Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d281e50a-e2d2-49ec-b024-332c686b1f9c.roa
File:                     d281e50a-e2d2-49ec-b024-332c686b1f9c.roa (raw, json)
Hash identifier:          Dbv4v4tchV8jqiW+23on9lM7JBwL4FFF9Xw17ITBVKQ=
Subject key identifier:   4E:B3:5E:1E:08:1A:2E:9A:9D:F9:71:34:1E:59:57:60:6F:8E:26:DC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       51B3A85A5AFEB79B1BDA93E8FC711CA637F402C9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d281e50a-e2d2-49ec-b024-332c686b1f9c.roa
Signing time:             Tue 11 Nov 2025 01:31:40 +0000
ROA not before:           Tue 11 Nov 2025 01:31:40 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.170.0.0/15 maxlen: 15
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b3:a8:5a:5a:fe:b7:9b:1b:da:93:e8:fc:71:1c:a6:37:f4:02:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 01:31:40 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=33f0d0add31fef062049b226a5f29b71aeb07e6dfe402bd9be264e3f8c9a85e4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d7:35:45:30:c8:e7:e6:c0:b9:30:08:e7:ac:
                    ba:55:a5:65:62:76:de:ae:fb:ad:a2:b1:82:81:32:
                    d5:ba:20:d9:e8:d9:5f:75:e4:a4:37:3d:ea:71:33:
                    14:84:ea:2c:43:f9:f6:68:3c:e4:65:f4:07:87:57:
                    c4:08:5b:df:d6:ae:72:3c:a8:44:d6:b8:86:54:26:
                    fd:c2:22:c5:8c:25:b6:93:96:7b:d3:a0:98:5d:23:
                    0a:e0:77:56:0a:14:f8:6f:0d:11:73:cb:e4:90:6a:
                    ad:92:47:9d:1e:8b:34:09:47:17:c2:eb:df:2d:46:
                    4c:81:d0:97:52:8d:29:3e:bd:43:2a:87:24:07:df:
                    d6:7b:83:02:52:5f:84:7a:0d:09:61:fd:db:b8:0e:
                    be:f0:20:0a:44:cc:51:73:ba:80:60:dd:dc:35:51:
                    ee:39:48:54:31:3e:24:09:20:b4:95:0a:3d:a0:35:
                    fa:8e:54:5a:5c:50:05:f5:5b:92:d3:da:ea:a8:ce:
                    f5:3a:4c:f5:7f:4a:b6:cc:e2:29:d3:83:df:1b:14:
                    39:0e:db:11:62:d7:2d:50:35:6a:31:cc:a7:da:cc:
                    0b:3e:2b:dd:26:f5:63:a9:7d:fc:1c:bb:9a:af:15:
                    ca:52:af:74:9f:e2:e1:85:c9:7b:44:34:41:8b:ee:
                    87:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B3:5E:1E:08:1A:2E:9A:9D:F9:71:34:1E:59:57:60:6F:8E:26:DC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d281e50a-e2d2-49ec-b024-332c686b1f9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.170.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         6e:5f:ee:f9:18:78:58:19:15:ae:12:3f:90:b2:d2:c9:dd:c6:
         a5:2f:42:c4:83:7d:ba:b7:a9:c4:cc:45:53:c5:15:a7:83:1c:
         a0:99:16:de:c1:74:4b:1b:3d:80:81:95:4e:18:e4:b0:53:50:
         bd:13:3c:c7:69:c7:b1:ef:a9:a2:13:fc:95:6b:16:24:5c:ae:
         57:86:06:75:0c:23:07:3a:64:71:c7:ed:ec:4a:93:bb:c7:96:
         84:13:b6:8f:82:21:b9:c8:48:96:8c:b3:d8:b6:9f:54:0f:bc:
         20:1a:8d:48:7e:3e:6e:59:2b:b4:c7:38:c6:43:8d:78:da:ad:
         ce:ef:17:8a:4f:90:e8:90:0b:ec:a5:91:e6:98:dd:14:51:70:
         da:0d:8c:56:cd:23:32:8a:55:4e:47:bf:53:86:9a:35:34:d1:
         36:90:8e:5d:28:f1:f7:a5:fd:a5:61:41:4e:85:3e:c6:c2:f7:
         ef:51:58:c7:67:ce:a9:ee:1b:89:ed:76:8b:8d:9a:29:d2:d1:
         3d:5b:5c:72:30:f0:4f:a9:df:52:b6:4d:4e:9c:cb:9e:7f:e3:
         c1:b6:e5:38:e8:3d:9f:e5:01:2b:d0:21:65:7a:f5:22:45:30:
         5b:2d:d3:ad:40:3b:78:93:3f:b2:d7:f2:b8:7a:0e:0b:58:3d:
         27:b8:e4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----