Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/215d8cb7-951d-429e-8cf5-ecc8f30c3e2e.roa
File:                     215d8cb7-951d-429e-8cf5-ecc8f30c3e2e.roa (raw, json)
Hash identifier:          IQkJFHqoEab18bBBk6S/QwyBtTH1XJn91qkQNburJBU=
Subject key identifier:   17:E1:04:70:5A:D4:21:57:FA:A0:71:5B:BB:04:71:E6:43:47:B1:BA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1A750DA260E48B6E44E2873774EAC3AE8C4948B1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/215d8cb7-951d-429e-8cf5-ecc8f30c3e2e.roa
Signing time:             Tue 11 Nov 2025 00:31:17 +0000
ROA not before:           Tue 11 Nov 2025 00:31:17 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.26.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:75:0d:a2:60:e4:8b:6e:44:e2:87:37:74:ea:c3:ae:8c:49:48:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 00:31:17 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=8bd259397a42608a22ee1a4282fa5412a035a28ff623d88b78f0c4df00f24a77, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8d:f3:3d:05:2b:ff:30:9a:de:71:e6:5e:25:
                    09:6f:9a:05:14:12:31:e3:a8:21:d1:65:9e:ef:e8:
                    0d:9c:74:36:87:40:07:e3:53:3a:a3:4b:e4:54:6a:
                    ce:cb:f4:79:20:fe:fe:26:dc:fc:c7:e0:05:b6:fa:
                    75:ba:ba:c1:96:2e:18:c8:fc:6c:23:a1:ac:5b:73:
                    9b:2a:20:21:d6:6a:dc:6e:4f:06:c3:73:03:4f:63:
                    46:e2:75:30:a5:5c:1e:03:59:f9:13:1a:37:ad:12:
                    7c:3f:3c:49:8d:65:c2:94:09:e6:f3:c9:2b:9c:1e:
                    78:3f:f2:cf:a4:1a:51:cc:34:2b:20:06:c1:ea:0f:
                    40:d4:a4:95:80:5a:3b:aa:48:d9:d3:b2:84:55:e6:
                    47:cf:a2:91:de:71:80:cb:11:7e:6f:5f:55:c7:bd:
                    9c:d6:55:93:f2:13:09:70:08:72:09:1d:c0:4e:84:
                    85:6e:20:e0:8b:9a:b3:15:42:78:2b:19:b0:2c:03:
                    ac:e4:ad:c4:ea:1a:d7:f9:88:55:9e:63:57:04:90:
                    e5:45:b4:e6:e5:76:40:65:13:07:41:20:4c:34:44:
                    f3:c5:6c:35:08:20:13:74:33:13:22:2a:8e:85:6c:
                    5f:2a:67:7c:2a:2e:f3:4f:b1:02:16:63:3b:88:34:
                    1e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E1:04:70:5A:D4:21:57:FA:A0:71:5B:BB:04:71:E6:43:47:B1:BA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/215d8cb7-951d-429e-8cf5-ecc8f30c3e2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.26.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a2:44:fe:36:20:2c:a8:79:cc:4c:3d:94:6e:7f:90:ae:29:52:
         e3:67:65:38:27:97:34:a6:20:1d:95:34:d4:98:6e:5b:55:55:
         ad:85:43:4f:1c:c1:3c:6b:59:d3:86:a9:95:44:e4:8c:46:b0:
         e0:63:32:bb:ef:4c:40:56:66:d2:b9:43:31:02:f8:4c:02:60:
         54:84:3b:c9:9e:c3:8b:8a:67:d8:f6:9c:85:ee:76:85:07:25:
         b1:7b:50:8f:d2:0a:a9:d1:99:3d:04:19:27:ff:be:e0:74:81:
         7b:9c:e9:ed:98:ce:66:95:c7:8a:4a:f5:82:24:14:d1:4f:50:
         82:a4:8c:25:ba:41:ef:ea:99:7f:2f:f5:30:f0:e4:9f:8d:97:
         93:35:92:45:24:6c:5c:f8:a7:60:08:a3:58:d7:48:d6:b1:c0:
         8f:d5:f7:48:36:fa:9d:fc:6c:0e:08:ba:35:9e:40:34:a3:23:
         c1:53:69:d6:bf:47:01:b2:35:5a:13:b4:7d:8d:da:fa:0d:11:
         3f:dd:e6:32:49:e4:f5:8b:a7:1e:85:2c:09:07:06:3b:ab:aa:
         52:a9:8f:ad:cc:9e:55:30:df:3e:51:e6:13:7f:17:89:2a:49:
         92:73:00:53:a1:1e:fa:56:3b:0f:7c:f6:53:27:77:40:7c:7e:
         a7:fd:e9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----