Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe68a0dd-f114-4ea8-9979-26e6ec732edf.roa
File:                     fe68a0dd-f114-4ea8-9979-26e6ec732edf.roa (raw, json)
Hash identifier:          +VBeeZvOgIcaUTtu072fjtTAAApRZL+J5ZO7bZtv43g=
Subject key identifier:   26:6F:FD:87:B1:07:FF:D6:8D:7A:6A:BA:D7:BD:91:A1:4E:07:9F:F2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4F92FFA19E1EADB4DF38CFFE6440ADE031F673F0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe68a0dd-f114-4ea8-9979-26e6ec732edf.roa
Signing time:             Fri 31 Oct 2025 00:40:43 +0000
ROA not before:           Fri 31 Oct 2025 00:40:43 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        16.178.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:92:ff:a1:9e:1e:ad:b4:df:38:cf:fe:64:40:ad:e0:31:f6:73:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 31 00:40:43 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=dfb6be3100ae99120ff2a3f90ade201ab48e572f60c67f059e4882e681a38319, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:36:63:a7:1e:b6:65:fe:2e:e8:bb:b2:54:8c:
                    47:7a:cc:dd:90:03:6a:66:70:22:f7:d0:39:08:78:
                    61:37:51:55:6a:84:15:e7:16:87:e6:1e:e9:4d:c8:
                    62:a8:a8:59:68:a9:49:a9:e4:81:62:b1:47:fd:7f:
                    0e:11:94:8d:21:93:f0:d2:3b:36:a4:21:47:40:07:
                    78:58:15:dc:7b:41:cd:c1:be:55:2a:f9:b8:5d:3b:
                    70:af:0e:8f:2b:64:f9:e7:0b:2d:ee:95:e6:6a:21:
                    3d:4c:c3:2a:cf:28:a9:d3:d0:5d:c2:6b:c8:4d:69:
                    3d:58:7f:f2:02:f4:8a:e2:33:1a:db:59:fc:1d:da:
                    49:a6:e3:90:e3:42:43:da:46:4c:3a:24:ad:f9:d9:
                    cf:cf:35:0c:38:7f:19:8f:9f:8e:f3:dd:ad:6b:a7:
                    0c:81:e1:8a:d1:49:b2:51:7a:0b:76:5b:74:c9:53:
                    56:b8:14:28:4d:5b:35:3c:14:a1:d5:54:c1:47:54:
                    ec:6a:f8:e9:b0:cc:c7:16:70:a7:6b:4a:b7:dd:87:
                    63:1e:00:16:b6:f5:43:8c:06:35:d7:2c:8c:2b:77:
                    68:75:5e:aa:00:e1:28:70:5e:7a:77:65:27:c8:07:
                    ec:2e:7d:f1:5f:8a:6e:cf:d6:fc:04:a3:81:2d:fd:
                    79:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6F:FD:87:B1:07:FF:D6:8D:7A:6A:BA:D7:BD:91:A1:4E:07:9F:F2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe68a0dd-f114-4ea8-9979-26e6ec732edf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.178.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         22:df:53:74:68:78:0b:71:36:d0:34:7c:69:ec:a2:19:a8:c1:
         22:e1:22:c1:4b:b9:08:92:98:1c:cf:99:bd:1a:ac:2d:55:5d:
         35:62:24:64:3d:9d:1b:63:bc:95:38:2a:8b:8e:82:9b:7c:41:
         48:16:38:8c:68:78:13:45:d5:ba:bc:23:cd:1e:26:27:cd:f5:
         89:f4:9e:aa:7a:59:50:5e:15:b1:4b:70:49:2e:c2:f7:63:41:
         06:3c:a6:f6:26:0a:ef:2b:a0:ee:b5:0b:cc:ba:c3:6b:64:35:
         a4:e0:15:61:39:01:80:93:83:61:7c:ef:27:ff:68:a8:c2:90:
         9c:d6:d1:92:a5:73:de:39:3b:32:cb:ee:a6:99:44:04:7d:5d:
         04:46:da:4f:04:a5:fc:a4:0f:c3:5f:7a:c2:37:7c:65:4c:d2:
         2d:82:2d:f0:9d:4a:17:a2:80:1f:4a:99:de:76:81:c7:c4:23:
         93:a9:00:b7:17:82:3e:92:22:48:8e:c3:5b:dd:44:e9:ca:0e:
         1c:3d:a9:58:5a:98:5e:57:af:45:d4:ef:27:2c:33:f5:3d:dd:
         07:13:22:fc:2d:68:d2:b3:0d:81:20:fc:b8:59:4a:cb:51:5e:
         e7:58:b7:59:00:a2:9d:11:13:8d:30:44:f7:7e:28:8e:0e:f7:
         2c:c1:37:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----