Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7aa0904e-f2c8-4b9d-917f-872e24dc4d90.roa
File:                     7aa0904e-f2c8-4b9d-917f-872e24dc4d90.roa (raw, json)
Hash identifier:          bcoE2vgBMl7nKsVirW0UlkJhLmNxbkaqTCE8nbwXacI=
Subject key identifier:   C2:E0:91:3E:3E:F6:EC:A6:E2:C0:9E:18:4A:32:17:2A:57:39:E1:3E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       77F1FB7AAA943C5EFFFD5270D03FBB7581599F9E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7aa0904e-f2c8-4b9d-917f-872e24dc4d90.roa
Signing time:             Fri 17 Oct 2025 21:10:53 +0000
ROA not before:           Fri 17 Oct 2025 21:10:53 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.56.0.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:f1:fb:7a:aa:94:3c:5e:ff:fd:52:70:d0:3f:bb:75:81:59:9f:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 21:10:53 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=f45fa35ccc407c7bd64af41be472462f8c56bf8d1faf750d11a6a32db9dd03df, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:23:66:f5:49:35:46:a7:26:d0:4a:61:28:ae:
                    1c:af:0e:1c:1d:c2:0b:06:b2:26:f3:07:14:07:94:
                    98:5e:d9:85:b4:c9:3f:55:0a:66:2f:d4:2a:99:22:
                    0a:a3:61:da:1b:2c:f6:11:d0:fb:17:18:7b:ef:a7:
                    81:05:da:c6:f5:0f:6a:2e:65:a7:38:ae:16:54:59:
                    7a:e7:35:19:14:57:b0:f3:c4:ad:1e:a9:7e:e1:d0:
                    ca:30:7a:ed:d5:82:19:ae:a7:5e:23:7f:f8:f0:ff:
                    9e:e7:df:1b:c8:a1:7c:7d:41:a3:5e:8a:67:5a:08:
                    19:be:e7:2b:47:30:bb:d5:e3:7e:47:58:4f:7a:0c:
                    af:fd:8a:51:bd:57:f3:8b:99:ef:da:62:f8:a0:ae:
                    8e:a7:3d:7a:46:31:ad:d3:9c:65:d6:a9:97:72:11:
                    57:93:ea:a0:39:8a:82:f4:64:70:d2:ad:90:65:ae:
                    b7:c8:ff:40:4b:5c:8e:40:d2:b7:8f:18:43:51:09:
                    4c:d5:7c:71:92:28:a2:92:29:0e:aa:af:57:37:b4:
                    6d:95:c1:72:66:06:05:a1:2d:9b:4f:db:fd:70:dd:
                    9e:58:37:6a:f0:6c:67:16:73:93:2c:7e:69:43:c3:
                    0d:31:e1:da:2a:0b:b9:c5:e0:f0:f3:4c:3b:bc:57:
                    55:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E0:91:3E:3E:F6:EC:A6:E2:C0:9E:18:4A:32:17:2A:57:39:E1:3E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7aa0904e-f2c8-4b9d-917f-872e24dc4d90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.56.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         17:50:25:12:32:c8:80:70:6f:52:c6:a3:42:e6:23:67:19:4e:
         c4:06:8d:0a:bf:be:42:c4:29:88:9d:1c:63:c1:64:1b:1b:4c:
         41:dd:65:2a:59:60:e6:d4:17:e3:a2:40:17:24:40:c0:21:f1:
         10:f9:c9:be:74:3d:cb:3c:ca:c3:ba:79:d4:fd:5f:d8:cb:75:
         2b:4c:4d:61:07:a4:99:28:a5:67:85:13:ac:29:4b:a3:a2:3d:
         69:53:82:6e:3f:be:d8:a2:14:b2:71:3c:6e:77:8a:18:cd:1c:
         b4:b2:40:e8:94:f3:e2:1d:07:5a:41:fd:31:5e:8d:2e:1f:14:
         ab:0c:e5:a1:cb:cd:8f:f1:44:dd:61:eb:0d:68:88:0b:37:20:
         fd:17:04:ae:66:5d:32:0b:89:35:ad:b6:93:34:9a:35:8c:25:
         2e:44:7d:09:e4:3b:6a:76:80:6c:7e:36:9a:48:88:75:85:af:
         3d:3f:2b:0d:c6:9b:99:79:f3:3c:45:7c:c8:98:e5:5f:02:0b:
         7f:a2:d8:09:09:98:bf:b1:9a:6c:fd:97:b0:c0:51:5e:d0:1a:
         d2:a3:b4:06:e7:ce:ba:0e:cc:ea:93:d2:a8:38:93:45:b5:06:
         bb:43:da:8f:82:84:38:a2:07:fb:71:1a:ce:97:d9:04:48:93:
         ad:bf:ea:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----