Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc204192-f54a-4a24-b693-905fbf433b73.roa
File:                     cc204192-f54a-4a24-b693-905fbf433b73.roa (raw, json)
Hash identifier:          FJraAYHBYqj/Nw5c42xPTww1t+Q+prnuodCEL13cXjo=
Subject key identifier:   22:0F:86:D1:CB:9D:E6:C7:E7:FC:84:87:75:26:E6:32:8F:A0:D9:6F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       60465DA2E4C177D044BB8CAF3B151CD2060AE17A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc204192-f54a-4a24-b693-905fbf433b73.roa
Signing time:             Sun 02 Nov 2025 00:20:41 +0000
ROA not before:           Sun 02 Nov 2025 00:20:41 +0000
ROA not after:            Sun 07 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.81.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:46:5d:a2:e4:c1:77:d0:44:bb:8c:af:3b:15:1c:d2:06:0a:e1:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  2 00:20:41 2025 GMT
            Not After : Dec  7 23:59:59 2025 GMT
        Subject: serialNumber=0986243fd0fa83a4beeb962dfcbbd920d0ddc0ccdcb2e45d1e203216d3752b23, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:aa:f2:b8:ea:d8:93:25:fb:60:52:74:71:47:
                    a2:9d:55:54:1f:1c:69:b6:23:79:db:9d:72:81:bd:
                    15:aa:e1:6b:a1:94:f9:fc:74:94:a3:0b:9a:d8:18:
                    68:fe:87:05:bf:b4:79:b4:c5:b2:4a:97:a2:4c:8a:
                    d3:03:e7:21:cd:81:dc:32:3e:9d:38:f3:2f:8f:45:
                    f7:02:44:5c:73:2c:1a:b3:ef:2a:a6:bf:82:31:1d:
                    a9:b6:71:dd:14:4c:46:99:f2:30:7e:60:95:3c:a4:
                    36:ec:c4:c7:38:38:e7:12:2b:aa:30:f0:40:e3:25:
                    8e:82:dc:ce:5f:01:cc:43:08:45:dd:f0:de:1c:73:
                    cd:a6:58:14:04:6f:5f:d3:af:90:10:47:7f:27:be:
                    5f:a4:d5:ec:ac:4e:8b:8d:2e:ee:94:cf:22:be:34:
                    48:b8:15:04:73:95:13:0f:6c:8a:ed:4a:24:96:09:
                    c6:c4:56:ec:66:b1:c0:2d:2f:9c:d9:6a:ee:cb:60:
                    77:83:0c:53:b9:63:87:b2:ce:c5:08:2e:83:54:21:
                    94:20:1a:c8:82:2d:b5:2e:ad:d8:fb:e7:b7:0d:9a:
                    e2:49:7f:f5:23:ca:db:be:b7:ba:8e:59:70:2c:84:
                    1b:0d:c7:3d:e6:ae:1b:66:f7:bd:7f:0b:08:2f:13:
                    aa:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0F:86:D1:CB:9D:E6:C7:E7:FC:84:87:75:26:E6:32:8F:A0:D9:6F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc204192-f54a-4a24-b693-905fbf433b73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.81.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1d:62:9e:81:40:8c:5c:e6:ab:c7:10:6e:86:86:75:16:4b:48:
         1a:d0:a0:20:d4:8c:6c:2c:c3:1d:f4:bc:be:2a:ee:0e:b6:45:
         af:b7:33:e4:30:55:fb:ef:d9:f8:f5:8b:9b:9b:d2:80:33:21:
         b7:71:2b:40:2d:10:d7:cf:a5:a3:f8:ff:72:00:ee:2c:87:58:
         39:f8:f1:67:fc:72:08:ef:16:ac:25:48:71:21:7d:d2:61:00:
         ee:ee:03:a1:17:f1:cc:dc:0a:30:25:54:b6:7b:9a:84:7a:ba:
         44:47:36:f8:df:70:0c:7b:b7:9c:68:96:03:f5:ed:b9:7b:35:
         63:cb:46:c2:a8:70:b9:5f:df:b0:d7:2d:ed:39:ed:55:5d:a9:
         c9:d3:8b:53:a8:fe:d0:a1:cd:c3:4d:cb:3f:c9:14:31:1f:ff:
         51:b9:10:45:72:e0:78:30:3e:ce:0d:b8:14:fc:65:77:9f:bf:
         85:d2:d8:ad:36:63:80:6e:26:e8:ab:37:0f:f1:fe:1d:4c:8a:
         73:7f:7d:ca:e4:84:99:26:ce:88:d0:87:45:47:2a:11:49:4e:
         74:bd:4d:17:8e:0e:cd:c6:c7:a5:c1:a3:d3:39:07:fe:5a:b7:
         39:30:17:38:10:a5:00:5d:89:e6:60:d4:72:e2:45:d2:ba:09:
         af:ef:89:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----