Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/342b16eb-59d4-444a-a8d5-604675472c36.roa
File:                     342b16eb-59d4-444a-a8d5-604675472c36.roa (raw, json)
Hash identifier:          nLWpWNRp0ZgHIC5n8AbweNwilzriEGse+OnK4I0Ja14=
Subject key identifier:   EE:8A:F2:8B:6C:37:EF:85:27:C0:15:67:20:E5:01:33:AF:3A:71:3F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       33E48F391524EB040B737F5652D7875CB55D30E8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/342b16eb-59d4-444a-a8d5-604675472c36.roa
Signing time:             Mon 06 Oct 2025 15:40:51 +0000
ROA not before:           Mon 06 Oct 2025 15:40:51 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.162.16.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:e4:8f:39:15:24:eb:04:0b:73:7f:56:52:d7:87:5c:b5:5d:30:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 15:40:51 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=3d10aab77372ad58dc313a814fbc039d26244e19ccd7aa044cd6a30eddee317a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:36:8f:cc:ed:34:a2:48:3a:f2:b7:ef:00:04:
                    03:f8:63:6c:3d:82:31:32:20:9e:09:f8:0d:34:44:
                    71:f1:a5:99:d6:d4:70:00:5e:f2:63:96:75:34:b3:
                    e1:c3:91:2c:72:63:17:04:27:63:7d:19:7e:82:10:
                    09:47:a8:23:40:7f:5a:85:42:65:6f:51:45:d8:e6:
                    e3:ad:b5:cf:2d:aa:5b:fa:0a:06:b8:02:ff:4a:5c:
                    cc:16:df:b1:d5:f3:22:6f:35:bf:f3:31:1a:43:ea:
                    e6:a7:8b:9a:c8:89:c4:68:9d:3f:56:ba:1c:c3:db:
                    97:a2:a1:35:45:e0:4a:74:5c:c9:a2:19:33:4e:3a:
                    25:6a:72:6c:41:20:38:53:70:62:71:d5:d2:b9:00:
                    d6:fd:48:db:e6:c7:68:94:d2:cb:fa:70:63:2d:2d:
                    f0:e1:14:c2:d7:eb:42:ee:c8:ca:68:2e:9a:ff:c2:
                    ee:55:dc:44:be:a2:89:39:b1:2f:47:d9:d0:06:18:
                    10:37:6c:68:96:e5:cf:f1:46:7f:1d:4f:d6:79:a2:
                    ca:e3:24:ad:de:9a:68:66:35:9d:be:65:23:ce:35:
                    32:69:15:d2:b4:eb:31:6f:a0:3b:e6:01:3c:7d:32:
                    2d:36:9b:f6:20:7f:37:44:45:fc:98:64:bb:c9:d8:
                    cd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8A:F2:8B:6C:37:EF:85:27:C0:15:67:20:E5:01:33:AF:3A:71:3F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/342b16eb-59d4-444a-a8d5-604675472c36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.162.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:4b:a3:2a:70:34:73:f9:6a:3e:be:6d:75:ca:4f:0e:3d:38:
         4f:d1:44:21:af:85:61:d7:1a:10:e8:f0:a9:cd:50:58:69:f3:
         e1:94:aa:e9:eb:a1:98:82:06:f6:3c:72:6b:5c:52:01:a9:10:
         4a:d2:58:b3:f5:c3:ab:dd:6b:e8:84:b7:11:e2:2c:fa:d5:b1:
         fe:91:19:ad:c4:20:60:3e:cc:45:c9:03:7c:3d:fe:0e:1a:08:
         c0:ba:16:bd:78:dc:62:78:0f:8a:d0:94:3a:69:5f:d7:a4:df:
         37:42:cb:53:32:7c:a1:63:27:a0:81:28:a2:66:27:c7:b0:5c:
         3a:b2:9d:a0:81:29:c4:20:6c:64:38:c4:69:c9:cb:c3:d0:fc:
         5b:04:b0:cf:e6:6c:f1:33:1d:44:2d:0f:a1:a3:53:bc:1a:fe:
         03:26:7b:28:1c:d1:85:fb:38:93:f2:55:e4:5d:f4:72:1a:4d:
         8f:46:b2:5f:71:06:69:37:c6:33:24:97:ca:cc:fb:12:29:f6:
         32:a1:9b:93:f2:04:d0:4c:dc:16:c5:cb:28:5d:6a:04:76:96:
         d1:2f:4d:b0:75:ac:2d:57:53:e6:3d:fe:90:a4:e8:47:e5:81:
         af:54:32:23:2f:83:1f:b9:df:d9:b6:7c:a4:29:ed:c3:22:07:
         de:e6:c9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----