Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19bd943f-f0b1-4961-b62e-ab8c965a4110.roa
File:                     19bd943f-f0b1-4961-b62e-ab8c965a4110.roa (raw, json)
Hash identifier:          uhOO4r0SIMESOKcKOQcR3JAWZYEkjs0NZGb++VlrWi8=
Subject key identifier:   0B:E3:A5:70:67:CE:63:97:8B:04:F1:A6:21:3F:96:88:66:D1:4E:1C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3B3C336728774FD62206B1F03BB897A040867D37
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19bd943f-f0b1-4961-b62e-ab8c965a4110.roa
Signing time:             Fri 26 Sep 2025 00:43:05 +0000
ROA not before:           Fri 26 Sep 2025 00:43:05 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        96.43.80.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:3c:33:67:28:77:4f:d6:22:06:b1:f0:3b:b8:97:a0:40:86:7d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 26 00:43:05 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=638276790e58e8a6fb6b352ce17a61d82a99805fa2bef5cd4f983df37db5e1e3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:99:19:a7:23:5b:ba:39:5c:9d:47:b0:eb:dc:
                    09:f9:57:82:32:5d:ad:ae:b2:b9:b0:0c:1a:d5:89:
                    ac:ac:1f:df:6f:53:29:e0:e2:a6:61:51:a6:66:ae:
                    fc:b6:d2:a1:30:d8:33:4d:16:73:10:13:66:1f:2f:
                    4d:75:1d:89:72:70:d3:32:ce:60:08:d4:c2:3a:16:
                    cd:f2:2f:8f:3a:1f:52:66:57:ff:6c:54:fd:a9:d4:
                    59:3d:f4:91:b9:21:44:81:df:c5:aa:bd:c9:c8:8b:
                    7d:8f:94:ed:bf:fd:56:3f:95:e4:c6:fb:c5:fc:43:
                    df:00:dd:d9:49:f3:11:00:b0:ac:65:b5:41:5f:48:
                    dd:ed:b9:61:e4:65:b0:b6:8c:70:f2:49:13:4b:20:
                    26:df:4d:41:0f:ee:79:b9:44:fc:31:02:53:11:57:
                    7a:91:4e:47:2a:6d:0e:85:90:16:dc:8d:94:32:b5:
                    51:dd:2b:78:32:8e:22:36:c2:b3:ba:6f:35:a1:28:
                    c6:de:26:38:4d:b5:20:81:b7:e5:0b:ab:b6:5b:c9:
                    a5:16:b7:2f:84:87:c2:6f:7c:23:1e:c4:0a:34:af:
                    ea:61:7f:4c:95:ae:60:b7:37:f1:b3:fd:02:21:4b:
                    18:89:a3:88:c5:e6:5a:50:52:4c:74:ec:de:f6:60:
                    58:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E3:A5:70:67:CE:63:97:8B:04:F1:A6:21:3F:96:88:66:D1:4E:1C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19bd943f-f0b1-4961-b62e-ab8c965a4110.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.43.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         29:5a:72:17:38:48:d6:b9:e5:66:da:92:64:f4:53:af:9d:b9:
         6d:3d:21:7f:c1:e5:95:42:59:e8:11:e7:e1:d9:7f:ee:0f:e7:
         5f:10:78:74:ed:93:6e:50:34:cc:ad:1e:01:00:43:51:39:eb:
         78:bb:38:4c:19:4e:a0:23:ef:65:3d:87:1b:11:a3:e2:f1:71:
         12:9a:fc:aa:5d:8c:6e:c1:8a:d5:64:ff:39:76:35:33:69:81:
         83:45:40:c9:c0:8e:3c:37:2a:b6:28:af:ec:cc:2f:05:f8:83:
         da:4f:b6:6c:53:80:fa:42:ed:0f:51:9b:24:ef:42:b0:89:aa:
         37:d3:84:81:ee:c5:34:8e:4a:e5:14:f1:06:c7:f2:35:ad:32:
         3d:3a:d9:76:c1:e1:9e:c4:72:c6:3c:2c:51:04:7b:d9:04:47:
         12:e3:2e:a2:1a:da:20:d3:52:47:1c:13:19:f2:a4:5f:e3:6c:
         2b:f4:60:38:9f:63:f6:f3:ab:1e:87:1d:72:d7:80:24:5b:9c:
         97:5b:42:31:5c:8a:56:47:34:84:a8:50:08:cf:ee:be:f5:e4:
         37:d7:c3:9f:50:bf:26:05:42:e9:85:75:81:b2:3b:56:47:c2:
         30:ff:d0:1e:2f:c1:ac:9a:51:ac:0c:1c:2e:a5:a3:f1:92:a9:
         5d:af:c1:b1
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUOzwzZyh3T9YiBrHwO7iXoECGfTcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTI2MDA0MzA1WhcNMjUxMDMxMjM1OTU5
WjB6MUkwRwYDVQQFE0A2MzgyNzY3OTBlNThlOGE2ZmI2YjM1MmNlMTdhNjFkODJh
OTk4MDVmYTJiZWY1Y2Q0Zjk4M2RmMzdkYjVlMWUzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDEmRmnI1u6OVydR7Dr3An5V4IyXa2usrmwDBrViaysH99v
Uyng4qZhUaZmrvy20qEw2DNNFnMQE2YfL011HYlycNMyzmAI1MI6Fs3yL486H1Jm
V/9sVP2p1Fk99JG5IUSB38WqvcnIi32PlO2//VY/leTG+8X8Q98A3dlJ8xEAsKxl
tUFfSN3tuWHkZbC2jHDySRNLICbfTUEP7nm5RPwxAlMRV3qRTkcqbQ6FkBbcjZQy
tVHdK3gyjiI2wrO6bzWhKMbeJjhNtSCBt+ULq7ZbyaUWty+Eh8JvfCMexAo0r+ph
f0yVrmC3N/Gz/QIhSxiJo4jF5lpQUkx07N72YFhFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUC+OlcGfOY5eLBPGmIT+WiGbRThwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE5YmQ5NDNmLWYwYjEtNDk2MS1iNjJlLWFiOGM5NjVhNDExMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARgK1AwDQYJKoZIhvcNAQELBQADggEBAClachc4SNa55WbakmT0U6+duW09
IX/B5ZVCWegR5+HZf+4P518QeHTtk25QNMytHgEAQ1E563i7OEwZTqAj72U9hxsR
o+LxcRKa/KpdjG7BitVk/zl2NTNpgYNFQMnAjjw3KrYor+zMLwX4g9pPtmxTgPpC
7Q9RmyTvQrCJqjfThIHuxTSOSuUU8QbH8jWtMj062XbB4Z7EcsY8LFEEe9kERxLj
LqIa2iDTUkccExnypF/jbCv0YDifY/bzqx6HHXLXgCRbnJdbQjFcilZHNISoUAjP
7r715DfXw59QvyYFQumFdYGyO1ZHwjD/0B4vwayaUawMHC6lo/GSqV2vwbE=
-----END CERTIFICATE-----