Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8d91306-246c-473f-994d-c6a2c60ac615.roa
File:                     c8d91306-246c-473f-994d-c6a2c60ac615.roa (raw, json)
Hash identifier:          EQGWjv//JrLqasXwjfV+CpEWCNDiK71ihzgWWkMaO0w=
Subject key identifier:   35:20:F3:9B:BF:63:0B:A0:18:4E:22:97:DA:E5:9C:BD:C2:73:0F:7F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1851D7B37E5F9493F2B245E19625B7B49E9B1555
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8d91306-246c-473f-994d-c6a2c60ac615.roa
Signing time:             Fri 31 Oct 2025 00:10:43 +0000
ROA not before:           Fri 31 Oct 2025 00:10:43 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.16.176.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:51:d7:b3:7e:5f:94:93:f2:b2:45:e1:96:25:b7:b4:9e:9b:15:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 31 00:10:43 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=71da75795f910a76fdd09d3bb0f1e2ef66536ed90e19e9a1b189d57689aa2823, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d2:51:e7:d2:70:5e:49:32:21:83:f6:1f:e8:
                    0a:ff:48:e2:76:2a:5d:d3:68:5d:4f:4c:e2:56:e4:
                    40:12:cd:9c:de:61:d7:d1:67:5f:09:9b:70:2a:5c:
                    3b:1a:2b:3e:fc:a2:32:78:55:d6:90:d8:f3:bc:ed:
                    57:d6:49:09:c1:52:7b:e0:76:dc:f5:e5:ce:23:9d:
                    3b:7b:7e:4e:94:5a:cc:0c:ef:26:ce:4f:f4:91:2b:
                    16:40:a4:32:e6:df:55:27:22:5c:39:7a:f9:16:49:
                    de:0c:02:92:40:e6:90:a1:00:8c:80:e3:e5:74:07:
                    93:83:37:e7:b2:4d:e6:2a:0b:d9:09:75:4f:c3:e2:
                    f4:2c:96:9a:8a:fd:2a:a3:2b:2c:b8:b6:27:e8:fa:
                    1b:22:7a:88:7c:2e:0a:d2:29:b4:8d:3f:56:cf:46:
                    99:05:39:3f:af:3f:af:53:a0:d6:01:6d:6c:ed:02:
                    49:94:37:80:5c:56:96:18:f1:59:de:14:76:27:e1:
                    24:d6:43:7b:dc:10:40:ca:3a:5c:ba:d3:1c:9a:e9:
                    ee:99:dc:aa:08:ec:b1:6d:32:4f:c0:22:b7:4d:ce:
                    fa:69:c0:13:5c:97:e4:91:27:76:2e:1d:16:ec:a4:
                    e5:d1:fe:b6:59:3e:4b:2f:48:79:63:bc:8c:4d:d7:
                    51:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:20:F3:9B:BF:63:0B:A0:18:4E:22:97:DA:E5:9C:BD:C2:73:0F:7F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8d91306-246c-473f-994d-c6a2c60ac615.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.16.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         51:dd:7f:ca:a6:56:17:27:e4:f9:eb:d7:a3:3e:e4:d9:db:c4:
         55:30:07:24:e6:36:2c:c9:3a:14:20:d9:99:50:dd:60:a5:a1:
         09:64:37:20:70:bc:6e:48:85:a7:b5:73:bb:39:bb:11:66:52:
         14:c1:ac:cf:b9:a2:f7:b5:e0:a5:4a:36:9b:86:bd:9e:13:ff:
         c5:43:3e:f3:e9:52:9c:d5:92:5d:19:e3:f3:36:e9:dc:35:54:
         fb:9a:62:23:72:9e:c3:14:10:d9:12:6d:5c:98:54:6c:f0:88:
         58:33:ae:60:20:96:05:cf:8d:95:d1:ba:be:5d:d2:f2:82:72:
         ec:3f:86:27:51:60:11:5b:8a:28:2c:a3:cd:7d:68:3f:1c:3b:
         2f:bc:eb:e8:41:ea:5c:f6:28:30:36:09:8d:cd:40:91:45:28:
         68:4d:94:fa:2a:b9:2b:a8:81:4c:39:f3:25:e1:72:97:04:0f:
         aa:7c:ef:4a:cb:d5:19:81:be:0b:65:34:00:c2:95:03:de:f0:
         b0:67:01:ad:a3:d7:1a:23:86:e9:ba:16:53:eb:38:11:af:3d:
         1d:0f:33:38:2a:63:e6:48:63:05:03:fc:36:17:28:f8:43:19:
         1e:5e:d8:57:bc:78:18:0d:bd:87:f7:99:e0:59:6d:f3:03:02:
         a9:5d:cd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----