Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05ca82d2-6384-465b-9cc8-584997578e14.roa
File:                     05ca82d2-6384-465b-9cc8-584997578e14.roa (raw, json)
Hash identifier:          YmYs1RbqQlCm9ivZsbAcA13B05gCHNOut7c/BoXxjhM=
Subject key identifier:   5E:27:8F:00:79:96:D9:38:B7:42:37:63:51:DF:AC:A9:C0:D7:F0:F5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       254D23B9751ED341F041128DD68BC2A7DAE8060C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05ca82d2-6384-465b-9cc8-584997578e14.roa
Signing time:             Sun 19 Oct 2025 03:01:27 +0000
ROA not before:           Sun 19 Oct 2025 03:01:27 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.218.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:4d:23:b9:75:1e:d3:41:f0:41:12:8d:d6:8b:c2:a7:da:e8:06:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 03:01:27 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=433df409c47a4e61dd24230853d10835138cf0220de236a05815fc8335ecd6be, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:59:73:00:26:20:e6:ab:14:39:63:a4:39:f2:
                    e1:a2:45:8b:21:4e:6b:71:b6:58:a0:5e:2a:30:ae:
                    e7:22:3d:6c:b9:bb:eb:1e:f4:0a:96:98:7a:0a:d6:
                    e5:6c:40:6a:83:d6:f9:41:dc:eb:3b:1c:b2:d3:08:
                    e9:b0:ea:e1:b2:85:77:a9:c1:35:3b:94:93:39:ff:
                    27:b9:76:fc:5f:79:14:2b:8b:1a:37:fd:51:de:00:
                    1e:0f:22:6c:cb:62:1b:d3:71:7b:aa:35:fe:3a:57:
                    11:c6:35:8e:c6:82:d8:4d:43:b2:03:a1:96:d7:f3:
                    b0:d1:45:0d:f6:f8:77:3d:5d:ef:25:0e:e7:40:9d:
                    d0:a7:49:37:f6:16:18:80:9d:fc:90:70:89:a8:ab:
                    d9:64:ab:12:a5:a7:92:39:12:81:97:67:26:05:57:
                    60:6e:e1:84:54:e5:1f:c2:a9:34:80:86:91:da:04:
                    90:e4:df:21:be:0c:5d:1d:c3:7e:ed:8b:5c:16:09:
                    f2:ab:b4:bf:82:e5:dd:1a:cd:b1:01:e8:2d:77:d6:
                    d1:80:98:07:20:e8:4f:10:1a:cc:d4:83:77:ee:e0:
                    97:e1:ac:f2:9d:fb:7e:3a:0c:20:87:dd:26:0c:5f:
                    7f:57:d8:de:f1:90:67:5f:e2:04:8d:40:d6:98:41:
                    ff:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:27:8F:00:79:96:D9:38:B7:42:37:63:51:DF:AC:A9:C0:D7:F0:F5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05ca82d2-6384-465b-9cc8-584997578e14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.218.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d5:fe:a0:e2:e7:4e:da:26:17:d4:60:b2:3d:37:da:9d:49:a9:
         a4:c5:0b:67:5a:91:9c:01:d9:e5:35:6c:ec:5f:15:63:1a:d3:
         f2:5e:a7:83:ec:6e:83:d8:87:95:3a:53:d0:bd:69:6a:59:21:
         8a:3e:c9:db:cb:f3:83:f3:e7:6e:6e:0d:6c:76:10:3d:c3:66:
         c8:1b:50:78:b5:fe:1a:24:62:d5:e6:04:98:9a:f5:68:b8:47:
         2e:41:a0:57:e2:5b:1c:40:c8:f9:1e:d5:c0:37:ed:6c:38:6f:
         47:cd:b7:da:54:e5:a6:dd:02:40:b0:4f:43:a4:29:f1:07:72:
         1f:58:e8:b4:69:67:f3:a7:86:a5:9a:de:1f:85:74:7c:2d:6d:
         42:02:ff:96:7a:bb:64:da:ea:f6:7b:e6:21:d8:86:05:17:a1:
         44:be:bf:65:6c:d8:cd:9c:45:ba:40:11:e7:c6:05:3f:2a:fd:
         c8:76:82:30:e1:18:91:70:01:16:32:a9:87:a3:92:3c:09:be:
         91:be:ee:85:3b:fe:50:23:b6:95:33:c2:71:12:bf:91:88:9f:
         1a:f5:f8:66:a3:e1:cd:e8:16:59:1d:0b:a9:5b:b2:d5:e9:64:
         f6:b7:97:cb:28:cd:72:c9:cf:fd:af:c3:ad:c3:8e:38:34:3a:
         63:cb:64:74
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUJU0juXUe00HwQRKN1ovCp9roBgwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDMwMTI3WhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0A0MzNkZjQwOWM0N2E0ZTYxZGQyNDIzMDg1M2QxMDgzNTEz
OGNmMDIyMGRlMjM2YTA1ODE1ZmM4MzM1ZWNkNmJlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDeWXMAJiDmqxQ5Y6Q58uGiRYshTmtxtligXiowruciPWy5
u+se9AqWmHoK1uVsQGqD1vlB3Os7HLLTCOmw6uGyhXepwTU7lJM5/ye5dvxfeRQr
ixo3/VHeAB4PImzLYhvTcXuqNf46VxHGNY7GgthNQ7IDoZbX87DRRQ32+Hc9Xe8l
DudAndCnSTf2FhiAnfyQcImoq9lkqxKlp5I5EoGXZyYFV2Bu4YRU5R/CqTSAhpHa
BJDk3yG+DF0dw37ti1wWCfKrtL+C5d0azbEB6C131tGAmAcg6E8QGszUg3fu4Jfh
rPKd+346DCCH3SYMX39X2N7xkGdf4gSNQNaYQf8ZAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUXiePAHmW2Ti3QjdjUd+sqcDX8PUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA1Y2E4MmQyLTYzODQtNDY1Yi05Y2M4LTU4NDk5NzU3OGUxNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA42jANBgkqhkiG9w0BAQsFAAOCAQEA1f6g4udO2iYX1GCyPTfanUmppMUL
Z1qRnAHZ5TVs7F8VYxrT8l6ng+xug9iHlTpT0L1palkhij7J28vzg/Pnbm4NbHYQ
PcNmyBtQeLX+GiRi1eYEmJr1aLhHLkGgV+JbHEDI+R7VwDftbDhvR8232lTlpt0C
QLBPQ6Qp8QdyH1jotGln86eGpZreH4V0fC1tQgL/lnq7ZNrq9nvmIdiGBRehRL6/
ZWzYzZxFukAR58YFPyr9yHaCMOEYkXABFjKph6OSPAm+kb7uhTv+UCO2lTPCcRK/
kYifGvX4ZqPhzegWWR0LqVuy1elk9reXyyjNcsnP/a/DrcOOODQ6Y8tkdA==
-----END CERTIFICATE-----