Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07362990-fdea-4902-8ba4-3d2db0e1c1a4.roa
File:                     07362990-fdea-4902-8ba4-3d2db0e1c1a4.roa (raw, json)
Hash identifier:          RarQvAfNej/a6/ZY/dYw06k+UoG0m/zZLsGTz+lDrY8=
Subject key identifier:   DC:B6:9E:B0:4C:E9:5C:3D:3C:0A:E0:8F:FE:70:C2:DD:F4:71:F2:31
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1F20EEBC08EB2E85F4791330BDD5D30C7EA3CDB8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07362990-fdea-4902-8ba4-3d2db0e1c1a4.roa
Signing time:             Thu 13 Nov 2025 00:50:05 +0000
ROA not before:           Thu 13 Nov 2025 00:50:05 +0000
ROA not after:            Thu 18 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.208.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:20:ee:bc:08:eb:2e:85:f4:79:13:30:bd:d5:d3:0c:7e:a3:cd:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 13 00:50:05 2025 GMT
            Not After : Dec 18 23:59:59 2025 GMT
        Subject: serialNumber=251d374ff00d97712a74e92c08a65561625f025e73f74db368f2c56b7187c5af, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:22:c1:b8:0b:c0:89:52:ba:96:d5:76:65:3a:
                    ae:ca:91:9d:d5:1f:45:ec:04:ac:c5:b8:fa:d3:9b:
                    44:7d:1e:b0:03:4b:d6:3b:3a:7a:8f:5c:ac:0b:97:
                    3b:ac:8f:3c:75:5d:05:50:55:90:89:91:d1:d2:28:
                    6a:01:6d:d2:6c:5b:d7:e3:be:0d:e2:06:17:9e:77:
                    f3:0d:3f:e3:7a:29:18:0b:93:de:ca:50:00:e8:aa:
                    14:a6:5c:c4:c6:14:d7:89:75:1a:d5:da:2a:8d:8c:
                    e1:c3:7f:1d:77:15:99:48:c7:90:e4:e9:16:bc:09:
                    16:86:18:e6:f7:cc:e9:90:66:52:b6:f8:3c:9d:b6:
                    3b:43:4e:5a:60:43:9c:63:f8:2a:4a:cf:5a:2d:aa:
                    8d:39:7d:93:c4:dc:2e:68:43:c0:8d:15:e6:5f:15:
                    98:fb:e6:ff:ca:87:28:95:b8:80:0f:a1:6c:e6:d0:
                    fd:18:77:60:07:6d:b3:c8:f3:6d:45:b8:5f:16:cb:
                    96:28:23:6b:ef:a1:d7:61:22:74:43:3c:af:2e:23:
                    66:0b:0b:de:6e:5a:d3:4f:24:f8:72:2c:96:38:b8:
                    dc:36:1c:81:c6:71:7a:f9:44:ad:20:7e:c6:9f:64:
                    20:64:f8:38:6d:92:70:ae:bc:65:00:1a:65:fe:69:
                    fe:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B6:9E:B0:4C:E9:5C:3D:3C:0A:E0:8F:FE:70:C2:DD:F4:71:F2:31
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07362990-fdea-4902-8ba4-3d2db0e1c1a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.208.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0a:20:45:61:cc:53:05:ae:f7:b7:82:3f:43:60:58:02:96:ab:
         2a:1f:bd:18:d8:f2:3d:df:c7:18:74:2a:f4:0e:95:ad:27:da:
         c0:8b:63:8c:3e:3a:9b:0c:2b:5e:10:82:9a:c2:7f:eb:a0:58:
         f1:9c:75:dd:3d:a2:11:68:22:f1:76:32:f1:65:47:c1:74:91:
         6b:05:0d:45:3d:cd:41:da:07:2e:c0:1a:72:9b:d1:47:f6:74:
         35:2f:79:6c:41:14:cc:cd:62:2d:81:cd:3f:cd:c4:5a:21:8b:
         23:d9:28:9b:53:07:7e:8f:4a:01:75:ac:0d:dd:51:2c:ed:40:
         9b:4c:a2:61:e6:58:81:40:ca:3e:0e:b6:59:43:4d:6e:c6:35:
         8c:6b:6f:f3:4b:e8:6d:b0:05:24:9b:e6:89:ff:4a:c7:48:54:
         92:80:79:cb:18:81:62:80:6e:f9:f3:8d:80:e8:d9:a8:80:dd:
         e1:03:8f:15:bf:f2:59:6f:82:08:0c:21:b6:05:9e:ff:70:49:
         df:84:16:33:48:a0:ac:52:bc:56:72:92:9c:a0:12:8c:1d:44:
         a5:8b:3e:20:f7:35:4b:f2:d4:88:93:f2:59:11:b9:18:c9:dd:
         b1:56:28:59:fa:23:7a:81:73:a0:a0:b5:35:f1:a6:3e:2e:2b:
         6c:0e:90:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----