Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/21e2b5a1-2623-47e4-9d38-9ded78a3da12.roa
File:                     21e2b5a1-2623-47e4-9d38-9ded78a3da12.roa (raw, json)
Hash identifier:          2YnZmLiW7GcxT2xTPtbHy7Ue/VR5BmLcMFhjjfg0Gts=
Subject key identifier:   E8:E8:50:3E:A4:49:16:E7:23:24:06:ED:A3:56:2D:90:DD:F5:8A:E9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       28AC534C55FD6F96701FD8A64210FF51E4FCE78E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/21e2b5a1-2623-47e4-9d38-9ded78a3da12.roa
Signing time:             Sat 11 Oct 2025 00:39:24 +0000
ROA not before:           Sat 11 Oct 2025 00:39:24 +0000
ROA not after:            Sat 15 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        203.110.203.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ac:53:4c:55:fd:6f:96:70:1f:d8:a6:42:10:ff:51:e4:fc:e7:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 11 00:39:24 2025 GMT
            Not After : Nov 15 23:59:59 2025 GMT
        Subject: serialNumber=a11e37ebd11defa2a80cf8326a56ee39ce98530504493dde1c3a02188d24ebc0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9a:e7:02:00:3a:2d:bd:f0:7c:f5:e7:24:1b:
                    7c:91:cb:67:c2:80:b2:44:63:e5:6c:53:22:6b:62:
                    82:72:80:8c:04:22:e4:a8:af:e6:7b:48:49:b7:fe:
                    25:ae:ae:04:7c:3e:4c:5b:7a:60:45:ad:33:1c:2e:
                    39:89:a0:74:65:94:33:b6:77:a9:d7:6e:d3:34:be:
                    d0:fd:2e:f4:a4:46:9d:aa:9a:91:2f:a1:d7:cc:00:
                    d6:e6:6f:4e:e1:d7:16:f9:b2:de:0e:da:7d:b1:b5:
                    0b:e5:c5:3b:01:6c:19:e6:25:bf:ce:fa:59:c6:ad:
                    50:59:eb:92:ed:e8:e8:e2:02:4f:5f:78:42:a5:29:
                    fb:29:f2:99:52:8b:69:32:99:28:6b:3b:0f:71:5d:
                    5b:7d:88:c0:d7:e5:6d:fd:a2:a1:ee:61:d3:f9:7c:
                    a7:c3:e0:23:e1:24:77:00:91:be:5b:4c:5d:0e:7c:
                    c4:cd:28:07:08:5d:9d:25:1e:2d:5b:61:db:a5:94:
                    89:c9:84:b2:bc:32:1d:4e:fb:e4:53:da:78:b8:cf:
                    4f:74:f4:03:13:c8:cf:8e:bd:e5:01:3d:15:32:0a:
                    a5:8a:f7:fb:c2:87:2e:35:5b:19:e9:8c:c7:a1:3e:
                    d5:34:79:61:6f:ea:ed:15:f8:c6:16:a6:65:82:d4:
                    88:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E8:50:3E:A4:49:16:E7:23:24:06:ED:A3:56:2D:90:DD:F5:8A:E9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/21e2b5a1-2623-47e4-9d38-9ded78a3da12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.110.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:c1:e2:92:68:fc:b9:41:1f:87:bd:07:de:dc:d1:e6:41:1f:
         01:fb:66:b5:ed:ad:2d:c9:2a:e4:f2:fc:a5:53:81:ab:70:98:
         60:3b:a0:9d:b8:6b:d1:30:7c:73:c9:81:67:06:99:8f:72:d2:
         d2:3d:b3:9d:2c:9f:1a:37:d4:96:3a:9c:8e:13:74:49:2e:8d:
         ee:5c:d2:7e:ee:00:4d:88:fa:ea:0b:0e:f1:a0:c1:2a:1d:96:
         ba:a5:ad:2a:00:bf:f1:fe:87:42:d5:84:d5:55:54:25:d1:0b:
         cf:59:be:14:6c:80:13:93:49:48:52:e6:c3:0a:1e:df:6f:81:
         b4:47:1f:1a:a9:dd:0b:1e:a0:22:50:25:0c:83:c3:cf:00:2d:
         10:48:2d:f1:5d:ee:17:19:8b:41:8f:88:06:54:f5:2d:0a:ae:
         7d:fd:2f:e4:bd:21:50:e0:00:c0:fd:10:f1:e1:bf:da:c6:49:
         e8:6e:6a:9e:fd:f4:be:0a:ba:f3:67:de:a2:81:f5:93:6a:5a:
         04:b5:2e:30:90:2f:62:8e:17:dd:62:8d:25:c1:c8:b7:97:27:
         e3:a2:a1:65:2f:ee:49:9c:20:50:93:ea:db:e2:e6:35:03:04:
         08:61:c3:10:2f:84:62:81:69:24:f7:22:02:06:f5:ba:41:d9:
         f8:a7:9c:b5
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUKKxTTFX9b5ZwH9imQhD/UeT8544wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDExMDAzOTI0WhcNMjUxMTE1MjM1OTU5
WjB6MUkwRwYDVQQFE0BhMTFlMzdlYmQxMWRlZmEyYTgwY2Y4MzI2YTU2ZWUzOWNl
OTg1MzA1MDQ0OTNkZGUxYzNhMDIxODhkMjRlYmMwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9mucCADotvfB89eckG3yRy2fCgLJEY+VsUyJrYoJygIwE
IuSor+Z7SEm3/iWurgR8PkxbemBFrTMcLjmJoHRllDO2d6nXbtM0vtD9LvSkRp2q
mpEvodfMANbmb07h1xb5st4O2n2xtQvlxTsBbBnmJb/O+lnGrVBZ65Lt6OjiAk9f
eEKlKfsp8plSi2kymShrOw9xXVt9iMDX5W39oqHuYdP5fKfD4CPhJHcAkb5bTF0O
fMTNKAcIXZ0lHi1bYdullInJhLK8Mh1O++RT2ni4z0909AMTyM+OveUBPRUyCqWK
9/vChy41WxnpjMehPtU0eWFv6u0V+MYWpmWC1IhrAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU6OhQPqRJFucjJAbto1YtkN31iukwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzIxZTJiNWExLTI2MjMtNDdlNC05ZDM4LTlkZWQ3OGEzZGExMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADLbsswDQYJKoZIhvcNAQELBQADggEBABbB4pJo/LlBH4e9B97c0eZBHwH7
ZrXtrS3JKuTy/KVTgatwmGA7oJ24a9EwfHPJgWcGmY9y0tI9s50snxo31JY6nI4T
dEkuje5c0n7uAE2I+uoLDvGgwSodlrqlrSoAv/H+h0LVhNVVVCXRC89ZvhRsgBOT
SUhS5sMKHt9vgbRHHxqp3QseoCJQJQyDw88ALRBILfFd7hcZi0GPiAZU9S0Krn39
L+S9IVDgAMD9EPHhv9rGSehuap799L4KuvNn3qKB9ZNqWgS1LjCQL2KOF91ijSXB
yLeXJ+OioWUv7kmcIFCT6tvi5jUDBAhhwxAvhGKBaST3IgIG9bpB2finnLU=
-----END CERTIFICATE-----