Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb93c8ab-78dc-4074-b0a7-130e364e7c4e.roa
File:                     eb93c8ab-78dc-4074-b0a7-130e364e7c4e.roa (raw, json)
Hash identifier:          VuHKtdoHHilzlbaYXYJh/7fK3RD+W6JawOz7L0ncbU4=
Subject key identifier:   9A:E0:6A:C6:39:E9:48:61:B3:4B:5D:08:DE:B8:95:A1:9F:6A:8C:8F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5DCC20CEC1435DE8AA0D25C4D6F156CB26398A4E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb93c8ab-78dc-4074-b0a7-130e364e7c4e.roa
Signing time:             Thu 13 Nov 2025 00:30:42 +0000
ROA not before:           Thu 13 Nov 2025 00:30:42 +0000
ROA not after:            Thu 18 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.41.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:cc:20:ce:c1:43:5d:e8:aa:0d:25:c4:d6:f1:56:cb:26:39:8a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 13 00:30:42 2025 GMT
            Not After : Dec 18 23:59:59 2025 GMT
        Subject: serialNumber=e5c16a2e1bcd9c14b892dd73876246a3e62fe01220ce1865abed8ac1dfd55363, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:85:0f:46:12:8b:4b:f4:54:10:3a:5f:9c:90:
                    db:da:71:81:bf:78:15:47:3d:26:1b:91:7c:e2:e5:
                    7a:d2:bc:c3:0a:5d:3d:70:8c:3a:94:f2:9b:a7:da:
                    49:ec:3f:9d:bf:bc:a5:0e:3b:9a:6b:b5:6f:79:df:
                    c4:ae:9b:e3:6b:40:44:8f:34:f3:9d:39:83:47:b8:
                    59:f9:ea:c9:0c:01:9e:be:5f:08:34:33:90:33:47:
                    56:d1:34:74:3a:e9:84:1d:13:e7:a7:f8:b9:65:e9:
                    97:a9:51:97:0f:34:d9:f6:6d:e9:66:1d:32:99:bc:
                    8b:d7:ba:be:8f:fc:72:3e:39:7e:d3:72:2a:95:2f:
                    84:cc:98:03:4f:35:6e:2d:b4:6f:ea:52:89:ad:5a:
                    36:df:34:20:21:c7:b0:47:4c:08:f9:ca:96:3e:d6:
                    d3:cf:f1:39:10:07:6c:72:7e:24:6b:c7:18:97:f5:
                    4a:f3:47:67:08:3b:9e:c9:e2:59:29:f0:72:a4:32:
                    c0:84:de:f7:d3:32:9a:ba:be:78:1a:54:04:f5:68:
                    ee:68:d9:20:d6:d3:32:4c:d1:4b:34:af:69:5b:85:
                    a1:9f:c2:dd:05:1b:e1:76:83:8e:35:59:16:38:dd:
                    8c:26:d5:72:b1:86:87:af:f4:e1:e2:f1:02:9e:5c:
                    c0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E0:6A:C6:39:E9:48:61:B3:4B:5D:08:DE:B8:95:A1:9F:6A:8C:8F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb93c8ab-78dc-4074-b0a7-130e364e7c4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.41.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         80:34:94:98:4a:24:0c:68:2d:9b:44:51:8d:7f:e2:33:f7:6e:
         1d:85:73:e9:f0:c5:8a:07:45:47:ae:77:65:32:23:18:e2:82:
         dc:69:91:b5:98:e2:4b:3c:63:31:8d:2c:62:90:b2:63:08:62:
         00:6c:9a:90:a7:05:c6:6a:28:0d:fc:f7:0f:80:b9:ca:40:74:
         0e:20:83:a1:51:d3:70:af:52:ec:83:61:1f:c0:c9:85:9d:f3:
         33:10:9e:56:84:5e:5f:bc:00:58:56:8b:91:d8:b0:2c:3b:80:
         17:9f:8b:65:ed:70:de:d3:ce:e0:cb:b5:7a:af:14:8e:9e:2f:
         f3:25:14:db:21:f2:f5:39:8c:47:c1:99:46:55:3f:ff:cf:d7:
         af:02:d0:cb:b6:ec:dc:6c:0b:1c:01:08:fd:1c:a3:80:ca:c1:
         1c:0c:61:63:1a:4a:60:41:85:aa:a6:ce:4a:62:15:54:da:08:
         ed:52:e1:ac:4b:01:bb:4e:78:f6:a9:06:b8:a1:dc:92:03:08:
         4f:67:e8:62:fb:e9:06:30:e7:ea:73:e5:97:e8:d0:02:62:38:
         bd:e7:5b:1a:91:de:99:b1:33:89:79:37:3a:dd:e4:89:74:61:
         84:4d:3f:0d:e4:67:bf:ea:7f:d6:c7:c5:41:68:1c:ee:0b:2e:
         b6:93:5a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----