Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8b7b84c-8dd7-4da0-bc53-6c9fb363d7d6.roa
File:                     b8b7b84c-8dd7-4da0-bc53-6c9fb363d7d6.roa (raw, json)
Hash identifier:          Ci2dMoBPpPBRIeXA4xzeISAG5+bxnPzcBJBqBsDJpfA=
Subject key identifier:   47:7D:8A:8A:46:F4:17:C0:52:71:BD:4F:44:10:1A:11:F4:1E:29:A2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       20947A9C981633D4D71655812E5FDF14B80C7287
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8b7b84c-8dd7-4da0-bc53-6c9fb363d7d6.roa
Signing time:             Wed 08 Oct 2025 00:01:20 +0000
ROA not before:           Wed 08 Oct 2025 00:01:20 +0000
ROA not after:            Wed 12 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        16.59.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:94:7a:9c:98:16:33:d4:d7:16:55:81:2e:5f:df:14:b8:0c:72:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  8 00:01:20 2025 GMT
            Not After : Nov 12 23:59:59 2025 GMT
        Subject: serialNumber=4de15d1357a95d63723c5d953920cd1425bec75d00c731804fe64f5323f8d067, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b9:d7:7b:23:d1:42:0a:07:e0:a3:75:51:e8:
                    30:e2:80:9c:e0:33:1d:20:c6:4e:88:93:db:e8:3a:
                    9d:f4:b2:c4:a9:1d:82:bb:c4:fa:75:37:cc:7f:d6:
                    90:91:ee:86:ac:a5:2f:a4:15:91:af:19:62:e5:59:
                    89:1f:e8:22:c9:29:2f:4f:c7:d5:6c:b1:19:39:7b:
                    77:17:b9:1e:bb:82:4e:19:8a:bb:41:df:c2:d8:70:
                    5e:a7:27:88:54:5c:0b:81:7b:49:c1:53:7a:90:74:
                    5c:db:d4:94:a3:3c:2d:f8:26:9c:df:86:0e:29:2d:
                    32:88:5a:da:c9:18:3a:4d:60:21:26:5d:c6:db:d2:
                    c7:2a:e5:a4:b3:9d:69:74:0f:55:50:2f:2c:d9:fc:
                    9c:ff:18:55:ab:c7:0c:64:4e:bf:fa:93:49:2a:d4:
                    d0:fd:62:2d:64:63:27:94:35:80:ab:50:69:f7:bf:
                    0f:e0:b4:76:a2:d7:01:e2:49:a2:45:c5:50:0c:34:
                    20:4a:54:31:66:56:f3:55:0e:c0:83:f8:79:39:54:
                    39:f3:9f:83:87:bb:cd:ac:2a:71:7d:85:5b:77:f3:
                    55:db:34:5b:0f:cb:fc:fe:d9:8d:45:56:bf:7f:7b:
                    cb:7f:fa:22:97:42:44:2c:94:12:c4:79:7d:4d:48:
                    e6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7D:8A:8A:46:F4:17:C0:52:71:BD:4F:44:10:1A:11:F4:1E:29:A2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8b7b84c-8dd7-4da0-bc53-6c9fb363d7d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.59.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         be:80:72:27:4b:2b:36:72:fa:8f:f0:dd:e3:38:18:40:89:38:
         cd:b9:4b:fe:df:d1:34:29:0d:d7:a6:8e:29:22:47:85:00:a0:
         bd:00:5f:71:c1:0a:39:88:00:5f:7d:e6:33:8d:3e:d5:cc:1a:
         c5:8b:42:28:7b:32:b6:72:43:99:ef:6f:0f:9a:c8:5a:98:89:
         79:b7:61:9b:91:96:51:35:0e:b7:54:d2:49:36:58:f2:15:46:
         ef:29:26:68:d9:24:7c:f9:0f:0c:75:1b:db:56:a9:12:59:2c:
         78:d7:f4:3f:99:80:a5:f9:b0:bf:f9:28:d8:ae:4d:60:ed:9e:
         d0:69:95:3f:3c:67:b9:5f:cb:b1:bc:85:f9:3e:3b:32:b7:8d:
         78:c0:ba:26:44:7e:64:24:e1:e7:f2:5e:b2:93:20:b2:88:7a:
         16:3a:b1:8b:fa:6d:b4:af:4b:7c:73:ad:e0:89:2d:27:bc:28:
         3d:a3:66:f4:91:23:61:1b:95:f2:66:02:48:e5:d3:78:fb:bf:
         f5:0b:bf:f8:4d:fb:99:e1:36:7f:18:e4:97:45:89:b0:60:46:
         21:ed:af:73:fe:dc:d2:b0:b5:bb:58:ed:7d:70:37:90:c0:47:
         47:19:bf:0e:6e:11:7c:f1:28:2a:2b:9b:4f:e0:20:fd:d1:34:
         ef:7d:f9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----