Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05767c0c-a51a-4724-8188-24d099c58bd8.roa
File:                     05767c0c-a51a-4724-8188-24d099c58bd8.roa (raw, json)
Hash identifier:          UrqZ+Q+vi0tgha6jckQ76XyB8mXtkOKUJ3zUxVHZye4=
Subject key identifier:   73:01:2F:42:8B:4F:95:54:F7:70:27:44:86:9B:FA:2C:F2:66:96:F7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       19BF339BA0BC408B385E04EB6A4567A8E7677D64
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05767c0c-a51a-4724-8188-24d099c58bd8.roa
Signing time:             Sat 25 Oct 2025 00:30:12 +0000
ROA not before:           Sat 25 Oct 2025 00:30:12 +0000
ROA not after:            Sat 29 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.190.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:bf:33:9b:a0:bc:40:8b:38:5e:04:eb:6a:45:67:a8:e7:67:7d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 25 00:30:12 2025 GMT
            Not After : Nov 29 23:59:59 2025 GMT
        Subject: serialNumber=5bdf3c67a5e8d595022e8e145a2fa8442804e0ab490b26371f97702e3c9b0c4d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:49:f8:28:74:fa:7c:de:ee:04:e0:d7:30:41:
                    55:b5:e8:dc:48:81:98:14:37:e2:68:22:34:28:d2:
                    2e:19:f2:31:f2:00:73:e9:9b:34:8f:18:1e:61:b7:
                    ae:b5:83:a0:7f:fd:47:a6:06:2b:6f:90:96:bb:6d:
                    bd:dd:4d:4c:99:8f:e8:bc:2b:b3:1b:b2:61:de:a6:
                    01:7a:ba:84:46:55:d8:0f:09:64:c9:71:19:79:04:
                    99:f5:86:f0:ee:4f:4e:69:1c:72:59:88:a1:6d:c5:
                    50:c3:10:e0:5f:d2:91:7e:f9:05:5b:4b:80:de:b0:
                    2b:2e:23:bb:97:db:26:d7:f4:e9:aa:b7:67:48:12:
                    7a:78:72:47:a8:fa:32:8a:50:01:09:56:33:d9:c0:
                    78:b7:2e:25:02:c4:70:ef:11:f1:80:69:66:9c:0f:
                    18:56:0d:29:d1:0a:cc:a8:f4:0d:17:49:d0:77:77:
                    bd:89:cc:6e:44:23:ac:fb:a6:c0:34:01:de:3b:15:
                    36:3f:10:13:6e:ba:dd:2f:cf:01:18:25:07:b0:8d:
                    5d:dc:0e:73:99:bd:81:c8:b1:3d:fb:8a:67:70:04:
                    b8:1c:42:19:1e:f2:ab:5a:2c:55:d3:5e:fe:b7:80:
                    cc:00:5a:2a:6e:a6:c4:58:7e:e7:a5:7d:3c:cb:37:
                    e4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:01:2F:42:8B:4F:95:54:F7:70:27:44:86:9B:FA:2C:F2:66:96:F7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05767c0c-a51a-4724-8188-24d099c58bd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.190.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a3:24:65:0b:e5:f5:8a:95:db:42:b9:4a:e0:fe:ab:d3:af:fe:
         f6:9d:ff:73:d4:7c:54:e0:0f:ef:d5:69:40:f6:f3:c6:48:c0:
         ef:2c:5a:c9:6f:cc:6d:ce:49:03:c7:1c:32:4c:da:b0:fe:3b:
         39:16:d8:e3:6c:a8:cf:2a:b1:a1:bf:f1:b1:25:dc:36:b8:7e:
         b5:b0:d5:fc:a8:b7:25:08:91:39:e3:45:75:10:2b:b7:fe:49:
         b5:c1:eb:2a:28:4a:de:d9:78:ae:33:a4:81:d2:3c:64:34:5b:
         0c:83:50:6e:48:45:62:3c:83:6e:26:98:ce:d3:13:33:3c:0b:
         99:65:71:d3:2c:88:13:9f:27:19:7d:da:51:52:39:7b:30:c1:
         e9:6a:62:b0:79:d8:6a:7a:30:dc:79:f1:ae:86:02:ec:b4:b4:
         50:23:a6:5b:78:e9:34:a4:a9:2c:a5:a9:a4:9e:b3:d1:de:05:
         9a:ca:42:e4:bb:b9:98:ca:28:e9:23:bc:84:e0:c6:b0:83:82:
         a3:56:89:63:59:29:9e:d5:61:6f:54:b6:c0:fb:4b:22:f1:92:
         08:90:5f:cf:8b:64:d6:8f:38:33:69:58:97:89:ee:de:f7:13:
         4d:86:30:57:df:00:73:0d:1f:56:ef:77:0d:e6:ae:72:c8:93:
         76:80:a0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----