Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/845ded7d-c662-40e3-8568-64e43ad8874b.roa
File:                     845ded7d-c662-40e3-8568-64e43ad8874b.roa (raw, json)
Hash identifier:          0RDgRl7uEVT6EO4+o3uBrbP/j6h782rONpvxy++zebw=
Subject key identifier:   50:11:EA:AF:40:27:28:0B:51:21:67:F8:AA:04:50:5C:55:9C:58:02
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       531641F8BE305D79B309F0A1D9C32FC0CA1D255B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/845ded7d-c662-40e3-8568-64e43ad8874b.roa
Signing time:             Sat 18 Oct 2025 02:01:27 +0000
ROA not before:           Sat 18 Oct 2025 02:01:27 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.198.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:16:41:f8:be:30:5d:79:b3:09:f0:a1:d9:c3:2f:c0:ca:1d:25:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 02:01:27 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=1df4d929dc41875bc0ba5ee58577aa4928fae7e6b484daf760b56fe240ebdba5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cb:b4:77:8c:3b:38:d0:e7:43:2d:0b:a4:19:
                    1d:d4:25:5a:3a:e1:e7:62:8d:17:c0:37:97:59:d6:
                    69:d3:42:53:5a:23:2c:59:e1:5f:7a:c9:77:0f:af:
                    28:61:34:99:6b:15:56:e3:5c:0e:43:cb:fa:67:0f:
                    2b:d7:68:76:e1:f4:c8:08:96:4c:5f:8c:10:bc:bb:
                    a7:2d:4c:92:90:ef:37:01:03:9c:3d:c9:31:f9:0f:
                    86:c9:74:60:1d:8b:f0:b1:c7:6c:55:58:22:fe:13:
                    f7:d2:17:8c:2e:d4:25:a2:35:1f:5b:53:60:43:60:
                    1d:51:35:a5:13:db:12:ba:8b:7b:97:f6:5d:a0:71:
                    78:4f:4a:3b:7c:ef:f2:c2:cb:74:e5:b3:e0:27:3e:
                    5e:b7:eb:6d:0b:87:fd:43:0e:2b:38:8f:e7:ff:42:
                    11:e7:43:d3:ab:93:40:6c:3a:e5:01:81:7e:57:d6:
                    c9:18:dc:e7:5c:22:6c:6e:35:08:31:5d:77:b1:de:
                    f4:b4:8e:42:81:66:4e:1e:40:da:96:12:b1:43:e6:
                    48:43:94:95:dd:1d:dd:db:9c:b5:16:bc:d6:16:59:
                    1f:bd:7f:df:e1:6f:90:fa:14:3d:bb:22:85:9d:08:
                    cb:3a:83:67:e8:d2:f2:03:1d:ba:9c:4a:ee:9d:5c:
                    01:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:11:EA:AF:40:27:28:0B:51:21:67:F8:AA:04:50:5C:55:9C:58:02
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/845ded7d-c662-40e3-8568-64e43ad8874b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.198.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a0:69:d6:4e:29:18:a0:05:04:5c:f2:19:d2:f3:14:3b:84:b0:
         57:17:a6:73:f8:7d:d4:d5:f8:08:77:81:0d:f0:57:62:f1:ee:
         68:7f:bf:21:65:3e:30:8a:bf:5d:97:3e:51:3c:15:cf:bb:b3:
         8e:33:79:62:1b:0b:ed:44:b5:03:67:c0:1c:6b:c0:85:72:bc:
         98:cb:08:37:b1:07:f1:11:27:e0:bc:d2:32:b4:40:54:3c:1d:
         1e:84:af:0b:12:04:31:7d:9d:82:4d:25:af:67:84:ad:49:3b:
         89:f3:48:02:89:75:9a:7a:41:f0:0b:39:f3:95:d8:f1:d9:91:
         5a:45:0c:8f:10:19:05:d8:b3:e3:61:4c:94:f0:8d:db:dc:ce:
         a4:be:d9:33:f0:55:6f:5e:bc:7f:86:01:71:38:e9:47:e5:48:
         79:9b:30:f6:24:99:71:71:6b:78:c9:5c:33:67:9e:1a:b3:c9:
         ac:a5:ec:10:61:24:9f:1a:46:b0:6d:39:1e:86:2f:73:65:6f:
         d4:2b:b3:23:ee:c3:c8:ba:c0:f1:65:67:2f:ee:e8:f8:ed:72:
         bb:af:22:5d:be:e4:2a:a4:53:c7:5f:7f:54:33:05:1b:30:98:
         96:7d:3d:71:72:ce:2c:7c:e9:33:ca:2a:23:a3:30:8a:4d:49:
         3f:f1:ca:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----