Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb16619b-1591-4d59-85b6-2489343fa1f0.roa
File:                     eb16619b-1591-4d59-85b6-2489343fa1f0.roa (raw, json)
Hash identifier:          i5LzxchISPPqqW1AsOLkMIo458EHmzMxVZuvbgzDG/c=
Subject key identifier:   7D:4B:64:05:0C:42:62:3C:72:3D:D4:1B:42:E8:18:A5:D3:E9:E7:1E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       229DE2BFE6A0E17C00AB3D2624F0E2112AEFD9DF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb16619b-1591-4d59-85b6-2489343fa1f0.roa
Signing time:             Mon 06 Oct 2025 17:36:59 +0000
ROA not before:           Mon 06 Oct 2025 17:36:59 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.27.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:9d:e2:bf:e6:a0:e1:7c:00:ab:3d:26:24:f0:e2:11:2a:ef:d9:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 17:36:59 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=9896d867cf7ab2c59b572efda593ba6ccd5addaf21b8c69fe1e99c6195c0066c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bb:5b:a9:42:3a:f7:6f:a1:0e:b8:99:41:fe:
                    e2:84:36:b4:a7:1e:5b:8a:c6:2f:1b:1b:a7:cd:db:
                    08:7e:06:0f:d1:8b:e6:29:75:f7:8a:90:51:31:46:
                    d9:6e:a9:5a:28:97:83:10:ef:89:2e:b5:38:37:65:
                    9c:82:13:cc:9c:bc:57:75:53:70:71:c5:af:de:4d:
                    bc:2f:e2:8f:a1:aa:bf:ad:73:9d:7b:15:72:0b:2f:
                    ff:75:a4:f0:bf:7a:d0:37:de:e9:5a:13:94:7e:ee:
                    60:c7:9d:c7:3b:6a:c3:bb:cf:d4:79:8d:37:b2:b3:
                    3f:49:7e:d4:c6:8c:d8:dd:3a:15:5a:46:5c:85:32:
                    a4:58:0f:4b:af:d6:42:dd:89:0e:47:6d:ea:0d:12:
                    b9:f5:5e:c9:dc:af:fa:6e:dd:26:78:96:72:ea:ac:
                    4c:ac:7b:10:9a:76:b9:0a:7e:38:08:49:c2:39:d5:
                    fa:45:4e:b3:bd:7d:57:0c:d6:da:ef:dd:cc:ff:52:
                    3d:d0:4e:cf:1c:eb:fc:e2:70:b5:7d:6e:d2:7b:96:
                    a5:86:11:d0:87:e8:44:8e:2b:db:6e:17:11:ba:58:
                    6e:19:79:28:ff:9e:8b:d7:ed:cd:18:34:25:c9:38:
                    99:fe:b4:2f:0e:00:87:2a:e6:69:63:ed:4f:72:5c:
                    17:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:4B:64:05:0C:42:62:3C:72:3D:D4:1B:42:E8:18:A5:D3:E9:E7:1E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb16619b-1591-4d59-85b6-2489343fa1f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.27.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6a:12:97:be:d7:5c:f2:d9:9d:4b:7a:a0:11:69:5c:59:8e:cc:
         b4:bf:46:21:3f:d6:7a:af:4d:f1:ce:66:92:4d:a6:f7:e4:08:
         a5:7a:9f:8d:0a:e7:f8:76:a5:e8:7a:31:e0:95:d4:5f:0b:c1:
         14:47:eb:2b:23:73:d9:f6:bd:9d:37:50:c0:06:65:22:45:d9:
         ef:8b:17:94:35:30:3e:b4:5e:e1:ea:d6:62:6c:13:c2:bb:6b:
         7a:50:b0:44:ce:87:d8:41:45:b8:ec:0a:50:97:f7:fb:32:4a:
         6d:4e:6b:bd:80:5b:0f:7a:9f:57:40:3b:57:11:c8:43:6b:22:
         ec:97:e4:ac:14:d7:b0:9e:3d:9b:36:12:20:ff:9f:bb:e1:a4:
         2c:ac:9c:79:75:20:73:b3:7d:d6:7b:3a:ea:60:99:6c:1a:97:
         a3:01:ba:4d:a5:7e:37:cf:9b:25:42:3f:b3:f7:55:a7:b4:0e:
         e1:a8:7d:0f:43:e3:06:b9:3c:bd:cd:9d:13:84:3b:59:34:77:
         b8:e0:dd:05:3e:dc:ee:39:cb:e0:4d:37:d4:dd:dc:6e:a8:84:
         a4:79:dd:63:75:7e:04:1d:00:e0:ef:7d:dc:20:d9:0a:b2:17:
         a3:16:43:96:5d:0d:41:e1:01:5d:9b:28:43:27:d3:50:7f:d0:
         5a:5d:3b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----