Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9f40de5-d596-465a-b9e9-abc008915f27.roa
File:                     e9f40de5-d596-465a-b9e9-abc008915f27.roa (raw, json)
Hash identifier:          Kpb6goccAwqbKDl9INgDZdgL/rA8QXnhoyC0siwSogs=
Subject key identifier:   4B:DB:0F:70:97:0B:39:25:59:A2:44:F1:98:AE:8D:B5:10:89:D6:25
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       470D13694FBC7525807E9884697073BACB232B0B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9f40de5-d596-465a-b9e9-abc008915f27.roa
Signing time:             Wed 12 Nov 2025 02:00:36 +0000
ROA not before:           Wed 12 Nov 2025 02:00:36 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.199.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:0d:13:69:4f:bc:75:25:80:7e:98:84:69:70:73:ba:cb:23:2b:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 02:00:36 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=55bc1ff46ee379d01313d2e58e6d5696535b246c81a8164c86d3475a5e6aa7d4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3a:15:4c:2b:88:c0:7c:d4:cf:89:e8:cc:27:
                    f9:31:ba:f5:ed:4d:ff:08:83:60:46:66:9e:61:ef:
                    b7:d3:8a:ac:9a:92:f8:bc:ee:83:96:31:ec:e1:8a:
                    59:ce:11:89:8a:f5:79:75:0e:cc:f8:4a:7d:29:2b:
                    64:8a:8e:d7:0e:94:24:2d:e6:4c:d9:1c:c4:72:d6:
                    b8:2b:a9:2d:86:dd:43:30:6b:1a:8d:55:96:a1:1e:
                    6d:e0:b3:88:94:15:50:9c:b8:04:3b:68:99:71:9f:
                    09:13:42:d5:0d:bf:c7:45:a8:0f:7c:f4:47:88:20:
                    ac:e3:6e:9b:c4:c3:6d:80:4b:b7:97:d8:af:0f:12:
                    1c:33:1c:44:3c:8a:81:7d:9e:da:31:2c:85:5f:4e:
                    4d:ba:ee:5d:39:71:2a:28:9a:27:00:b5:6a:08:c6:
                    f3:af:e7:be:e0:0d:cb:36:34:b4:bb:ae:5e:ad:44:
                    34:2e:0a:be:a7:68:f2:af:6a:4f:e8:e4:23:04:38:
                    0d:90:f0:e6:4a:24:ac:73:00:78:82:5e:b0:4e:3d:
                    65:4b:90:e6:29:55:fc:f5:b5:d0:b1:97:7a:cb:e6:
                    23:85:ae:87:62:84:94:da:64:6c:a0:db:9a:42:3b:
                    c6:32:8b:ed:7a:27:49:a2:54:0d:fc:12:c2:68:91:
                    db:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DB:0F:70:97:0B:39:25:59:A2:44:F1:98:AE:8D:B5:10:89:D6:25
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9f40de5-d596-465a-b9e9-abc008915f27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.199.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8c:b9:39:15:fc:13:55:f3:c9:c6:19:37:2e:47:aa:40:0b:7f:
         71:ea:49:6b:34:ec:c7:bb:bc:eb:54:d7:68:43:74:f5:c2:cf:
         ea:3e:69:f7:6e:77:9e:14:00:85:37:94:fa:d8:2e:cd:1b:3a:
         65:d3:8e:e3:79:bf:f0:6d:65:0a:24:6c:96:51:50:01:05:e9:
         ad:85:ca:56:48:37:36:4f:2c:d2:c2:a2:f6:e6:ef:d6:1f:a5:
         57:35:97:ef:70:30:12:fc:a4:71:39:e8:b9:9a:1e:8d:82:ed:
         d8:d6:d1:36:6c:f3:8e:40:15:1c:11:ca:a5:31:0f:c8:aa:21:
         b2:2b:7a:41:17:a8:e2:c3:8f:e4:14:5d:b2:2b:e5:37:f7:b3:
         93:63:65:63:db:db:af:f6:08:28:19:5a:c2:d0:c9:78:e1:fa:
         b0:3c:86:1a:38:e3:c5:6c:82:1d:9f:c6:40:d9:16:ee:20:9d:
         bd:22:dd:41:68:09:19:03:2f:50:1c:b9:f8:d9:fe:7d:67:02:
         af:96:04:60:1b:46:d8:76:02:23:33:72:9a:89:d9:c6:71:ee:
         2b:67:2b:01:34:7a:6a:ac:de:cd:69:fe:3a:f9:90:21:e0:1d:
         e0:56:2e:3f:1e:46:58:e6:b3:6f:52:17:77:d6:b5:07:37:4a:
         a2:84:fb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----