Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df3fb5b8-bf1a-4124-9fed-c3894106bf41.roa
File:                     df3fb5b8-bf1a-4124-9fed-c3894106bf41.roa (raw, json)
Hash identifier:          hjSK9JBLOGlD6SvWTpm1w4rs4vCQfdleRGCLWjglhP8=
Subject key identifier:   1F:1D:49:5B:A4:7D:4D:E5:2E:A7:2E:5E:3A:F1:A6:21:B4:BA:BF:F3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       50D8C7CD0CC0C4D22E86BB24B323DCD436758D53
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df3fb5b8-bf1a-4124-9fed-c3894106bf41.roa
Signing time:             Sat 25 Oct 2025 00:01:12 +0000
ROA not before:           Sat 25 Oct 2025 00:01:12 +0000
ROA not after:            Sat 29 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        16.189.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:d8:c7:cd:0c:c0:c4:d2:2e:86:bb:24:b3:23:dc:d4:36:75:8d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 25 00:01:12 2025 GMT
            Not After : Nov 29 23:59:59 2025 GMT
        Subject: serialNumber=ef20f81a3637ca5763e863e1389d627effbc5d5176f5ee52cccadcfe0bd72324, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:dd:07:5d:89:c1:dd:a4:9b:bc:32:02:8e:4b:
                    3a:85:db:16:e6:9e:43:2e:ff:bd:d5:08:10:ae:84:
                    d6:14:fd:94:16:89:36:41:ae:09:a6:f2:e8:59:82:
                    ca:d3:b9:96:07:33:44:ee:74:f8:fb:fc:13:8a:d1:
                    da:78:36:b5:ff:5f:c1:ce:75:df:3c:83:81:00:29:
                    dd:69:b8:d1:77:fb:d6:79:f8:5c:ef:d0:fa:39:f5:
                    ec:d3:5a:d2:19:b0:ed:9f:74:97:c3:70:94:71:44:
                    2c:fc:80:c0:58:18:64:5b:7b:dc:b6:64:f7:62:f5:
                    ee:b1:a5:d8:33:89:14:1b:5d:cc:ab:d4:cb:59:75:
                    7f:6f:97:bf:7d:fe:32:c9:75:5a:b9:aa:c0:23:41:
                    cf:da:da:5a:72:80:b6:11:0e:17:91:df:59:78:d4:
                    e1:9d:03:6c:a5:8c:db:72:7f:dd:62:9e:ed:8b:b1:
                    66:e0:02:22:46:46:f5:d0:1a:07:3c:94:9e:59:e9:
                    1c:e2:1f:2c:b1:11:2d:99:cc:95:d3:84:41:7e:80:
                    cf:ff:12:36:b2:29:47:66:38:c0:06:36:3e:7b:ec:
                    03:e5:ef:4e:43:35:91:95:21:08:2c:8d:0e:b4:2b:
                    10:01:d2:ee:ad:85:ab:6f:bd:38:2d:7e:21:6c:c0:
                    b2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1D:49:5B:A4:7D:4D:E5:2E:A7:2E:5E:3A:F1:A6:21:B4:BA:BF:F3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df3fb5b8-bf1a-4124-9fed-c3894106bf41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.189.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3a:22:2c:7d:8d:73:a0:92:45:61:0a:4b:a2:f3:6e:86:ec:5a:
         b4:a8:b5:15:89:cb:e9:29:e1:34:8a:6e:90:85:26:14:02:e0:
         60:a8:53:94:85:b1:51:57:2d:36:8c:90:83:92:0b:c1:47:62:
         65:8c:68:da:9a:20:3c:1f:2a:d0:d0:eb:87:2e:42:62:bb:69:
         d4:34:93:2f:97:d2:83:68:9c:cf:46:98:26:a1:b2:fb:60:f2:
         3e:67:6a:07:bc:23:9e:22:df:33:c0:c9:fd:e5:a3:2c:de:6f:
         97:e3:a4:8f:d3:54:7e:6d:43:fd:47:16:08:df:58:70:46:83:
         c4:33:3e:2a:0a:62:5c:50:28:55:50:93:4c:71:da:96:30:d4:
         7c:63:4d:7e:1e:f7:8d:79:00:ef:94:06:e9:09:94:a4:94:7f:
         6a:07:a7:9f:60:e9:33:e6:f0:87:31:a7:ff:fc:e4:31:c1:00:
         b7:c8:56:eb:74:1d:64:14:5d:1f:c8:76:f9:b5:bb:1f:90:ef:
         bf:44:33:75:09:40:06:88:a6:42:5c:ab:45:cf:08:5c:0d:b8:
         f4:16:82:80:00:e7:dc:c4:e8:ea:45:53:07:d8:ea:9a:ee:54:
         10:73:7f:9e:e6:e2:76:2e:2b:b5:1d:32:3b:61:0b:0b:06:eb:
         6e:cb:3c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----