Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a7938ef-40d0-49c4-aa4e-862db8f8341f.roa
File:                     5a7938ef-40d0-49c4-aa4e-862db8f8341f.roa (raw, json)
Hash identifier:          ZiADB1jQNIECAM3/KVXFb8wv55q1tWkwrQfyX1lObFA=
Subject key identifier:   A5:C3:27:DB:5D:BF:CA:5D:55:ED:3D:82:24:46:60:97:9C:CF:6E:63
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2F0CCC0F34E9422D842BEE8E9E4A3B2AC03D518E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a7938ef-40d0-49c4-aa4e-862db8f8341f.roa
Signing time:             Tue 07 Oct 2025 00:52:34 +0000
ROA not before:           Tue 07 Oct 2025 00:52:34 +0000
ROA not after:            Tue 11 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.16.0.0/14 maxlen: 14
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:0c:cc:0f:34:e9:42:2d:84:2b:ee:8e:9e:4a:3b:2a:c0:3d:51:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  7 00:52:34 2025 GMT
            Not After : Nov 11 23:59:59 2025 GMT
        Subject: serialNumber=beadcfea587451f7715fb63de61cd8c1e9c9c42bc3669c044701b88615ec4e14, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1c:0c:f5:77:d9:8d:5c:0a:e8:e0:8d:73:b2:
                    83:ce:fd:55:d3:c1:bf:82:0e:03:d8:26:08:eb:1c:
                    f5:67:a1:95:24:28:5b:bf:bf:c0:b6:d7:1e:6f:bf:
                    dd:8f:99:7c:87:0a:ce:a4:f0:f4:1c:38:1e:c8:12:
                    7e:97:69:d7:67:6f:38:3b:f0:c9:1d:8f:23:36:a5:
                    e6:44:a8:22:19:54:16:2f:74:ff:f6:a5:87:48:fe:
                    a3:45:97:55:8c:a3:bc:e0:06:4b:73:e9:c8:b1:64:
                    f0:3f:2f:33:01:a4:7f:6d:80:d1:23:78:2b:62:9d:
                    a0:47:12:57:57:a0:4c:a5:2f:d8:06:78:f2:6f:dd:
                    d5:4e:2e:c6:15:bd:e3:c1:77:39:b5:0d:97:fe:56:
                    34:6d:ae:6c:fd:fc:cc:7f:4e:9a:4f:45:eb:e5:af:
                    e9:c8:fc:ae:bd:73:3e:fc:40:2e:94:e5:be:33:e6:
                    b1:c4:6a:25:53:09:f5:84:81:d9:d6:f8:f1:9b:5f:
                    b0:5f:d9:ae:a6:9a:d4:47:de:9e:11:a6:4f:6c:16:
                    a5:f0:97:23:bf:9d:ce:a2:15:a6:ba:77:fe:4a:f2:
                    11:10:21:d5:be:e2:3b:fd:8b:9b:8a:79:e9:c5:89:
                    4c:97:76:42:3e:02:f0:7c:5b:2d:ed:1d:3a:0c:af:
                    12:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C3:27:DB:5D:BF:CA:5D:55:ED:3D:82:24:46:60:97:9C:CF:6E:63
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a7938ef-40d0-49c4-aa4e-862db8f8341f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.16.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         05:d0:a8:2d:15:64:97:83:46:c9:cb:4e:84:fc:a1:89:88:99:
         20:e7:f6:18:e8:e2:32:b3:78:de:41:4a:b4:33:3a:00:19:ab:
         1f:36:c0:ed:68:17:91:9b:41:9a:c3:d9:23:0f:05:ec:ea:d2:
         53:1a:31:a5:92:da:5a:01:bd:b8:70:cc:af:ad:20:79:22:8e:
         0a:1e:43:55:a8:db:2b:06:4c:af:25:ab:4f:43:39:81:c7:9c:
         66:da:fd:d5:db:5c:82:97:4d:a9:c6:46:45:86:ad:27:cc:14:
         2b:7a:8e:7d:d5:56:32:b0:f8:dc:53:46:e2:03:89:c2:09:bb:
         d7:b7:7b:63:19:ae:9e:0c:b1:77:e9:80:4d:6d:3f:0a:fa:aa:
         88:19:f8:36:28:66:8e:59:ea:b4:9e:38:6c:c9:ee:88:66:3d:
         02:69:23:87:35:6c:6c:8d:2a:bd:9a:2b:9e:e6:3c:6f:40:59:
         88:c8:81:b9:b3:42:8d:7e:a8:39:06:58:13:cf:e0:11:c9:f2:
         1f:b9:7c:8b:50:59:80:75:f2:8d:f5:b5:8f:ab:10:65:1f:8d:
         8e:9c:d9:75:9b:d6:2f:5e:0e:3b:d9:c7:a1:f5:be:7e:fa:3e:
         d5:9e:57:cb:16:ff:bd:6e:9d:cb:d9:23:75:6f:c5:8f:8d:9f:
         24:fe:66:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----