Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7a1b9a2-08ba-4846-ae5b-9e5380ab858d.roa
File:                     e7a1b9a2-08ba-4846-ae5b-9e5380ab858d.roa (raw, json)
Hash identifier:          5mc0UP36Em0FPPz2+aKZdu5nT2HJFpKPbss3oozhHLw=
Subject key identifier:   AF:87:3C:12:63:6E:6A:F8:05:B5:12:4C:ED:91:8B:FB:A9:74:C3:F8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       17ECE9DE07700E0C95A4663DDF7382822BD4B461
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7a1b9a2-08ba-4846-ae5b-9e5380ab858d.roa
Signing time:             Wed 22 Oct 2025 00:00:56 +0000
ROA not before:           Wed 22 Oct 2025 00:00:56 +0000
ROA not after:            Wed 26 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.50.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ec:e9:de:07:70:0e:0c:95:a4:66:3d:df:73:82:82:2b:d4:b4:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 22 00:00:56 2025 GMT
            Not After : Nov 26 23:59:59 2025 GMT
        Subject: serialNumber=ba5bcf09186cf9ff2a8b5a06623d14ae0569ae2c7649e14aa573753496e0230c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:60:8d:9e:f5:bc:63:d0:b7:37:bc:9d:9a:31:
                    75:b3:a1:a9:4b:b1:89:ff:f9:47:4e:58:7e:0b:26:
                    51:af:c9:1d:11:f2:08:24:89:e5:6e:b8:eb:80:56:
                    94:97:3b:74:b0:9d:ec:db:2c:fe:a0:7b:43:a3:68:
                    23:cf:c8:58:c5:83:de:9d:e4:64:9d:9e:93:ed:11:
                    8a:cc:0a:d6:3c:37:5e:b0:3e:30:9a:9f:07:62:81:
                    80:89:a1:07:06:9f:ae:7d:15:ab:b0:3f:1e:81:d1:
                    30:38:aa:cf:23:22:0d:a2:f1:e0:9d:fc:ff:8a:78:
                    4b:4f:e6:38:66:10:81:4a:1b:ed:0c:e6:85:20:14:
                    e3:c2:b3:66:b5:bc:8b:a2:37:64:e6:eb:b5:a5:f1:
                    bb:1b:ab:5e:83:18:0b:a7:85:02:25:3b:3b:b7:e1:
                    87:04:76:1e:c3:24:30:17:e2:2c:74:08:c7:20:db:
                    72:4f:ee:aa:ee:c7:b9:3d:5c:26:d2:58:3b:38:b4:
                    d7:ca:b6:2d:0e:38:30:fc:37:e1:17:0c:9b:5d:44:
                    93:71:93:88:0d:ef:b4:30:04:75:93:96:fa:ff:7f:
                    36:52:1e:cf:9c:7d:86:30:29:4d:47:49:92:7d:aa:
                    18:b2:f0:14:d6:9c:c8:87:a2:fb:03:db:e2:a1:fb:
                    e6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:87:3C:12:63:6E:6A:F8:05:B5:12:4C:ED:91:8B:FB:A9:74:C3:F8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7a1b9a2-08ba-4846-ae5b-9e5380ab858d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.50.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         96:d9:cc:ff:2c:f1:6f:e6:25:6c:7e:49:02:0a:70:7e:23:9a:
         6d:6a:89:c9:9f:6a:8a:ff:da:38:5a:92:97:f4:bc:22:ba:1e:
         42:93:f5:fb:eb:db:84:ea:e2:22:c2:7e:ae:b8:f8:d1:be:f4:
         26:f3:50:21:03:b3:04:2b:b2:c9:b9:db:17:1d:b7:89:39:18:
         92:16:2b:50:37:f8:70:9a:d0:81:64:8f:67:da:8c:01:0b:58:
         28:b9:53:53:84:70:3b:85:f3:6d:7f:ce:fd:f8:61:71:95:fa:
         d4:87:7d:9f:b7:6d:1c:f1:1b:ba:1b:2e:6f:35:02:bb:4a:6e:
         f7:62:86:61:76:52:37:61:9c:d6:e8:6f:ce:f6:c6:59:23:34:
         70:b9:72:f3:5d:73:37:51:9b:34:a3:5d:d3:b1:4e:c5:cc:48:
         55:47:95:8c:0f:6d:83:d2:3c:b3:e8:90:52:1e:d9:9f:03:96:
         24:e2:35:c3:a2:59:53:7b:15:c8:cb:b8:d3:b3:3a:68:4b:ed:
         44:f1:d3:cc:b6:81:85:1c:a9:e3:33:f2:b3:0a:0e:55:e7:0a:
         8a:54:d8:84:fe:98:c8:73:24:c0:9a:0b:7c:75:ae:62:0a:41:
         8f:d7:32:d4:aa:35:e8:a0:90:39:34:fe:65:48:3b:94:2f:db:
         85:e6:d1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----