Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/134cf688-d4df-40ec-91b3-1b66838d83a7.roa
File:                     134cf688-d4df-40ec-91b3-1b66838d83a7.roa (raw, json)
Hash identifier:          sdJlwMhgTq0/1dLsMztinS6BbT3QNQuUbi3IaLzFheg=
Subject key identifier:   01:A5:C2:E1:A1:73:7E:50:A0:87:47:7A:E7:F1:A1:B6:88:6C:26:15
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7F54ECDD725A18AB139CFF6285938BD7EC138FBA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/134cf688-d4df-40ec-91b3-1b66838d83a7.roa
Signing time:             Mon 13 Oct 2025 15:51:12 +0000
ROA not before:           Mon 13 Oct 2025 15:51:12 +0000
ROA not after:            Mon 17 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        23.91.8.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:54:ec:dd:72:5a:18:ab:13:9c:ff:62:85:93:8b:d7:ec:13:8f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 13 15:51:12 2025 GMT
            Not After : Nov 17 23:59:59 2025 GMT
        Subject: serialNumber=62e38f5b1fefdd9807755da98ec553c2232f88b34cd740db719eed802ba8509a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e6:f5:fc:46:aa:c5:75:66:bc:0a:67:fa:da:
                    47:4b:62:8f:86:e9:4a:ac:97:d9:ef:91:dd:74:b8:
                    63:b0:84:01:bf:b9:9d:60:08:5b:03:0f:da:78:20:
                    9d:f4:b1:07:b6:b3:a3:4c:40:9c:0e:00:ab:ed:21:
                    cd:99:13:ec:db:86:aa:c7:e4:43:b6:e1:23:0a:07:
                    b3:4f:79:74:82:c4:3d:a9:e9:3e:6c:37:ea:86:b1:
                    14:78:ee:bc:c2:e3:44:8a:bd:74:e2:52:c2:e7:ad:
                    a5:b0:cb:32:ea:72:43:f1:f8:17:f7:59:eb:12:51:
                    a3:54:1e:05:ff:db:b1:14:3b:e2:62:63:77:27:cc:
                    7e:54:76:53:5b:07:c8:83:d9:a8:68:50:f7:4c:cd:
                    dc:d6:6b:7f:81:2a:a5:24:c6:94:51:77:e1:0d:bc:
                    56:dc:07:a7:41:dc:82:66:5f:08:8c:e6:d3:31:61:
                    22:1c:9e:fa:f7:54:78:b1:cc:9e:b3:b3:da:54:bb:
                    a5:85:cb:9a:70:c8:b3:18:25:c6:19:ab:ec:a9:f1:
                    29:a1:d1:5f:36:24:77:82:a2:a2:83:f3:7d:41:0b:
                    2c:24:de:c9:fa:52:8d:36:15:7c:b0:94:1d:04:95:
                    23:b5:df:db:3a:10:52:a2:c3:ff:52:f5:88:7a:3d:
                    8a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A5:C2:E1:A1:73:7E:50:A0:87:47:7A:E7:F1:A1:B6:88:6C:26:15
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/134cf688-d4df-40ec-91b3-1b66838d83a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.91.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:a5:ea:5e:83:64:3c:81:71:f1:ce:0a:87:14:55:1f:69:49:
         b9:ec:ee:b0:89:c6:9a:d4:14:6d:f2:b5:3c:27:55:12:8c:bb:
         86:65:4f:7c:cb:04:c0:d0:41:59:2f:4d:02:89:40:fd:c4:5b:
         f5:40:4a:66:f7:c1:21:bd:7b:36:af:d1:c8:fb:c4:cf:be:a1:
         4e:3a:8a:67:51:94:5a:84:86:0e:00:5c:e8:34:ae:64:6f:6e:
         e8:23:3f:8d:f7:e2:d4:f6:3d:d5:46:14:8e:21:c8:06:07:08:
         0c:63:e5:ba:98:29:f5:e6:0f:5e:bb:f3:47:6d:9b:ee:b5:4b:
         98:b0:2f:09:3c:d2:1b:97:91:24:27:44:2e:f8:6b:26:f5:dc:
         9d:2e:b1:ed:22:54:c4:d8:df:99:0c:94:e5:3c:ac:33:24:7e:
         51:c5:e5:ed:15:bd:4a:36:23:3e:d3:f1:a6:2b:00:5c:88:4f:
         45:1c:89:80:d8:60:05:83:6e:1e:55:ab:35:4d:72:1f:2d:3e:
         4d:e9:ac:b2:3d:e3:70:ac:2d:31:0c:2e:a1:f9:f6:26:13:15:
         db:85:7a:dc:8a:ba:25:98:5f:22:f5:fd:5e:04:fd:0a:fc:5d:
         df:f7:cc:9d:3d:0a:5a:d7:90:ed:83:0d:46:b1:6c:64:56:13:
         66:8f:d3:64
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUf1Ts3XJaGKsTnP9ihZOL1+wTj7owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDEzMTU1MTEyWhcNMjUxMTE3MjM1OTU5
WjB6MUkwRwYDVQQFE0A2MmUzOGY1YjFmZWZkZDk4MDc3NTVkYTk4ZWM1NTNjMjIz
MmY4OGIzNGNkNzQwZGI3MTllZWQ4MDJiYTg1MDlhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDX5vX8RqrFdWa8Cmf62kdLYo+G6Uqsl9nvkd10uGOwhAG/
uZ1gCFsDD9p4IJ30sQe2s6NMQJwOAKvtIc2ZE+zbhqrH5EO24SMKB7NPeXSCxD2p
6T5sN+qGsRR47rzC40SKvXTiUsLnraWwyzLqckPx+Bf3WesSUaNUHgX/27EUO+Ji
Y3cnzH5UdlNbB8iD2ahoUPdMzdzWa3+BKqUkxpRRd+ENvFbcB6dB3IJmXwiM5tMx
YSIcnvr3VHixzJ6zs9pUu6WFy5pwyLMYJcYZq+yp8Smh0V82JHeCoqKD831BCywk
3sn6Uo02FXywlB0ElSO139s6EFKiw/9S9Yh6PYqFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUAaXC4aFzflCgh0d65/GhtohsJhUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzEzNGNmNjg4LWQ0ZGYtNDBlYy05MWIzLTFiNjY4MzhkODNhNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAXWwgwDQYJKoZIhvcNAQELBQADggEBAMyl6l6DZDyBcfHOCocUVR9pSbns
7rCJxprUFG3ytTwnVRKMu4ZlT3zLBMDQQVkvTQKJQP3EW/VASmb3wSG9ezav0cj7
xM++oU46imdRlFqEhg4AXOg0rmRvbugjP4334tT2PdVGFI4hyAYHCAxj5bqYKfXm
D16780dtm+61S5iwLwk80huXkSQnRC74ayb13J0use0iVMTY35kMlOU8rDMkflHF
5e0VvUo2Iz7T8aYrAFyIT0UciYDYYAWDbh5VqzVNch8tPk3prLI943CsLTEMLqH5
9iYTFduFetyKuiWYXyL1/V4E/Qr8Xd/3zJ09ClrXkO2DDUaxbGRWE2aP02Q=
-----END CERTIFICATE-----