Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b958acb-1d54-472e-b493-5b27ed769a39.roa
File:                     4b958acb-1d54-472e-b493-5b27ed769a39.roa (raw, json)
Hash identifier:          Ota+3bnmd1/5VQayNA3ohFokndlhTmaw+8ontZbSLyE=
Subject key identifier:   FE:AD:26:A1:48:5B:02:54:4B:C0:6F:85:71:3D:2D:DE:2B:8D:B6:47
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       724064CD531179D7F8A738BE0F08F3378E9F6138
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b958acb-1d54-472e-b493-5b27ed769a39.roa
Signing time:             Tue 30 Sep 2025 00:11:14 +0000
ROA not before:           Tue 30 Sep 2025 00:11:14 +0000
ROA not after:            Tue 04 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        16.206.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:40:64:cd:53:11:79:d7:f8:a7:38:be:0f:08:f3:37:8e:9f:61:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 30 00:11:14 2025 GMT
            Not After : Nov  4 23:59:59 2025 GMT
        Subject: serialNumber=396bd032c509c1759dcbfb387fd884cd733a0e1c66fbb2695c210034828316d3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8b:54:81:9a:1e:61:e1:ba:ae:a3:4d:b8:69:
                    43:4c:3f:17:d5:36:f5:2d:63:3b:46:1a:c3:8d:cb:
                    0f:48:70:e1:98:d6:42:86:06:94:c2:b5:2b:9f:c8:
                    bd:e2:e2:6f:93:c7:05:9d:96:8e:89:70:77:ee:75:
                    3d:aa:c1:c5:f3:5e:ec:96:9b:cf:35:0c:9f:a0:d2:
                    ae:c8:e9:3a:1b:13:dd:6c:ee:b5:65:b0:27:64:8a:
                    2f:1f:07:c3:de:bc:97:7c:93:ca:10:32:99:1f:c6:
                    4a:04:a3:ed:8f:9a:5e:d0:eb:12:84:75:33:f2:3a:
                    60:13:ae:78:90:64:16:78:e0:8a:db:f4:6a:41:73:
                    3d:a7:a2:7e:83:e8:24:9f:54:69:f2:6c:5a:a0:c7:
                    21:d7:af:18:4e:43:7c:03:d5:49:f7:f0:34:32:b5:
                    80:92:61:c8:1b:16:c3:20:cc:9d:bd:33:4d:47:28:
                    fe:f2:17:5b:d0:db:e8:d8:23:3f:31:bc:b3:e1:0c:
                    fb:f1:6e:ee:b8:c3:ca:f5:4c:64:e3:62:8c:3b:df:
                    ad:29:46:7b:08:68:9d:b4:59:1e:1b:ae:1b:d3:8b:
                    11:49:5a:e8:16:26:9d:4a:36:f4:13:b6:38:76:38:
                    e5:8d:d6:4b:c1:85:df:f1:c6:cd:94:98:99:2f:4f:
                    87:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:AD:26:A1:48:5B:02:54:4B:C0:6F:85:71:3D:2D:DE:2B:8D:B6:47
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b958acb-1d54-472e-b493-5b27ed769a39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.206.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         28:a7:46:15:3d:6e:c9:6c:32:2d:42:f8:db:45:71:5d:d1:46:
         3c:cb:3f:5e:c4:8d:65:18:a8:a1:4f:63:11:c7:fd:4e:27:9a:
         a1:c5:59:6c:ce:a0:9b:73:ee:75:d5:72:ea:1b:b8:2d:e0:97:
         f6:c3:86:00:a7:11:67:93:0b:01:ef:81:1a:82:f9:87:33:05:
         08:96:6a:40:e5:c5:46:6a:c7:1e:8e:d1:36:cf:a8:ed:03:bf:
         7a:37:e2:11:37:e9:8b:a1:4e:8e:2a:94:7b:75:77:d9:15:09:
         98:73:0e:bc:bf:cc:b1:38:83:cd:32:4f:4a:ec:71:78:81:f8:
         79:55:1e:7e:06:0f:0b:63:12:5b:44:32:ea:a1:1a:a0:13:02:
         95:fb:a1:fa:7c:a3:b3:dd:43:01:dc:fe:09:d0:e3:58:52:ad:
         a9:9f:04:9f:0d:e7:2b:d5:7f:3c:2a:8e:16:8a:6d:f1:68:42:
         41:5d:05:55:90:a5:91:c7:8c:24:3a:b1:25:66:b7:5e:72:a5:
         59:09:78:ba:10:c9:14:2e:da:31:f6:8e:e9:31:ad:92:d3:2c:
         87:c9:f9:5a:3a:d1:73:f2:38:6b:f6:39:b5:15:5e:81:b7:ba:
         7b:06:a8:ae:b4:d3:1c:62:f2:46:c8:af:d8:55:3f:27:58:58:
         0d:22:b7:48
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUckBkzVMRedf4pzi+DwjzN46fYTgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTMwMDAxMTE0WhcNMjUxMTA0MjM1OTU5
WjB6MUkwRwYDVQQFE0AzOTZiZDAzMmM1MDljMTc1OWRjYmZiMzg3ZmQ4ODRjZDcz
M2EwZTFjNjZmYmIyNjk1YzIxMDAzNDgyODMxNmQzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCZi1SBmh5h4bquo024aUNMPxfVNvUtYztGGsONyw9IcOGY
1kKGBpTCtSufyL3i4m+TxwWdlo6JcHfudT2qwcXzXuyWm881DJ+g0q7I6TobE91s
7rVlsCdkii8fB8PevJd8k8oQMpkfxkoEo+2Pml7Q6xKEdTPyOmATrniQZBZ44Irb
9GpBcz2non6D6CSfVGnybFqgxyHXrxhOQ3wD1Un38DQytYCSYcgbFsMgzJ29M01H
KP7yF1vQ2+jYIz8xvLPhDPvxbu64w8r1TGTjYow7360pRnsIaJ20WR4brhvTixFJ
WugWJp1KNvQTtjh2OOWN1kvBhd/xxs2UmJkvT4flAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU/q0moUhbAlRLwG+FcT0t3iuNtkcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzRiOTU4YWNiLTFkNTQtNDcyZS1iNDkzLTViMjdlZDc2OWEzOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQzjANBgkqhkiG9w0BAQsFAAOCAQEAKKdGFT1uyWwyLUL420VxXdFGPMs/
XsSNZRiooU9jEcf9TieaocVZbM6gm3PuddVy6hu4LeCX9sOGAKcRZ5MLAe+BGoL5
hzMFCJZqQOXFRmrHHo7RNs+o7QO/ejfiETfpi6FOjiqUe3V32RUJmHMOvL/MsTiD
zTJPSuxxeIH4eVUefgYPC2MSW0Qy6qEaoBMClfuh+nyjs91DAdz+CdDjWFKtqZ8E
nw3nK9V/PCqOFopt8WhCQV0FVZClkceMJDqxJWa3XnKlWQl4uhDJFC7aMfaO6TGt
ktMsh8n5WjrRc/I4a/Y5tRVegbe6ewaorrTTHGLyRsiv2FU/J1hYDSK3SA==
-----END CERTIFICATE-----