Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1432a9a7-007c-46b8-8341-81804983fe16.roa
File:                     1432a9a7-007c-46b8-8341-81804983fe16.roa (raw, json)
Hash identifier:          dbojg17MopuMSc1rj0hPZpNml2xP48zNBEdJtHUOL3s=
Subject key identifier:   CA:3E:9D:61:F7:23:24:B9:14:CD:C5:A6:7A:D0:2A:A5:27:8D:91:44
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       65352546DB987B1FC05A64B1E3B2ADEA2229D341
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1432a9a7-007c-46b8-8341-81804983fe16.roa
Signing time:             Fri 26 Sep 2025 00:11:33 +0000
ROA not before:           Fri 26 Sep 2025 00:11:33 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.61.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:35:25:46:db:98:7b:1f:c0:5a:64:b1:e3:b2:ad:ea:22:29:d3:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 26 00:11:33 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=02df75033dfbd4a302a53ed44060ed21a26ef8e545af55f4cb71d8a66715dccf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:fa:52:e7:6f:07:f4:eb:41:11:20:51:62:15:
                    c7:f6:90:74:b4:0d:61:02:29:bf:0f:fb:77:19:e4:
                    42:82:af:7d:a2:7f:c4:2d:85:f9:e2:7a:98:72:2d:
                    60:cc:fe:4b:8b:44:ac:91:ba:ed:e3:c6:d9:d3:1e:
                    f4:b8:e2:80:28:93:58:5c:45:20:fe:fb:e8:51:95:
                    fc:4f:94:fd:ad:ea:f0:db:cb:ec:6a:df:b8:b4:ea:
                    03:ac:16:a4:6c:7d:bd:3d:11:13:99:8e:10:d6:d8:
                    1d:ef:c2:83:c5:06:9a:60:5b:57:9a:58:c3:0a:e0:
                    1b:88:c8:ae:07:dd:94:c6:dc:fd:15:c4:54:67:41:
                    1b:75:d2:e6:b3:b9:a7:99:e2:54:3d:1c:06:77:3f:
                    e6:d3:d2:e0:d1:d2:7a:bc:e4:d3:76:fa:fa:6d:ec:
                    77:04:96:1b:7e:5e:85:51:f1:19:eb:02:ab:a7:d9:
                    51:13:c7:2b:81:80:46:ef:05:00:01:5d:26:89:bf:
                    e6:0a:19:e3:76:fa:67:61:0e:cf:1d:ae:c1:09:02:
                    12:34:5b:87:be:f1:b9:82:fb:37:9d:c4:f3:a5:81:
                    66:3e:cf:80:00:7c:8b:a2:be:7e:ca:e9:30:6d:ed:
                    0e:56:fa:6d:a6:e3:94:ac:b5:91:ae:73:b8:45:a0:
                    6a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:3E:9D:61:F7:23:24:B9:14:CD:C5:A6:7A:D0:2A:A5:27:8D:91:44
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1432a9a7-007c-46b8-8341-81804983fe16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.61.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c7:35:c6:e6:d6:08:59:6a:cb:c9:a8:b0:86:29:23:26:1e:5c:
         3a:7b:b1:4b:38:8c:a8:14:4e:5b:74:44:f6:d1:9a:fc:8f:c9:
         65:aa:88:40:3e:6c:21:0b:26:92:7a:7f:67:a4:89:8f:bd:c7:
         01:8b:c3:18:52:30:be:72:ae:a1:ab:9e:73:0c:15:b3:2e:1c:
         a3:bf:70:bd:e0:15:e0:bb:ee:bc:9f:f7:d7:d7:ed:64:92:09:
         91:4d:57:61:d8:c4:a4:2d:a1:b3:1d:0d:37:24:3c:7a:02:c9:
         08:f5:cb:bb:0a:8c:41:13:17:f4:7d:a6:db:64:d4:c9:43:aa:
         cc:ad:a5:11:47:82:ee:3c:ef:cc:b7:1d:70:8e:ab:7e:de:b3:
         00:c8:ee:b2:50:28:2d:b0:4e:a3:c4:6a:60:f0:33:14:a1:c6:
         d4:78:e1:ee:0a:89:19:23:77:3b:2a:ee:3d:9a:9e:9b:9c:e6:
         43:64:aa:d7:5e:c2:ca:d0:83:cb:06:ab:32:93:36:f1:da:82:
         b4:49:db:4c:0f:44:a8:6e:03:93:2a:85:44:1a:af:0b:ad:8f:
         9f:2c:ca:0c:8e:75:d3:8a:27:88:02:ac:76:58:3e:00:03:c2:
         9a:85:78:fe:46:b0:1e:ff:c2:8a:48:27:80:12:73:de:df:46:
         6c:9f:9e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----