Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/053eb650-9bae-428e-9e11-1465fd0cd03a.roa
File:                     053eb650-9bae-428e-9e11-1465fd0cd03a.roa (raw, json)
Hash identifier:          IupUZFSL88l6z+g9Zcz8HFb4sQ6SUsqSQHiE3i7OFDE=
Subject key identifier:   E2:38:FD:A1:2D:37:A6:4F:F3:E3:48:DF:4E:8B:0B:08:D5:AB:00:A3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       16CDF9A92152ABD8B88F374931C602B3D8EEEB5E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/053eb650-9bae-428e-9e11-1465fd0cd03a.roa
Signing time:             Tue 11 Nov 2025 00:40:52 +0000
ROA not before:           Tue 11 Nov 2025 00:40:52 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.56.0.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:cd:f9:a9:21:52:ab:d8:b8:8f:37:49:31:c6:02:b3:d8:ee:eb:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 00:40:52 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=b1a10c00e8fe2583eb44fa5178fb6afea30febd86bdc171b7c88beeca42a1a80, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cb:27:4a:df:39:77:35:13:ca:2a:52:36:a9:
                    1f:e2:f7:d0:79:2f:07:e8:c1:ec:3e:b9:ad:0b:ed:
                    2d:3c:e2:e2:ca:08:93:33:a1:ca:05:df:71:a0:ee:
                    a2:42:15:5d:51:a2:73:02:88:2b:72:cb:ab:8e:09:
                    92:c5:97:02:65:30:12:de:8c:89:3f:5b:71:74:1e:
                    e2:a5:86:45:1b:8b:fb:ad:fe:12:4c:d7:67:9e:8f:
                    8e:43:e1:b0:fd:60:b2:b5:03:b4:d2:d9:9c:5b:27:
                    fc:b0:88:88:96:f3:1e:eb:39:0b:b1:3d:81:4d:ed:
                    b3:18:75:86:ab:c3:4b:5f:5a:8f:50:6d:65:06:1c:
                    84:17:41:df:33:51:d8:70:2a:b0:f8:1a:5e:90:2d:
                    56:9d:4d:fe:0e:57:00:2e:83:b9:d2:c6:6f:e2:36:
                    86:48:7f:81:f5:79:0d:33:b8:f7:eb:8a:b1:60:16:
                    23:07:54:b8:73:9d:84:1e:a8:88:e4:57:ec:68:6a:
                    89:4d:28:5a:a1:64:17:d4:3d:72:ad:57:e4:13:bf:
                    fb:d7:57:3f:a3:c4:d3:44:a5:4c:f6:2c:ac:fb:a9:
                    1b:43:f1:30:68:f1:14:93:bc:10:97:e4:ff:9a:ac:
                    3a:4b:75:a0:b8:97:52:70:ab:bb:d5:51:40:87:92:
                    39:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:38:FD:A1:2D:37:A6:4F:F3:E3:48:DF:4E:8B:0B:08:D5:AB:00:A3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/053eb650-9bae-428e-9e11-1465fd0cd03a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.56.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2f:f0:60:33:de:17:9e:5a:58:3f:61:6d:78:75:15:9b:4b:34:
         b5:90:22:23:0b:56:4a:73:34:48:26:12:83:ea:bf:5b:b1:b1:
         c8:2c:26:5c:9d:f4:64:9f:e7:ed:43:6b:00:c8:3a:88:e6:2e:
         56:ed:a5:7d:63:14:85:12:85:fc:c3:18:a2:c0:7d:ff:1d:8b:
         3c:74:7c:17:5e:80:f9:5f:17:22:32:23:40:6f:40:67:1a:74:
         90:c2:d9:95:b8:7d:24:28:83:41:91:ed:4b:35:e1:7c:db:f5:
         a4:30:e6:79:99:1a:0c:78:fa:61:bb:9a:32:55:75:7d:7b:ac:
         33:29:fc:89:be:e1:67:02:66:78:bf:2c:7c:f2:3b:82:09:42:
         bf:e3:48:82:63:01:74:d7:d2:e8:5e:11:29:7b:cc:55:15:6a:
         2d:62:11:5d:e6:53:9e:8b:13:13:8a:bd:56:bb:f3:17:d4:d2:
         25:a3:94:aa:d2:f0:b5:21:85:10:5e:a2:a7:39:75:0a:85:63:
         c0:e1:a6:d2:c4:35:2b:1e:6f:8b:4c:90:a2:28:47:ed:c8:fa:
         e4:97:a9:19:0d:7d:68:95:d6:23:b9:72:b9:62:49:90:48:5f:
         69:52:30:05:83:60:f4:a1:cf:7a:cd:25:7c:b1:a5:8a:aa:16:
         7f:f2:28:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----