Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1aaebc4a-a63d-434d-bfe5-259b611e0e6f.roa
File:                     1aaebc4a-a63d-434d-bfe5-259b611e0e6f.roa (raw, json)
Hash identifier:          rPfZ9zrvBv+RRAbMkYcamPTwHQ0iJ2kpGZY5AL6VxtU=
Subject key identifier:   66:B8:7C:70:54:FC:1F:61:A6:61:3B:1C:E8:91:96:24:C9:7B:54:67
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0499ED6876746B637AF074D754C0206D3A553D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1aaebc4a-a63d-434d-bfe5-259b611e0e6f.roa
Signing time:             Tue 14 Oct 2025 17:51:20 +0000
ROA not before:           Tue 14 Oct 2025 17:51:20 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        71.152.48.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:99:ed:68:76:74:6b:63:7a:f0:74:d7:54:c0:20:6d:3a:55:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 17:51:20 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=2c7978e6e2379dc94188208443213dad806c59dbbf20383e2eb71acb36e4c8d5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4e:82:71:ca:f7:0c:0e:5f:73:a3:84:24:09:
                    1b:3f:0c:c5:8c:12:69:53:5a:a3:7e:c6:cc:c3:e4:
                    1d:87:69:b0:89:51:2d:ef:06:2b:90:6e:d3:48:b1:
                    53:c7:52:a5:6d:65:67:51:9d:16:37:66:82:f6:94:
                    fb:73:8e:02:4f:11:20:12:9e:d8:97:cf:7c:70:31:
                    40:ad:53:07:30:e1:40:6e:34:28:88:ff:5e:b3:cb:
                    73:a6:cd:b4:97:2f:47:92:3d:88:43:31:b0:e3:93:
                    59:dc:f8:00:25:e4:2f:68:df:81:9c:b2:2d:62:3d:
                    14:96:8d:11:fe:52:91:fe:e3:d4:da:cb:95:00:d6:
                    f0:f4:54:ca:0d:a3:5b:f8:0f:bc:95:e4:ff:28:e5:
                    22:c4:58:24:6c:25:62:ca:fc:ea:05:e3:71:b4:32:
                    71:21:33:35:ca:9f:25:bf:17:a7:d6:39:68:51:5d:
                    d7:da:7c:a7:48:e9:bb:54:17:68:f7:9d:4a:f3:8b:
                    f3:bd:12:a0:f8:3d:32:5a:ff:35:31:ff:8e:45:c9:
                    40:0d:62:ac:23:93:ac:c1:12:6c:5e:f5:71:85:ae:
                    a0:47:a7:35:c5:ca:e7:5e:96:59:c1:f7:ed:1d:2b:
                    67:db:cd:a5:58:8d:fa:a0:c6:21:67:00:b7:63:bb:
                    b8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B8:7C:70:54:FC:1F:61:A6:61:3B:1C:E8:91:96:24:C9:7B:54:67
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1aaebc4a-a63d-434d-bfe5-259b611e0e6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.152.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:6b:e8:a7:8b:13:a8:f8:e2:c1:be:9b:ea:7a:ff:13:84:19:
         ef:46:65:ef:8e:eb:ad:96:d8:83:85:62:5c:81:79:7a:90:cd:
         5b:1a:5a:d7:44:79:a5:d6:05:fc:81:eb:9e:fa:6c:49:7d:7d:
         d9:34:ee:b1:bd:0b:34:0c:6c:61:01:b3:53:a2:ae:df:49:60:
         f7:63:d8:9b:61:4e:e4:0c:1a:4c:78:d3:6c:86:fc:3e:e5:81:
         89:72:82:02:3c:7a:70:02:aa:35:f1:02:6c:2a:d8:14:65:11:
         db:f2:3f:44:6d:7f:1a:32:b4:c9:78:a6:1d:a2:0e:27:3c:95:
         bb:c4:a1:52:4f:4d:a9:e2:b8:7f:12:65:c1:ba:37:fc:04:9b:
         86:c7:23:92:c8:a9:6d:6c:da:cc:52:95:16:d1:ec:c1:12:09:
         31:ed:3c:b6:9e:14:ba:3b:05:54:a3:c3:06:28:52:ad:19:2f:
         06:24:b0:89:79:e6:00:df:7c:70:d5:06:4e:3b:b2:e9:72:35:
         5a:ef:9d:57:39:58:04:79:75:94:5f:d2:88:70:98:0d:aa:3f:
         c5:a5:7d:b6:73:46:3e:eb:ac:73:5f:c6:6b:74:98:3c:81:39:
         89:54:c3:c3:90:64:c1:e0:bf:34:25:12:c0:c2:e3:b5:e5:58:
         ff:71:e7:3a
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgITBJntaHZ0a2N68HTXVMAgbTpVPTANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz
NzEwN2RiZThjYjcxZDBhNzAeFw0yNTEwMTQxNzUxMjBaFw0yNTExMTgyMzU5NTla
MHoxSTBHBgNVBAUTQDJjNzk3OGU2ZTIzNzlkYzk0MTg4MjA4NDQzMjEzZGFkODA2
YzU5ZGJiZjIwMzgzZTJlYjcxYWNiMzZlNGM4ZDUxLTArBgNVBAMTJGIyNWM5NzBm
LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMVOgnHK9wwOX3OjhCQJGz8MxYwSaVNao37GzMPkHYdpsIlR
Le8GK5Bu00ixU8dSpW1lZ1GdFjdmgvaU+3OOAk8RIBKe2JfPfHAxQK1TBzDhQG40
KIj/XrPLc6bNtJcvR5I9iEMxsOOTWdz4ACXkL2jfgZyyLWI9FJaNEf5Skf7j1NrL
lQDW8PRUyg2jW/gPvJXk/yjlIsRYJGwlYsr86gXjcbQycSEzNcqfJb8Xp9Y5aFFd
19p8p0jpu1QXaPedSvOL870SoPg9Mlr/NTH/jkXJQA1irCOTrMESbF71cYWuoEen
NcXK516WWcH37R0rZ9vNpViN+qDGIWcAt2O7uOMCAwEAAaOCArEwggKtMB0GA1Ud
DgQWBBRmuHxwVPwfYaZhOxzokZYkyXtUZzAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd
vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk
YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx
OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy
NWMwNDI5NDIvMWFhZWJjNGEtYTYzZC00MzRkLWJmZTUtMjU5YjYxMWUwZTZmLnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt
MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAEeYMDANBgkqhkiG9w0BAQsFAAOCAQEAvGvop4sTqPjiwb6b6nr/E4QZ70Zl
747rrZbYg4ViXIF5epDNWxpa10R5pdYF/IHrnvpsSX192TTusb0LNAxsYQGzU6Ku
30lg92PYm2FO5AwaTHjTbIb8PuWBiXKCAjx6cAKqNfECbCrYFGUR2/I/RG1/GjK0
yXimHaIOJzyVu8ShUk9NqeK4fxJlwbo3/ASbhscjksipbWzazFKVFtHswRIJMe08
tp4UujsFVKPDBihSrRkvBiSwiXnmAN98cNUGTjuy6XI1Wu+dVzlYBHl1lF/SiHCY
Dao/xaV9tnNGPuusc1/Ga3SYPIE5iVTDw5BkweC/NCUSwMLjteVY/3HnOg==
-----END CERTIFICATE-----