:a6:8d:4c:24:
         e8:79:33:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----