Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/425642c2-ae67-4aad-931d-f508fb8f82b3.roa
File:                     425642c2-ae67-4aad-931d-f508fb8f82b3.roa (raw, json)
Hash identifier:          IXhv0ECEqD4yDnYCTI6OeUwNsSdCIp7HcObufCsPIak=
Subject key identifier:   81:E2:18:70:AC:41:A3:30:12:F5:17:CA:D8:1E:95:F4:B5:54:7D:36
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       393B72EE797D8F34F9A7A24CD791F238F3B43DF7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/425642c2-ae67-4aad-931d-f508fb8f82b3.roa
Signing time:             Fri 17 Oct 2025 00:52:41 +0000
ROA not before:           Fri 17 Oct 2025 00:52:41 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.195.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:3b:72:ee:79:7d:8f:34:f9:a7:a2:4c:d7:91:f2:38:f3:b4:3d:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 00:52:41 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=f8878996937e617dfa8800fe26b8a63959a190a1e5a278c6ac97904d8f1cec9e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4d:db:ed:e1:69:0f:4b:b2:37:a9:ed:3b:2e:
                    b2:65:1f:ac:1e:b0:04:49:4b:e6:9d:4d:26:6d:7f:
                    58:44:a7:76:ff:89:21:3f:72:ee:e9:dd:ea:ff:84:
                    d3:06:f5:6a:0d:5f:9a:e3:9c:18:0d:33:6f:75:69:
                    14:fa:9a:97:fc:63:f5:3f:a2:4a:70:89:dd:e1:e1:
                    b0:fa:9a:5e:fb:eb:74:f2:68:5b:47:be:96:29:cf:
                    7f:3c:5d:95:b6:42:2d:98:65:1b:ed:fd:57:35:4e:
                    73:73:05:56:99:c5:65:aa:8b:2b:22:6d:3f:40:cc:
                    88:c0:ee:9b:f7:92:cd:f6:70:56:98:1f:a4:9d:e5:
                    77:f7:67:3d:d9:68:25:2c:3f:e2:a4:55:83:f0:58:
                    29:5b:46:8a:8e:2d:0c:e3:6c:32:5a:15:9b:f8:23:
                    c8:c3:b4:4c:b9:89:cf:14:56:5f:d8:0e:d1:5a:ae:
                    32:8a:ce:77:ba:2c:c1:56:6a:34:ab:ab:51:c6:41:
                    74:92:e4:20:e5:5f:f0:3b:82:9c:42:7a:37:a8:64:
                    76:85:30:30:87:1b:e0:67:58:a9:4f:c6:b8:99:c5:
                    47:60:53:fc:87:81:5d:22:30:95:ba:8a:d7:34:76:
                    06:aa:09:22:f9:20:bd:cc:d8:c0:10:75:84:29:09:
                    f1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E2:18:70:AC:41:A3:30:12:F5:17:CA:D8:1E:95:F4:B5:54:7D:36
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/425642c2-ae67-4aad-931d-f508fb8f82b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.195.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         52:0c:da:ac:e0:22:d2:f1:47:0e:94:4e:70:4c:d3:c0:da:3f:
         33:d1:f7:26:58:3b:78:1d:6b:a9:5b:61:f4:3b:34:50:dc:b7:
         73:93:15:c2:ac:a7:40:92:53:bf:73:0b:aa:e6:81:8d:10:b9:
         f4:f9:84:53:20:62:b2:6d:dc:79:2f:f4:68:c2:8b:47:da:61:
         47:23:44:80:9f:f4:52:99:3f:2c:dc:1b:74:28:47:c3:00:48:
         d0:71:fe:19:b6:a5:c2:64:76:5b:9b:cd:27:2a:91:96:ca:3e:
         d3:e6:8f:27:a8:1c:91:7f:35:ec:d1:96:f2:ec:6c:cc:7f:72:
         a2:94:1e:59:34:39:09:bf:18:26:ad:20:54:01:51:a1:25:3f:
         7f:47:54:fb:ca:2f:9f:8f:44:5a:ea:53:77:ab:b7:72:f3:da:
         e5:21:b9:be:68:77:1e:2c:2c:52:34:78:1a:ad:28:26:49:cf:
         38:79:ba:80:cc:90:f0:fb:5b:6a:04:63:08:d7:2d:25:ab:f3:
         17:6a:d7:92:11:93:73:61:e5:9f:b5:f1:b2:16:be:03:14:bf:
         94:55:a5:8c:09:20:b3:7d:d9:d0:35:b1:4f:8b:c0:b7:78:76:
         76:34:fb:7b:85:86:12:71:07:bd:74:7d:26:c0:3a:30:d1:66:
         6d:74:80:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----