Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab14272b-8d62-463c-9830-7c5b41bb76ca.roa
File:                     ab14272b-8d62-463c-9830-7c5b41bb76ca.roa (raw, json)
Hash identifier:          /psk/Es0kboFARO6DBtKyXSgBoDjv4KXU//vcTzOPgM=
Subject key identifier:   2B:94:D5:5E:6A:C2:38:A0:FE:57:E1:63:FB:EB:EF:5C:2D:38:A7:5C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2A0C9E100DD65B41806A87CC8F968C28D43A4E71
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab14272b-8d62-463c-9830-7c5b41bb76ca.roa
Signing time:             Sat 25 Oct 2025 00:20:45 +0000
ROA not before:           Sat 25 Oct 2025 00:20:45 +0000
ROA not after:            Sat 29 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.102.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:0c:9e:10:0d:d6:5b:41:80:6a:87:cc:8f:96:8c:28:d4:3a:4e:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 25 00:20:45 2025 GMT
            Not After : Nov 29 23:59:59 2025 GMT
        Subject: serialNumber=e129a1e42641072abdc22659ccbd1b80393b45cdbc53eec93497cf33e13efd39, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:91:14:e6:56:14:bb:6d:ba:f1:8b:a0:8d:06:
                    54:24:a9:4b:6d:80:72:cd:f0:ac:a5:fd:a1:e4:09:
                    bc:18:6a:da:92:6e:e8:ab:0a:f4:7a:01:c5:f3:02:
                    9f:0a:02:a7:d0:76:50:eb:b6:21:97:03:49:84:71:
                    2f:8d:68:14:0c:73:6c:e1:4f:4b:f2:cc:cc:74:42:
                    fb:24:76:1c:90:aa:e1:d5:c5:2b:9c:2a:68:39:b2:
                    ee:41:90:36:ac:56:8c:bc:cd:e5:76:0c:c4:07:4b:
                    b8:3b:95:6d:13:97:c6:17:60:03:c7:bd:70:aa:fa:
                    52:c7:bd:93:85:c8:8d:92:02:e4:5b:80:35:7d:c4:
                    4b:91:87:4e:bf:c4:ac:59:b3:c6:f1:5d:e9:16:2a:
                    56:5b:58:0a:c7:37:ee:be:db:df:ce:19:14:9a:e7:
                    9b:8f:cd:b2:16:c2:19:ea:fb:76:de:d2:d9:05:85:
                    1e:8d:d8:34:5a:f5:06:f3:ac:4b:77:a9:97:d2:f0:
                    03:63:7b:c0:6d:0d:e3:41:a1:e4:85:be:75:7c:23:
                    35:d8:b6:47:d8:d5:fa:a0:58:b4:98:ba:83:4c:ae:
                    84:b4:85:cc:83:12:f3:a0:9a:e3:3e:fa:cb:17:15:
                    b1:27:64:9a:56:aa:a1:b5:85:75:74:c8:f3:7d:a2:
                    8d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:94:D5:5E:6A:C2:38:A0:FE:57:E1:63:FB:EB:EF:5C:2D:38:A7:5C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab14272b-8d62-463c-9830-7c5b41bb76ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.102.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2c:71:18:b7:15:18:41:2a:4c:ed:45:5d:fa:cb:c2:30:0a:4a:
         47:a4:88:dc:9a:00:31:46:bb:07:62:3a:03:3e:65:5a:ad:ea:
         e0:d3:50:22:b6:1e:43:b1:46:11:13:45:f4:02:cb:31:bb:47:
         a1:7f:82:4e:ef:d0:37:92:01:85:d6:49:8a:03:3b:00:db:d8:
         db:3d:df:9a:24:f9:3f:95:1a:2e:9e:ab:5f:f1:e8:fd:a3:2b:
         c3:8d:c4:64:1d:6c:d5:2d:39:d1:a0:c4:6d:53:b7:e1:58:38:
         48:ed:79:0c:47:1e:e7:4d:e4:8e:db:0c:0c:4c:26:39:6a:30:
         61:34:d3:99:c0:a2:fc:c1:51:5b:95:49:9e:1b:79:73:e1:d8:
         ab:7a:35:09:10:ba:a7:7d:1a:e9:9b:62:63:2b:13:f2:71:24:
         80:65:c9:84:1c:74:7e:72:5b:9c:0e:34:d1:e2:0f:16:89:ae:
         05:a7:3e:cf:77:9e:d9:f4:b2:3b:43:34:71:89:86:05:b2:75:
         6c:95:7e:cf:98:5b:7d:cd:3a:2c:b9:b1:4b:63:31:35:c6:fb:
         24:70:89:d2:52:85:02:21:6d:26:1c:25:a2:46:ae:4d:9d:6d:
         df:70:ba:c6:c4:5f:98:32:96:7b:9c:d2:b4:9e:34:35:50:3d:
         ca:d4:84:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----