Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09ed608e-d07c-4cf2-90b2-d4c73733a9f0.roa
File:                     09ed608e-d07c-4cf2-90b2-d4c73733a9f0.roa (raw, json)
Hash identifier:          u7+r04lV9I4Lvu+a3UAXoe5Un0QIYIbOwiOaYRZVlIk=
Subject key identifier:   DC:72:B1:68:E1:CA:87:91:D0:52:9A:8E:F7:D6:B8:B2:68:43:DC:7C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7A8216845B791B9441CFE4831E1B2B878AF3DF04
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09ed608e-d07c-4cf2-90b2-d4c73733a9f0.roa
Signing time:             Fri 03 Oct 2025 00:42:58 +0000
ROA not before:           Fri 03 Oct 2025 00:42:58 +0000
ROA not after:            Fri 07 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        96.0.12.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:82:16:84:5b:79:1b:94:41:cf:e4:83:1e:1b:2b:87:8a:f3:df:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  3 00:42:58 2025 GMT
            Not After : Nov  7 23:59:59 2025 GMT
        Subject: serialNumber=2c0c36be2134bfb262edab488075209ec7ce11f4eb8e8b258f72198aaae38d20, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e1:74:ea:dd:f1:9c:f2:4e:08:cf:ee:06:e9:
                    b3:45:ca:43:91:d2:59:8b:e3:f5:c6:e6:56:ce:e2:
                    e6:6f:75:60:16:7f:8f:27:7d:eb:04:93:bd:f6:df:
                    8c:d9:9b:db:36:b9:45:f5:f1:94:4c:c6:1b:c2:20:
                    60:6d:34:43:ba:51:c8:35:91:45:a6:fe:18:48:00:
                    97:35:a0:f5:45:fb:1f:fb:46:26:13:e7:fa:fb:9e:
                    2c:e2:40:12:ec:90:b5:7a:e3:cd:d9:9f:78:6d:ac:
                    5b:25:f3:4d:23:af:73:91:a6:58:67:d0:e0:1f:63:
                    0e:23:9e:70:50:12:49:66:c0:37:59:91:f2:11:8d:
                    e5:89:f4:de:20:91:68:f9:28:97:84:b1:08:31:b9:
                    49:c5:ee:9c:d8:ae:49:6a:86:43:d9:6b:db:30:70:
                    3e:f9:0a:95:eb:5b:16:40:9a:c3:98:77:d4:51:26:
                    6d:49:1c:55:50:31:36:c0:88:8f:bb:33:8f:a0:88:
                    bb:a7:a3:61:69:08:58:9b:c7:36:43:c1:e0:cd:65:
                    29:bd:36:70:35:2d:c0:de:cb:1c:60:66:89:7f:ef:
                    6d:e6:8f:14:88:e6:ae:2f:75:07:9b:e2:5f:34:9b:
                    c2:07:f8:97:c6:49:34:ff:a8:07:cf:2c:78:dc:79:
                    09:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:72:B1:68:E1:CA:87:91:D0:52:9A:8E:F7:D6:B8:B2:68:43:DC:7C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09ed608e-d07c-4cf2-90b2-d4c73733a9f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.0.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:23:47:ad:1d:9c:49:06:93:d3:89:61:4c:2a:cd:3b:ef:be:
         77:db:10:ef:a8:d2:2a:93:44:c8:68:96:bd:25:78:cb:7f:00:
         d0:4c:30:b1:58:1a:38:74:03:33:8d:1e:be:af:4d:92:6d:44:
         9d:ac:18:60:cd:68:f8:77:ba:a0:73:96:11:6c:de:f2:b5:f7:
         da:20:50:0c:c8:33:45:0b:fa:32:72:eb:de:21:db:56:f5:da:
         53:16:3b:cf:0d:f9:aa:d4:71:4d:f9:82:87:47:70:8b:e5:3b:
         88:b6:60:b1:31:a3:be:98:06:fa:9f:c1:05:78:71:5f:8a:b8:
         cd:5d:7c:08:8a:08:13:13:96:c1:ca:3c:a6:09:a3:0d:ba:b0:
         80:87:fb:b6:ae:45:af:9b:ff:15:07:d9:86:ae:71:73:e5:16:
         00:bc:94:02:f6:c3:f9:3b:f6:71:5e:57:f9:bb:28:72:8f:3e:
         da:c3:84:c5:e4:e3:8f:57:19:03:ba:a3:1a:3f:0f:da:3b:40:
         85:59:4b:14:bb:96:44:f1:e8:33:8a:a3:e7:9f:50:8b:38:7e:
         f2:eb:80:dc:c0:70:ca:3e:13:ac:e1:b7:80:74:f6:31:ee:06:
         3b:0e:4e:47:68:e5:71:a6:b3:62:79:ad:7c:65:db:33:83:db:
         d8:ea:92:c2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUeoIWhFt5G5RBz+SDHhsrh4rz3wQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDAzMDA0MjU4WhcNMjUxMTA3MjM1OTU5
WjB6MUkwRwYDVQQFE0AyYzBjMzZiZTIxMzRiZmIyNjJlZGFiNDg4MDc1MjA5ZWM3
Y2UxMWY0ZWI4ZThiMjU4ZjcyMTk4YWFhZTM4ZDIwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDK4XTq3fGc8k4Iz+4G6bNFykOR0lmL4/XG5lbO4uZvdWAW
f48nfesEk73234zZm9s2uUX18ZRMxhvCIGBtNEO6Ucg1kUWm/hhIAJc1oPVF+x/7
RiYT5/r7niziQBLskLV6483Zn3htrFsl800jr3ORplhn0OAfYw4jnnBQEklmwDdZ
kfIRjeWJ9N4gkWj5KJeEsQgxuUnF7pzYrklqhkPZa9swcD75CpXrWxZAmsOYd9RR
Jm1JHFVQMTbAiI+7M4+giLuno2FpCFibxzZDweDNZSm9NnA1LcDeyxxgZol/723m
jxSI5q4vdQeb4l80m8IH+JfGSTT/qAfPLHjceQnVAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU3HKxaOHKh5HQUpqO99a4smhD3HwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA5ZWQ2MDhlLWQwN2MtNGNmMi05MGIyLWQ0YzczNzMzYTlmMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJgAAwwDQYJKoZIhvcNAQELBQADggEBAHwjR60dnEkGk9OJYUwqzTvvvnfb
EO+o0iqTRMholr0leMt/ANBMMLFYGjh0AzONHr6vTZJtRJ2sGGDNaPh3uqBzlhFs
3vK199ogUAzIM0UL+jJy694h21b12lMWO88N+arUcU35godHcIvlO4i2YLExo76Y
BvqfwQV4cV+KuM1dfAiKCBMTlsHKPKYJow26sICH+7auRa+b/xUH2YaucXPlFgC8
lAL2w/k79nFeV/m7KHKPPtrDhMXk449XGQO6oxo/D9o7QIVZSxS7lkTx6DOKo+ef
UIs4fvLrgNzAcMo+E6zht4B09jHuBjsOTkdo5XGms2J5rXxl2zOD29jqksI=
-----END CERTIFICATE-----