Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f453c42-9e01-4343-9d00-659e79e057bb.roa
File:                     0f453c42-9e01-4343-9d00-659e79e057bb.roa (raw, json)
Hash identifier:          lP0/idnptZVpCdR2csz55wzsCl1a32MzSKo7VgwTPU4=
Subject key identifier:   91:73:0B:3C:16:ED:1B:D7:15:19:CD:80:9A:C9:0E:D2:F5:35:BA:E7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       246695B6372FE93A8FDF21940D1A246F8C80B3FD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f453c42-9e01-4343-9d00-659e79e057bb.roa
Signing time:             Wed 08 Oct 2025 00:22:13 +0000
ROA not before:           Wed 08 Oct 2025 00:22:13 +0000
ROA not after:            Wed 12 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        64.201.0.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:66:95:b6:37:2f:e9:3a:8f:df:21:94:0d:1a:24:6f:8c:80:b3:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  8 00:22:13 2025 GMT
            Not After : Nov 12 23:59:59 2025 GMT
        Subject: serialNumber=15ddc6e51cf6b184a980ba698c41497933d12d9abaae5104d0f074bad389e909, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:51:16:e3:09:0d:cb:ed:fb:eb:fe:ae:47:99:
                    95:4c:99:d5:cc:37:32:0b:6b:4c:cd:d6:48:86:7c:
                    55:45:32:8f:53:4c:0a:ab:87:5f:da:e2:e7:74:c8:
                    14:ef:16:9d:f4:f8:fd:bf:28:dd:18:a7:47:0f:66:
                    b1:0b:f4:34:19:8d:d2:44:cf:e6:50:7c:42:fb:e5:
                    ff:12:cd:9a:94:6e:44:ca:f7:7e:ff:d0:48:aa:07:
                    e3:bc:bd:67:2e:c1:b1:b2:f7:d9:d2:32:b0:f6:e0:
                    3e:7b:2e:77:85:1f:47:c3:5e:c3:09:36:a5:d3:19:
                    4b:39:e5:50:d0:b0:8b:da:9c:8f:c8:5a:27:f8:ff:
                    9f:a1:9a:8b:b1:2c:7b:54:c2:dd:65:dc:46:f0:05:
                    24:4b:e7:b9:35:1d:80:31:64:14:c9:f8:20:41:a9:
                    33:56:89:e2:94:26:e9:5f:62:3d:57:e7:b9:33:8b:
                    49:8d:a5:73:94:39:6b:9b:26:06:62:ec:06:79:e0:
                    58:71:d1:85:e5:7a:eb:5a:a8:ba:02:39:6e:9d:6b:
                    1b:8f:94:87:9e:41:f2:8a:3a:e6:9b:67:d1:c2:c8:
                    d1:05:84:8c:7e:32:d8:85:53:70:07:d2:33:b6:29:
                    8e:d7:26:41:a0:45:b6:bd:41:d4:80:5f:a9:84:31:
                    eb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:73:0B:3C:16:ED:1B:D7:15:19:CD:80:9A:C9:0E:D2:F5:35:BA:E7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f453c42-9e01-4343-9d00-659e79e057bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.201.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         96:b9:b1:d9:3c:ed:3e:1c:af:22:df:57:5f:29:54:2e:d6:d6:
         06:29:93:ab:b4:3d:e3:99:cd:8a:5f:38:f7:a3:c0:c0:33:15:
         ca:e3:e9:78:5f:29:0a:30:e9:be:4f:93:b5:2e:8c:f5:1c:9b:
         19:c2:f2:ca:df:9b:0c:bb:f1:60:95:40:b0:63:0d:b8:c6:1b:
         6d:e7:76:01:01:d7:92:a0:37:49:e1:ee:7b:dd:5f:8e:2b:07:
         8a:62:8d:46:df:9d:f7:94:5e:5b:13:d5:5f:18:8a:58:61:51:
         33:13:77:12:52:43:f1:d7:6b:ef:99:89:1c:a5:83:db:ab:7f:
         72:bf:96:62:45:c4:50:80:05:3c:ed:e5:f6:ab:5f:bf:11:b6:
         dd:de:1f:eb:b8:f9:14:6e:39:b6:72:14:ab:b6:9f:c2:8a:08:
         f0:72:e9:48:7b:4c:ec:d5:8a:cd:55:07:7b:60:75:b4:ed:4c:
         de:a6:9a:06:9b:65:2c:c2:17:0c:4b:e8:38:6f:d8:16:fe:02:
         a4:9f:07:f0:88:3c:3e:d0:31:92:ee:37:da:44:e4:4d:9e:6f:
         13:a4:bf:77:58:c8:fb:90:05:88:ca:f7:d4:17:c1:2f:ea:4d:
         9d:57:5e:50:23:c5:7b:85:10:a4:c0:06:e1:2c:1a:75:e3:de:
         1f:02:72:2c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJGaVtjcv6TqP3yGUDRokb4yAs/0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDA4MDAyMjEzWhcNMjUxMTEyMjM1OTU5
WjB6MUkwRwYDVQQFE0AxNWRkYzZlNTFjZjZiMTg0YTk4MGJhNjk4YzQxNDk3OTMz
ZDEyZDlhYmFhZTUxMDRkMGYwNzRiYWQzODllOTA5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCyURbjCQ3L7fvr/q5HmZVMmdXMNzILa0zN1kiGfFVFMo9T
TAqrh1/a4ud0yBTvFp30+P2/KN0Yp0cPZrEL9DQZjdJEz+ZQfEL75f8SzZqUbkTK
937/0EiqB+O8vWcuwbGy99nSMrD24D57LneFH0fDXsMJNqXTGUs55VDQsIvanI/I
Wif4/5+hmouxLHtUwt1l3EbwBSRL57k1HYAxZBTJ+CBBqTNWieKUJulfYj1X57kz
i0mNpXOUOWubJgZi7AZ54Fhx0YXleutaqLoCOW6daxuPlIeeQfKKOuabZ9HCyNEF
hIx+MtiFU3AH0jO2KY7XJkGgRba9QdSAX6mEMetXAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUkXMLPBbtG9cVGc2AmskO0vU1uucwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzBmNDUzYzQyLTllMDEtNDM0My05ZDAwLTY1OWU3OWUwNTdiYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAVAyQAwDQYJKoZIhvcNAQELBQADggEBAJa5sdk87T4cryLfV18pVC7W1gYp
k6u0PeOZzYpfOPejwMAzFcrj6XhfKQow6b5Pk7UujPUcmxnC8srfmwy78WCVQLBj
DbjGG23ndgEB15KgN0nh7nvdX44rB4pijUbfnfeUXlsT1V8YilhhUTMTdxJSQ/HX
a++ZiRylg9urf3K/lmJFxFCABTzt5farX78Rtt3eH+u4+RRuObZyFKu2n8KKCPBy
6Uh7TOzVis1VB3tgdbTtTN6mmgabZSzCFwxL6Dhv2Bb+AqSfB/CIPD7QMZLuN9pE
5E2ebxOkv3dYyPuQBYjK99QXwS/qTZ1XXlAjxXuFEKTABuEsGnXj3h8Cciw=
-----END CERTIFICATE-----