Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09739967-9eaf-4466-adca-6a715e6c180f.roa
File:                     09739967-9eaf-4466-adca-6a715e6c180f.roa (raw, json)
Hash identifier:          AknQC/bwYrcIfcP9jD/jfZMtkv/BHLUnzTiI6cVyc/8=
Subject key identifier:   08:2B:EA:58:54:CC:6A:B3:88:22:7D:F7:53:D5:C4:EB:CC:C5:AB:EE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       66123C53CEAD3F9B0CBC3371F475202F963674FC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09739967-9eaf-4466-adca-6a715e6c180f.roa
Signing time:             Fri 03 Oct 2025 00:41:39 +0000
ROA not before:           Fri 03 Oct 2025 00:41:39 +0000
ROA not after:            Fri 07 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        76.223.172.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:12:3c:53:ce:ad:3f:9b:0c:bc:33:71:f4:75:20:2f:96:36:74:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  3 00:41:39 2025 GMT
            Not After : Nov  7 23:59:59 2025 GMT
        Subject: serialNumber=9110bf3b5472eadd98e403d7e8886bb500a8b02be8cdb3ef2d3d6223a9110246, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d4:f5:f4:70:e3:0f:38:9b:97:1f:68:1f:e2:
                    07:2e:ed:c6:29:b5:b3:87:dc:c7:12:34:a8:48:2a:
                    f5:01:e9:55:14:d4:b2:23:d5:9b:7d:96:4f:5a:8a:
                    58:bf:d8:aa:4f:4e:b4:46:73:44:ea:1a:12:b7:7b:
                    9d:09:30:5d:b7:de:3e:f3:1a:96:da:6c:ed:ae:33:
                    10:0b:e9:b6:57:99:2d:7f:4b:4b:19:ab:9a:ed:ca:
                    38:6e:62:e8:de:45:a1:f9:45:f1:58:37:8d:f9:e1:
                    db:68:38:b8:3f:12:ab:18:e6:4e:af:9c:b7:40:8c:
                    55:34:51:fe:ed:16:ef:a9:c0:67:ab:10:64:14:11:
                    45:f1:ed:94:f8:42:93:7b:8e:51:7b:6e:71:4d:f2:
                    75:29:1c:1a:9e:92:1c:e0:b1:74:ba:da:58:20:d2:
                    93:f8:06:6f:16:1c:6d:6f:fc:8f:e8:61:76:cf:dc:
                    0a:92:4b:a2:4b:39:90:78:50:27:5d:f0:43:d8:5b:
                    53:1d:c9:c3:6b:ac:71:bb:43:7e:f7:db:8b:b2:16:
                    33:69:b4:fd:4b:8c:24:19:44:fa:7d:26:3a:05:af:
                    74:5e:1d:7e:70:27:33:02:d6:bd:93:25:d5:ac:db:
                    ee:12:58:1c:a8:1d:4f:88:1b:b4:a6:15:1c:44:35:
                    15:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:2B:EA:58:54:CC:6A:B3:88:22:7D:F7:53:D5:C4:EB:CC:C5:AB:EE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09739967-9eaf-4466-adca-6a715e6c180f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:11:78:9c:0f:3b:26:7c:a8:f4:5c:ab:06:10:36:9c:df:a7:
         3a:e7:10:9e:65:c5:8e:6a:ec:d2:e2:c0:ae:68:44:52:b5:e1:
         ae:ae:59:51:68:fd:2e:b8:15:5d:11:7f:86:e0:00:55:79:0f:
         53:6a:dc:03:8a:7c:63:45:55:c8:5c:ee:7b:18:f9:64:41:49:
         c4:f4:e9:c0:6f:b0:3f:d7:2c:7a:25:de:68:af:f8:6c:8c:2c:
         2f:ce:4f:2f:b8:d4:97:88:94:36:d6:5e:42:f3:8a:73:f8:c2:
         54:45:8d:03:dd:e1:c7:72:1d:b0:c9:89:95:d1:b9:b1:ac:a1:
         54:ad:1e:fc:76:88:c5:3d:53:4c:d2:9c:e4:75:3a:d6:c5:32:
         fb:00:fc:1a:35:cf:75:8a:84:1c:56:6d:81:35:52:65:e7:ab:
         20:e8:49:2d:c5:bd:8f:82:23:f4:9a:fd:83:52:be:a0:7d:e8:
         c8:ee:90:58:61:d7:31:54:e4:19:37:13:d1:cb:14:22:6b:2b:
         88:2d:bb:aa:12:30:61:39:da:fa:99:45:40:51:c4:26:5e:b2:
         ea:d1:dc:e2:41:fb:96:6e:22:30:e5:2e:98:e1:bb:46:f9:93:
         b3:26:05:00:89:81:db:0e:fd:ff:eb:8b:c8:7e:a8:b0:49:40:
         7a:4b:9f:d8
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZhI8U86tP5sMvDNx9HUgL5Y2dPwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDAzMDA0MTM5WhcNMjUxMTA3MjM1OTU5
WjB6MUkwRwYDVQQFE0A5MTEwYmYzYjU0NzJlYWRkOThlNDAzZDdlODg4NmJiNTAw
YThiMDJiZThjZGIzZWYyZDNkNjIyM2E5MTEwMjQ2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCy1PX0cOMPOJuXH2gf4gcu7cYptbOH3McSNKhIKvUB6VUU
1LIj1Zt9lk9aili/2KpPTrRGc0TqGhK3e50JMF233j7zGpbabO2uMxAL6bZXmS1/
S0sZq5rtyjhuYujeRaH5RfFYN4354dtoOLg/EqsY5k6vnLdAjFU0Uf7tFu+pwGer
EGQUEUXx7ZT4QpN7jlF7bnFN8nUpHBqekhzgsXS62lgg0pP4Bm8WHG1v/I/oYXbP
3AqSS6JLOZB4UCdd8EPYW1MdycNrrHG7Q37324uyFjNptP1LjCQZRPp9JjoFr3Re
HX5wJzMC1r2TJdWs2+4SWByoHU+IG7SmFRxENRUdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUCCvqWFTMarOIIn33U9XE68zFq+4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA5NzM5OTY3LTllYWYtNDQ2Ni1hZGNhLTZhNzE1ZTZjMTgwZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJM36wwDQYJKoZIhvcNAQELBQADggEBALQReJwPOyZ8qPRcqwYQNpzfpzrn
EJ5lxY5q7NLiwK5oRFK14a6uWVFo/S64FV0Rf4bgAFV5D1Nq3AOKfGNFVchc7nsY
+WRBScT06cBvsD/XLHol3miv+GyMLC/OTy+41JeIlDbWXkLzinP4wlRFjQPd4cdy
HbDJiZXRubGsoVStHvx2iMU9U0zSnOR1OtbFMvsA/Bo1z3WKhBxWbYE1UmXnqyDo
SS3FvY+CI/Sa/YNSvqB96MjukFhh1zFU5Bk3E9HLFCJrK4gtu6oSMGE52vqZRUBR
xCZesurR3OJB+5ZuIjDlLpjhu0b5k7MmBQCJgdsO/f/ri8h+qLBJQHpLn9g=
-----END CERTIFICATE-----