Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/199a6fe3-3863-47d9-8092-2b8b5516b0cc.roa
File:                     199a6fe3-3863-47d9-8092-2b8b5516b0cc.roa (raw, json)
Hash identifier:          jJIAndNeFDrx4zu2KSOc75Z9UTZP+1YDvzKyc3hC1as=
Subject key identifier:   B2:52:DB:98:9C:AD:5D:63:E6:1C:C9:86:27:78:4E:7D:D4:A0:5E:3F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       525BF06FF9B78FD9BD6BFE7F280A61386D2BE905
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/199a6fe3-3863-47d9-8092-2b8b5516b0cc.roa
Signing time:             Wed 29 Oct 2025 00:30:08 +0000
ROA not before:           Wed 29 Oct 2025 00:30:08 +0000
ROA not after:            Wed 03 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.149.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:5b:f0:6f:f9:b7:8f:d9:bd:6b:fe:7f:28:0a:61:38:6d:2b:e9:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 29 00:30:08 2025 GMT
            Not After : Dec  3 23:59:59 2025 GMT
        Subject: serialNumber=ab93ca32909153dfcbe6cbee95918096145f3155972cfc057502164dfb43f806, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c0:98:e4:c2:fd:c7:6a:2b:8f:c9:09:0b:3b:
                    fd:85:6d:6b:69:05:1d:3b:6f:8f:1d:14:05:0e:40:
                    bd:46:72:d4:2c:4c:50:a5:cd:a3:1a:fd:2c:d4:8d:
                    cb:14:af:b2:bb:9d:42:6e:2b:8b:33:05:d0:0a:44:
                    5f:12:e7:cf:f8:11:dd:6b:45:dc:8a:c7:9a:1a:dd:
                    cb:b7:79:92:bc:2e:e2:bd:a3:ae:03:58:53:4c:42:
                    56:b7:29:7a:5e:14:f6:62:c4:d4:95:40:5f:70:4f:
                    21:49:72:83:76:7e:0a:5b:0f:81:f5:d5:b5:4d:ed:
                    66:d2:a3:41:c6:55:15:77:ec:1d:90:36:1f:cc:df:
                    6c:25:19:99:c8:df:5a:15:9f:bb:5d:7e:6b:54:37:
                    db:17:61:c0:91:07:d8:9a:d4:bf:4e:78:61:30:b4:
                    52:1a:cc:5f:5d:3c:d7:93:74:32:fd:f6:5f:79:e0:
                    77:c0:e5:ee:ef:67:d5:43:56:fe:29:ce:93:8f:99:
                    ad:e8:3d:15:ac:dc:dc:1c:25:6b:dc:8f:0b:aa:10:
                    8f:84:80:1d:81:65:eb:66:ac:89:7b:7d:24:76:b5:
                    f7:a6:28:71:38:ff:38:2d:36:96:e3:8c:34:79:d5:
                    d3:3b:71:e8:75:94:9b:9a:83:0f:2e:4c:a3:ca:1d:
                    cd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:52:DB:98:9C:AD:5D:63:E6:1C:C9:86:27:78:4E:7D:D4:A0:5E:3F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/199a6fe3-3863-47d9-8092-2b8b5516b0cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.149.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         61:f5:56:27:81:09:e7:fd:3c:0c:ce:e9:c6:38:28:47:7b:87:
         9a:01:ef:d6:8a:06:3e:6b:93:f1:1e:1a:ba:a5:77:49:91:1f:
         ad:fd:37:74:dd:82:3b:5e:d8:63:73:cd:05:2a:6b:01:a0:4d:
         a6:6f:a5:0b:d5:85:93:65:d2:cc:89:f9:3f:a5:08:32:20:70:
         06:96:fa:94:82:d5:2b:e5:7f:97:a6:0e:51:56:8f:c9:90:6c:
         e1:0e:c0:27:f1:22:23:04:d6:ea:a6:c3:8d:81:7d:6c:6e:b5:
         4d:47:3c:a1:a6:f3:10:cf:8c:c4:ee:5f:5d:93:8a:d7:34:4d:
         68:96:6e:1f:97:0e:1f:7e:3d:5c:19:b3:bc:f3:02:bd:67:a9:
         b4:05:13:24:93:a0:38:68:fc:b5:d4:67:b8:20:79:e9:f3:75:
         7e:e1:3b:a9:2c:23:5b:27:c6:a7:2c:7d:f4:8c:0d:04:0e:f2:
         2e:9d:74:45:30:4c:f2:df:9e:99:fa:99:ad:f2:83:ee:c9:9c:
         10:f1:78:11:9f:05:48:99:d2:6e:fd:67:43:fe:d0:b2:26:35:
         7c:8d:bf:a3:da:19:0b:9a:72:cf:8c:a4:84:8d:fd:06:d6:c9:
         84:3e:2d:c8:79:fe:b6:b6:53:1e:57:45:af:e3:d1:53:15:99:
         e1:05:0b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----