Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2868e30-21b4-4516-a63c-fc76c09bb7d8.roa
File:                     d2868e30-21b4-4516-a63c-fc76c09bb7d8.roa (raw, json)
Hash identifier:          Ptj4uDHsMWjcRTUgujGGeQvoBZLC8RCMZCiLnja6N90=
Subject key identifier:   5C:01:8D:23:F7:51:BA:1F:96:F9:97:62:BC:C0:FD:5D:DD:41:64:0E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       31C806C24386FDCFC13C47BF3D600971B14D131A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2868e30-21b4-4516-a63c-fc76c09bb7d8.roa
Signing time:             Fri 17 Oct 2025 21:40:05 +0000
ROA not before:           Fri 17 Oct 2025 21:40:05 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.63.92.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c8:06:c2:43:86:fd:cf:c1:3c:47:bf:3d:60:09:71:b1:4d:13:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 21:40:05 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=4e1eb4ac7c246989e352d135f5bb580e69161dbc10b79b3e0f9e46784c215950, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dc:0f:e1:18:e3:58:d4:22:7f:02:61:a9:64:
                    b0:54:a5:a3:a1:7e:18:a5:29:d5:bc:e2:a7:13:46:
                    32:f4:34:3c:b8:10:19:74:59:5d:74:4b:c1:76:86:
                    24:a8:f0:99:de:a5:34:d5:26:9a:b4:4a:82:4b:70:
                    a2:0d:27:77:b0:c5:e9:65:0c:f0:cb:84:2c:75:81:
                    7b:f1:b0:c0:31:bb:25:4f:03:9d:9a:96:05:1a:ec:
                    dd:d4:12:f6:f0:28:bf:24:16:1f:6a:26:5c:64:ae:
                    a6:30:d5:91:19:b8:ac:8c:90:e3:d4:a7:2b:6b:85:
                    f1:0b:10:61:b1:90:a1:db:74:33:0e:89:12:6a:f1:
                    45:2d:fa:63:87:46:68:d5:5b:6b:71:d4:cd:ed:a3:
                    66:00:a4:9f:83:42:67:c0:fd:ab:23:55:b0:c7:3a:
                    46:28:0a:e6:6d:92:0a:99:0d:14:89:bb:bb:69:47:
                    e2:de:da:5c:0a:d2:04:ff:d2:ab:38:f4:46:89:50:
                    ab:b1:47:11:bc:ce:93:d1:89:d3:1c:82:61:93:3d:
                    6e:82:80:84:f1:77:79:18:36:21:2f:58:63:38:08:
                    2b:3e:44:e1:5d:31:46:16:e0:93:2b:bc:da:39:85:
                    01:2f:1a:86:f4:ce:3b:b8:52:2a:6a:5a:b9:7c:d5:
                    34:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:01:8D:23:F7:51:BA:1F:96:F9:97:62:BC:C0:FD:5D:DD:41:64:0E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2868e30-21b4-4516-a63c-fc76c09bb7d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.63.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:1a:7f:94:4c:d1:ec:c8:16:22:2c:19:b1:65:9b:a6:30:06:
         18:47:ec:fb:76:78:f3:aa:55:71:ad:57:20:1f:a7:05:7d:7e:
         71:3e:a6:fe:52:81:1d:d3:09:45:8a:36:8b:71:d5:ab:b8:c5:
         f5:d2:8d:de:3d:be:c4:90:b1:12:13:e4:80:d4:c1:6a:84:cb:
         f2:2e:15:5b:79:44:85:67:ea:73:8b:1f:dd:c2:24:41:ce:f1:
         09:26:64:b4:5c:eb:3e:42:70:47:db:b9:4e:b3:fe:11:f4:42:
         c3:72:74:e5:a5:70:5c:0a:8d:e0:6e:ef:c1:eb:91:3b:ca:4d:
         e9:0d:8f:57:00:0b:0e:db:e6:29:9c:0e:01:53:ba:76:d1:08:
         dc:23:35:94:73:ed:6a:c3:20:5d:85:02:d0:8a:57:6e:ec:f6:
         49:11:55:7d:9d:b6:4f:69:e3:ab:90:34:f2:de:91:66:0d:81:
         f6:96:17:5d:0b:5d:33:28:64:92:62:ba:64:d2:fb:8b:9e:c7:
         cf:5d:48:41:45:c5:bc:27:25:04:b1:43:df:75:e1:33:c9:9f:
         d7:23:72:23:07:35:00:de:a7:ec:45:4b:9e:1e:67:27:1b:9e:
         c0:43:b8:e1:0e:1e:b8:48:4e:75:89:80:5d:99:2b:ae:f5:d8:
         fc:05:94:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----