Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/996c09c0-2569-4130-92ba-18217f145b46.roa
File:                     996c09c0-2569-4130-92ba-18217f145b46.roa (raw, json)
Hash identifier:          e9GDfvIalqB5WTgSmQq45D+cs++2R1YkgIgzuGjm+0A=
Subject key identifier:   C0:F2:AE:8E:90:96:D0:9C:8D:A5:0F:68:74:CE:A2:B8:88:9B:57:22
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       133491EAB49659E48E28F1DC85CEDBB5676075FF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/996c09c0-2569-4130-92ba-18217f145b46.roa
Signing time:             Wed 22 Oct 2025 00:00:06 +0000
ROA not before:           Wed 22 Oct 2025 00:00:06 +0000
ROA not after:            Wed 26 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        16.76.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:34:91:ea:b4:96:59:e4:8e:28:f1:dc:85:ce:db:b5:67:60:75:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 22 00:00:06 2025 GMT
            Not After : Nov 26 23:59:59 2025 GMT
        Subject: serialNumber=8b608cd4d25256877d5a99bea549f99fc1ef4aa09645ff60ed3f4908faa66936, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f6:47:6b:83:c6:69:95:3b:c5:31:43:43:1e:
                    5f:45:a8:ce:7a:00:5e:4c:a1:e9:e2:ad:4f:3e:12:
                    dd:21:ca:6b:41:00:fa:b7:ef:58:30:35:dd:7d:e9:
                    60:2d:d0:20:8e:9d:be:dc:d3:0b:af:fd:ea:f6:9f:
                    dd:42:8e:b6:44:7a:70:9c:d6:17:5b:7d:fd:86:02:
                    13:ed:e7:4e:ea:a1:55:de:5b:17:c8:99:13:cf:08:
                    31:66:ea:e0:b9:4b:50:71:a6:0c:25:be:70:91:c6:
                    79:de:01:c4:27:f8:69:87:71:da:39:ad:7b:52:a0:
                    08:de:f7:5b:b8:31:88:0f:b1:97:28:ef:47:df:5b:
                    f1:e5:76:4e:cd:c3:65:b5:96:1d:60:05:c2:e6:2f:
                    c9:6b:e8:b3:06:05:e6:b2:d5:d4:ca:2d:cc:2f:b0:
                    d6:ac:20:cb:c7:5d:18:a6:b5:f6:94:e3:25:18:14:
                    2c:95:07:b2:36:27:33:9e:c3:f0:6a:13:9c:06:61:
                    75:2a:52:bf:6d:ea:87:32:7e:f1:33:61:85:ca:17:
                    12:40:f6:c6:ed:92:a5:85:47:c7:01:1b:65:ec:55:
                    98:cd:d3:5e:36:c0:f5:14:9e:88:25:46:1f:af:77:
                    7c:3a:64:b8:d7:e0:dd:a7:62:b9:70:34:b6:3a:f8:
                    7a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F2:AE:8E:90:96:D0:9C:8D:A5:0F:68:74:CE:A2:B8:88:9B:57:22
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/996c09c0-2569-4130-92ba-18217f145b46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.76.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d4:9b:71:37:3d:be:bf:40:cb:dc:3a:29:a2:83:12:14:3f:ad:
         e7:d8:26:23:8e:90:f0:74:22:a7:21:1d:02:08:41:70:fb:34:
         3e:5d:4a:7a:36:28:ea:95:71:53:03:15:98:28:44:b3:ab:aa:
         6b:99:99:11:e9:3c:06:f5:3f:f8:6a:1b:8c:27:99:ff:c8:73:
         16:c9:fe:3a:91:9e:d2:de:ea:97:8b:13:41:c7:c7:1b:73:06:
         86:a3:52:48:9d:45:47:e0:8a:4d:21:b9:3d:5d:13:45:e7:f4:
         d0:03:b4:3f:bc:d2:de:b3:e5:56:99:53:95:bc:1b:e2:6d:04:
         d3:ed:6e:56:34:bc:53:bc:9d:23:2c:ae:e0:09:c7:95:dc:dc:
         88:d6:34:51:55:89:1f:42:27:20:c9:ba:bd:c5:49:6d:5a:63:
         f2:4e:cf:94:ab:bb:4b:53:40:50:e0:ba:c2:98:f8:15:94:bf:
         6a:76:ce:4b:9f:40:53:fb:a2:c9:1e:8f:f9:7a:8f:17:53:48:
         91:e7:7b:82:f9:07:fe:96:d8:97:b9:f5:12:72:a3:7d:44:0a:
         4e:59:53:69:be:94:db:64:17:47:31:23:82:cf:de:c4:23:1b:
         34:8f:a9:fe:ae:11:60:c3:ac:a7:9a:db:e2:af:e4:5d:9f:72:
         d2:93:34:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----