Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c85cdbd-6214-4c47-8eaf-a92a7648fdc0.roa
File:                     4c85cdbd-6214-4c47-8eaf-a92a7648fdc0.roa (raw, json)
Hash identifier:          zPU6RlkxV5Q5B60mfjwu+GZdD5kTlNfq4F3xT/7V87M=
Subject key identifier:   32:FF:91:68:C4:C0:8F:51:D9:DA:2D:CD:7F:05:35:CF:84:3A:1D:E9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5D9C0FD60E7CACE93394934D1D8DE7199D1BBA71
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c85cdbd-6214-4c47-8eaf-a92a7648fdc0.roa
Signing time:             Tue 18 Nov 2025 00:20:04 +0000
ROA not before:           Tue 18 Nov 2025 00:20:04 +0000
ROA not after:            Mon 16 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.155.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:9c:0f:d6:0e:7c:ac:e9:33:94:93:4d:1d:8d:e7:19:9d:1b:ba:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 18 00:20:04 2025 GMT
            Not After : Feb 16 23:59:59 2026 GMT
        Subject: serialNumber=5a04162c70dbfa3f402695616ffe4638ddefcf0f1d5f8c64963ec01584a94e73, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a9:52:e6:d5:a8:54:5f:e3:48:15:af:75:45:
                    df:7b:3b:7d:65:95:f6:b1:86:6f:95:33:ab:e4:0c:
                    f7:48:55:0b:38:69:2d:7d:75:c9:98:29:6f:f1:76:
                    5c:08:d5:b5:9b:b9:a2:0c:2d:5d:25:51:fc:76:9b:
                    9b:cf:2d:05:9c:5e:b5:b7:13:cf:b9:1c:32:b1:91:
                    b7:cd:a2:ad:b9:ce:49:65:1b:ef:1b:d6:57:00:3b:
                    43:f9:80:49:63:a0:48:0e:fd:14:2f:f1:86:49:98:
                    62:92:77:d3:9e:94:7b:2b:af:ac:9f:4c:8d:a0:ba:
                    56:d0:76:1d:65:1d:76:d7:c5:93:83:da:3b:ac:35:
                    7a:78:66:0f:bc:0d:53:04:43:b1:d4:4b:67:49:6f:
                    e8:dc:82:50:a4:4a:49:5f:ba:ab:f8:63:f5:c7:17:
                    4a:30:5c:2f:3f:3a:ef:02:e3:05:18:da:42:3f:e6:
                    6e:f7:e8:2f:b0:c9:5e:af:17:69:57:b2:d9:a1:e6:
                    f1:b1:18:d8:0b:31:70:3d:ea:e8:7f:8c:31:d9:4e:
                    3d:d3:9f:7f:75:eb:69:05:6a:8b:67:65:c7:a1:fd:
                    87:d1:88:cd:14:4d:d6:0a:2f:6d:1e:fe:a4:ba:43:
                    56:b7:d0:4d:0e:2c:2b:5c:a5:e6:51:bb:02:bd:9c:
                    cf:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FF:91:68:C4:C0:8F:51:D9:DA:2D:CD:7F:05:35:CF:84:3A:1D:E9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c85cdbd-6214-4c47-8eaf-a92a7648fdc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.155.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         87:85:40:01:bb:8d:b7:70:96:c7:cf:e9:80:02:37:6e:bf:04:
         ce:35:fc:cf:8f:e7:3c:b5:cd:ab:a5:dc:58:b8:bc:20:e2:3f:
         15:a0:4e:bb:92:4c:86:9c:d4:1b:26:7d:6f:30:38:1d:f8:fe:
         8c:df:87:3a:0d:6a:37:a8:57:73:01:aa:ac:6a:eb:0b:23:ac:
         f0:5b:e1:33:d7:b0:fa:6e:cc:38:b7:48:33:3f:48:75:ac:d3:
         41:62:21:8f:da:9f:1f:39:d6:e4:dc:60:29:97:2d:6d:6e:32:
         af:ba:16:a7:48:05:76:e2:22:d1:63:51:4b:96:57:59:ac:0c:
         f3:37:e8:57:b1:2a:68:77:f3:75:51:bc:78:68:43:00:63:4c:
         f3:82:63:78:e2:66:dc:7e:b2:96:17:0d:c5:5e:43:85:ae:83:
         36:08:ff:44:50:b7:fe:5e:bd:b4:76:7a:e2:d9:90:9c:ae:b2:
         ca:2e:f3:04:2b:81:e8:54:3f:51:03:ba:b3:c8:58:d4:54:b1:
         75:22:a0:54:ad:55:97:af:a1:26:b8:81:a8:f4:84:db:2b:79:
         e2:d9:a5:ef:f5:b8:ee:54:b1:2a:a0:89:23:2f:45:1c:f1:04:
         7a:ec:7f:b6:85:4a:27:80:3c:80:af:0f:b9:69:6d:51:9b:ec:
         47:8a:11:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----