Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a953e340-b236-481d-b4d2-c7f50301c88b.roa
File:                     a953e340-b236-481d-b4d2-c7f50301c88b.roa (raw, json)
Hash identifier:          UQZDPkE/KMHmuS9/8HAeiNVJOR8yEQ8TMHvG0BRTCKE=
Subject key identifier:   83:0E:B6:9B:D0:30:D3:FC:40:90:5B:2C:97:E9:AC:19:3B:79:63:BC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       495A06CC9C0D30E6010763358A1593E480444F71
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a953e340-b236-481d-b4d2-c7f50301c88b.roa
Signing time:             Mon 22 Sep 2025 16:01:44 +0000
ROA not before:           Mon 22 Sep 2025 16:01:44 +0000
ROA not after:            Mon 27 Oct 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        16.56.32.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:5a:06:cc:9c:0d:30:e6:01:07:63:35:8a:15:93:e4:80:44:4f:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 22 16:01:44 2025 GMT
            Not After : Oct 27 23:59:59 2025 GMT
        Subject: serialNumber=a1c8524f51a758d77c7ada746930758dcae70f120de2fa0c3da62396c5f253d5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a5:d5:9f:24:39:97:39:e6:68:86:2b:92:14:
                    52:ae:da:95:99:eb:09:52:91:d3:75:1a:d6:72:3f:
                    f1:7f:db:2f:00:e4:7f:ae:95:f6:0a:73:7a:92:e5:
                    d4:f3:bf:17:96:62:89:4b:90:76:50:ce:4c:3e:33:
                    bf:a6:eb:cd:4c:8b:7d:55:66:18:fc:c8:12:90:d0:
                    85:32:82:81:2e:38:63:65:a2:4e:12:b2:b4:75:d3:
                    d8:4b:4a:2a:79:4e:82:57:de:86:d2:84:6e:fc:19:
                    bc:73:3d:7a:27:67:74:eb:88:33:f2:43:46:27:37:
                    4f:c0:7c:ab:de:d6:17:18:10:29:b2:23:39:0e:45:
                    8e:08:96:4c:d1:d8:19:44:7d:c1:b6:66:23:1b:1d:
                    6f:3d:3a:ee:7e:79:dd:5c:c8:71:14:45:c0:5e:b5:
                    ff:d8:24:7e:ed:f2:7a:54:44:e0:96:23:59:7e:88:
                    ab:04:84:c9:04:27:5e:32:7d:53:f7:04:3d:d7:b4:
                    a9:8a:4e:33:75:14:88:33:b3:23:b4:37:b0:8a:ef:
                    06:90:11:42:2b:98:02:af:2c:75:e5:cb:1f:b3:45:
                    a7:62:63:a0:ce:88:4b:6e:5c:fd:b5:a6:e2:d9:20:
                    5d:88:c1:2f:82:b9:51:87:2a:4e:c2:50:55:2a:69:
                    9d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0E:B6:9B:D0:30:D3:FC:40:90:5B:2C:97:E9:AC:19:3B:79:63:BC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a953e340-b236-481d-b4d2-c7f50301c88b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.56.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1a:17:6f:ab:1c:3d:44:b7:90:fb:ac:5c:19:e0:ae:4c:26:e6:
         17:42:4d:d9:a8:ca:9b:aa:fe:15:c3:e1:9e:c9:b0:57:c6:11:
         e2:5d:8b:cb:0c:5d:87:0e:f8:e5:1c:98:51:71:28:84:2a:44:
         1f:ed:41:97:85:f8:82:b8:2d:73:48:50:b9:d2:05:7d:3e:22:
         13:7c:6d:d8:df:fe:e9:bb:e5:17:48:32:d2:09:98:87:c2:c3:
         d2:a2:5b:13:76:16:ba:52:81:10:c2:47:cf:e9:cf:2a:99:90:
         72:13:01:d6:6c:00:91:2c:09:eb:08:85:f9:de:3c:ab:ab:03:
         94:dd:20:8e:89:e6:6f:d1:34:46:95:3e:c7:4c:06:2c:d2:a1:
         f2:8f:8e:07:8e:9c:9c:99:f9:40:a1:44:33:4b:9e:1e:3f:3a:
         e5:42:25:1a:1c:0e:c8:66:82:c2:22:d1:ac:6c:e6:71:e6:7a:
         b3:c3:73:b9:bc:4f:4e:48:ab:c7:d2:cf:08:e2:7b:4f:f1:25:
         91:32:e3:76:c5:e2:7d:8d:49:48:1a:5b:4e:1d:f7:b9:e0:e8:
         bc:c2:ae:53:df:fe:05:a5:78:72:e8:33:af:ea:4c:b9:ae:2a:
         a0:9e:c8:2d:bf:4a:a4:57:8d:17:b5:4d:1a:a8:ca:66:dd:3d:
         e3:37:a3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----