Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5a2f6a8-3e69-4d87-82a9-ab06bfa8dc23.roa
File:                     a5a2f6a8-3e69-4d87-82a9-ab06bfa8dc23.roa (raw, json)
Hash identifier:          Oto3bpOHw9LqmR5hhCJjviQABxmVPxHQFTj0rmbIG9Y=
Subject key identifier:   80:DF:D1:AE:D1:17:7E:6E:5C:53:55:4B:CF:94:F6:BB:78:3B:40:95
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0E8ED1377F94C8EB283446082EC5261C674573B3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5a2f6a8-3e69-4d87-82a9-ab06bfa8dc23.roa
Signing time:             Fri 17 Oct 2025 00:52:44 +0000
ROA not before:           Fri 17 Oct 2025 00:52:44 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.24.0.0/15 maxlen: 15
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:8e:d1:37:7f:94:c8:eb:28:34:46:08:2e:c5:26:1c:67:45:73:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 00:52:44 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=212917d0a4d9cf36c7e2fc511f17be89b92288ab903ccd70c2d228616dedec4f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6f:75:a1:1a:63:6c:2a:3d:4c:a5:ae:ee:b4:
                    9e:2a:28:ce:fa:2f:52:bb:23:44:63:41:f5:c3:26:
                    66:21:02:eb:58:ce:df:8c:99:38:18:53:20:30:79:
                    2b:0d:da:63:c7:e2:09:5b:7e:2d:e0:89:aa:9a:10:
                    4b:28:16:02:e5:c8:ce:1d:96:04:28:e3:00:2c:a1:
                    2f:85:51:92:d6:31:5c:50:17:71:f9:bd:7c:65:02:
                    bc:e2:2c:a2:38:3e:ff:3f:4d:62:7c:c6:93:5e:21:
                    c9:b4:79:17:57:2c:39:24:c2:c9:07:72:83:e7:b8:
                    23:63:85:11:04:af:fe:aa:37:22:60:b8:a8:8f:fc:
                    71:dc:9c:e8:bb:92:2a:f8:7b:67:e1:61:d2:e7:65:
                    75:d8:6d:89:a2:e9:f9:d0:84:a9:00:03:2e:c9:14:
                    0b:10:c0:29:07:f0:ff:3f:33:94:b7:20:ee:37:99:
                    c0:b9:72:85:39:13:9c:fd:46:ab:31:bd:d3:6b:e5:
                    30:e9:8b:22:56:46:42:76:dd:ac:f2:92:a6:52:65:
                    c6:ac:17:0d:1e:ad:c7:b8:51:fa:ad:3a:1b:11:dc:
                    7d:65:de:bf:33:e1:f8:3f:90:d6:31:43:65:d7:65:
                    d1:16:b4:bf:76:f0:71:19:36:5a:25:9d:0e:d2:0e:
                    5c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DF:D1:AE:D1:17:7E:6E:5C:53:55:4B:CF:94:F6:BB:78:3B:40:95
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5a2f6a8-3e69-4d87-82a9-ab06bfa8dc23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.24.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         38:1e:e9:fe:dc:7c:05:89:84:bf:ef:1c:f8:08:8c:20:53:d0:
         00:78:06:d3:67:ea:80:ca:47:77:55:46:f5:73:76:50:d1:89:
         70:1d:08:72:cd:f8:b4:45:2b:0d:8a:48:b0:82:ec:63:b8:fa:
         26:fe:de:28:23:6f:f5:7e:c1:65:01:3e:f8:0c:6a:ea:53:80:
         2b:3f:e5:97:4e:45:25:c6:36:55:a3:2b:97:d6:8f:95:36:68:
         63:83:2c:c9:9c:1d:6f:c9:73:1d:fa:bf:44:85:25:64:01:8b:
         5d:e0:e9:a2:e7:c8:1e:b1:35:40:92:0d:3f:d1:05:57:ab:3f:
         88:c8:38:10:5b:fa:44:ff:50:22:53:d3:eb:4e:7a:74:a1:d9:
         d9:66:7e:2c:59:98:db:b7:0c:f9:e1:7f:1b:20:9f:f4:62:71:
         be:d0:a8:90:81:c8:31:18:42:1b:d8:11:fa:2a:ee:32:1a:ac:
         60:3c:2e:df:66:b9:93:06:ea:70:02:dc:c6:84:1a:bb:ef:30:
         7e:8b:3c:a8:2a:c2:16:9f:46:c0:32:60:aa:a5:4f:c0:37:dd:
         0f:ed:b5:ba:40:9f:b7:49:05:d3:ab:cc:49:69:59:96:33:f4:
         43:55:2b:e0:76:fd:a8:77:97:cb:a2:38:5d:e0:b7:4c:a4:b6:
         1c:cb:a7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----