Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e218b04-dfaf-4fdb-9e82-bad8d7e36def.roa
File:                     5e218b04-dfaf-4fdb-9e82-bad8d7e36def.roa (raw, json)
Hash identifier:          OE9lyjn+m/7UrUnK4dzU09JfNvhpAjJjzMBGJNwlZxE=
Subject key identifier:   8B:DD:BE:56:45:8A:47:F5:76:90:91:AC:BB:D6:7F:3F:4B:15:81:85
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       42EE45D24A83D8B4FA4683CBF209B13F36B4E45D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e218b04-dfaf-4fdb-9e82-bad8d7e36def.roa
Signing time:             Sat 25 Oct 2025 00:01:13 +0000
ROA not before:           Sat 25 Oct 2025 00:01:13 +0000
ROA not after:            Sat 29 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.206.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ee:45:d2:4a:83:d8:b4:fa:46:83:cb:f2:09:b1:3f:36:b4:e4:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 25 00:01:13 2025 GMT
            Not After : Nov 29 23:59:59 2025 GMT
        Subject: serialNumber=a1f6e24ea4428a750ad555314e4d8e3b0e79fe719e43da25c18bc95172581918, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f3:ed:d7:2a:87:d5:90:cd:8b:d8:55:b6:2f:
                    22:eb:1b:45:a8:05:93:3c:b7:ef:f9:0a:4d:6d:59:
                    a3:b3:07:69:fc:b3:5f:c3:95:56:66:82:7f:1a:25:
                    d8:71:47:90:6f:d9:ad:cf:8d:10:30:1f:b4:da:b4:
                    c2:95:93:8f:99:b1:1c:86:83:9d:59:db:75:4b:9b:
                    75:f3:ff:79:81:01:0f:ea:f6:d1:83:c5:d2:93:82:
                    3e:a6:9c:65:12:fa:14:58:f7:51:cd:28:19:b9:ec:
                    df:09:26:74:97:3e:a7:12:0c:6f:f6:2c:99:80:2a:
                    a7:f1:0d:96:97:88:4f:27:3b:ea:72:cb:5e:c5:49:
                    b1:68:9f:9d:bb:ab:8a:ec:27:b7:0f:a1:a5:7d:29:
                    c1:14:84:bf:f6:7b:cd:3e:0c:6d:0d:e0:b9:67:81:
                    6c:28:f1:b0:86:14:12:cc:83:1c:06:1c:9b:48:d9:
                    51:9d:28:ff:ca:7c:82:07:eb:56:49:70:93:1a:a9:
                    1f:52:70:fc:c3:b6:9f:e5:14:ec:54:0c:07:f3:51:
                    de:90:0c:9b:07:bf:8b:bb:9e:8e:f4:33:b9:59:68:
                    43:66:f4:13:1b:71:c8:84:34:0c:7b:52:0c:bc:71:
                    57:bd:4c:85:7a:f0:cd:f1:be:c4:68:c6:48:ab:7d:
                    f0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:DD:BE:56:45:8A:47:F5:76:90:91:AC:BB:D6:7F:3F:4B:15:81:85
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e218b04-dfaf-4fdb-9e82-bad8d7e36def.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.206.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         cb:15:b4:fd:1b:62:61:3d:27:48:4d:fb:60:a7:e6:3e:16:06:
         9f:bd:b0:6d:07:9a:2c:5d:c4:66:97:51:31:55:38:77:52:c6:
         f3:52:bf:d9:c6:ed:e4:a6:0c:50:79:e9:fd:c2:5b:6f:e2:a9:
         db:1f:34:82:3d:69:94:4c:db:f7:33:50:82:5e:b0:5f:db:39:
         77:49:3f:79:bc:29:e0:fe:94:18:50:f1:11:af:57:ec:8f:45:
         8a:23:21:35:77:20:b7:48:34:5c:7f:f0:13:2e:c4:19:ff:5b:
         60:e7:66:02:73:c7:80:20:fb:df:bc:b3:7a:00:e5:f7:18:44:
         99:9d:58:4c:37:fc:cc:c3:4d:38:0d:c9:0f:e1:4c:0c:9f:f9:
         b6:3d:14:0e:fc:bf:5f:78:7d:4c:a8:ba:20:9f:ee:e3:9d:54:
         7e:4d:0c:e3:00:b4:66:64:d4:0d:5d:91:49:6a:5f:95:1f:70:
         4c:10:a4:2e:65:3e:38:16:36:b9:67:82:bf:ee:a3:c1:68:f3:
         f4:01:e5:15:1c:44:f2:69:1e:10:63:fe:4d:8c:84:ec:79:3f:
         42:a5:07:7f:8b:30:74:4e:7a:1e:3d:bd:29:bb:6d:b4:79:f9:
         5b:e5:88:52:bc:47:b2:a4:14:19:37:89:39:22:e1:0d:a4:a3:
         d1:46:f8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----