Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91760b1f-d1bf-4e34-9cae-8fe5ec98cdd6.roa
File:                     91760b1f-d1bf-4e34-9cae-8fe5ec98cdd6.roa (raw, json)
Hash identifier:          1DoBNaprL5gg3apfCRdFKsLzXnfUznz0eNwf8uDMIwU=
Subject key identifier:   2B:1E:4D:D7:CB:B4:AB:34:BF:02:65:76:19:71:31:4B:3D:6E:9E:14
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2C65C4DE45B8AA1BD483A9EF5EA9163A7CFDB38C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91760b1f-d1bf-4e34-9cae-8fe5ec98cdd6.roa
Signing time:             Fri 03 Oct 2025 00:01:30 +0000
ROA not before:           Fri 03 Oct 2025 00:01:30 +0000
ROA not after:            Fri 07 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.65.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:65:c4:de:45:b8:aa:1b:d4:83:a9:ef:5e:a9:16:3a:7c:fd:b3:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  3 00:01:30 2025 GMT
            Not After : Nov  7 23:59:59 2025 GMT
        Subject: serialNumber=dc6bd9a0bad0b5cb169e2353e04963b34551eef9c9cfcc45d8f4a825a0426589, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c0:86:2d:79:6e:0c:69:df:7a:02:bf:b9:d1:
                    58:79:7c:15:c6:cb:46:d0:50:f9:f7:42:02:68:10:
                    78:7a:08:b2:a4:04:df:80:c7:ff:59:32:f6:9f:45:
                    39:a1:a0:e1:62:43:ea:b5:4d:d6:6d:06:f6:64:09:
                    ce:60:d7:19:d3:bf:48:e0:e9:b9:8b:36:6c:de:ca:
                    83:12:47:e8:12:57:03:15:26:a1:c3:09:18:e3:6e:
                    bd:36:ad:4d:ac:2b:e1:4a:34:6d:60:a5:e9:a1:88:
                    f2:9c:09:9f:15:30:67:5d:a1:00:56:dc:e2:77:fc:
                    22:bf:aa:ec:3a:f3:7d:8f:26:0b:42:d4:ed:08:e7:
                    3b:d5:6c:8d:ab:9f:2f:11:37:b0:36:1c:fe:cc:3c:
                    da:f4:30:17:0e:61:a4:f5:1b:d7:1a:3e:5a:95:96:
                    28:ff:54:dd:04:ba:d6:7c:62:f3:a2:f3:ea:44:c4:
                    18:34:d2:3d:d5:7e:13:90:4d:06:9c:58:67:c7:a8:
                    29:b8:40:dd:b0:96:d6:65:aa:1b:35:85:28:7c:85:
                    52:ed:8b:6d:2c:80:cd:6c:52:b6:67:cc:42:23:ea:
                    e6:ae:6e:08:23:9f:04:59:f2:26:7e:ff:f0:f2:71:
                    8b:a2:9b:26:4b:64:1e:22:58:c5:60:ec:b6:f7:0b:
                    15:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1E:4D:D7:CB:B4:AB:34:BF:02:65:76:19:71:31:4B:3D:6E:9E:14
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91760b1f-d1bf-4e34-9cae-8fe5ec98cdd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.65.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         52:ba:96:48:d2:80:b9:a9:0b:7c:69:3e:4e:dd:c5:18:0a:7f:
         73:5a:ba:05:c9:17:7c:75:50:07:8c:bc:a7:e6:06:60:c8:c3:
         b2:c3:51:8d:ac:44:a2:81:0f:d4:b7:87:8f:b3:29:38:2b:de:
         03:a8:88:99:c7:6a:db:83:de:22:d2:0d:35:40:f8:e4:7f:a4:
         e0:58:f9:52:60:43:21:aa:91:2b:bb:8c:d2:87:e9:25:d2:f2:
         ad:a0:cf:1b:88:1d:81:91:8c:1b:42:f9:80:f1:54:83:92:a0:
         c4:48:44:43:2b:0d:67:6e:3e:f6:b0:9a:2a:b6:b9:e9:67:e1:
         fd:2e:6f:53:85:2b:31:89:23:b6:39:15:19:ce:fc:fd:8a:43:
         24:d2:dd:07:db:a0:26:fa:f5:6e:d3:21:af:05:42:f3:12:be:
         81:38:61:2d:ef:a6:8c:93:f4:ca:53:ec:62:ea:a9:03:89:02:
         11:41:17:89:4e:cd:97:46:e9:d0:0c:93:eb:de:71:8d:56:d1:
         c9:2c:79:86:72:7f:e6:e4:fa:44:96:b4:35:1c:c9:8b:d7:9c:
         02:d7:4a:02:64:d2:35:13:40:8c:98:21:8f:e4:cb:e0:6f:43:
         7c:fc:4f:a6:98:a8:44:df:60:dc:05:8b:8f:fd:7b:f9:0d:f0:
         24:66:eb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----