Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24d921c1-9e96-4ec0-8d95-a45b8c083105.roa
File:                     24d921c1-9e96-4ec0-8d95-a45b8c083105.roa (raw, json)
Hash identifier:          yY/b0468GIqXUwuYJv7mIsVf51FgKR4H+LuQzYlRhKg=
Subject key identifier:   CB:1B:56:68:83:A0:54:3D:64:5E:95:15:A6:02:98:F7:13:7A:5B:CC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       27446A38EEF47BB833E4E46572C75D2A59DA6A55
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24d921c1-9e96-4ec0-8d95-a45b8c083105.roa
Signing time:             Fri 17 Oct 2025 21:50:45 +0000
ROA not before:           Fri 17 Oct 2025 21:50:45 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        168.242.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:44:6a:38:ee:f4:7b:b8:33:e4:e4:65:72:c7:5d:2a:59:da:6a:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 21:50:45 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=216b1f3eabedc0296c45c17b142554a94ff0a2c9742967a20114bbed2961e1bf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6e:82:17:b8:59:b2:27:92:f8:fb:fc:bf:63:
                    4e:68:b9:81:6c:0c:ab:a2:3a:19:a0:d7:28:e4:25:
                    11:ac:bd:3f:c2:f3:f0:2e:2e:fb:2f:f2:b2:bf:d2:
                    bc:3d:02:58:64:fc:1f:fd:26:2b:9d:8d:af:53:ac:
                    a8:68:14:55:91:10:dd:4a:37:dd:c1:d0:33:15:08:
                    59:b0:53:71:33:68:f8:00:5d:72:23:5f:88:d0:61:
                    e3:33:4b:96:8d:25:aa:03:fb:2b:55:ba:d2:3e:1f:
                    3f:e3:67:fc:99:96:5b:6b:06:74:12:fd:44:11:b5:
                    1c:af:27:76:26:99:11:29:ba:9e:c9:a7:8f:98:d9:
                    21:53:ff:83:ad:31:0e:fe:24:6b:10:aa:1a:8d:e9:
                    a4:91:63:d5:8c:67:c5:5a:73:0e:d5:d2:7c:fb:46:
                    05:71:53:47:4d:73:53:a5:4d:de:14:2c:89:79:4d:
                    bc:bd:46:e8:9f:94:be:4f:27:d0:71:f4:40:d5:c7:
                    6e:78:30:e8:8e:30:d6:3e:47:1e:fb:1e:e8:a9:fe:
                    57:19:e6:ef:cc:51:d0:24:d2:15:4a:33:4a:7e:d0:
                    16:85:21:d1:39:44:9d:38:89:f3:3f:d4:c3:e4:9c:
                    48:b1:ab:89:3b:f9:8e:1f:15:17:1f:65:86:da:27:
                    84:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1B:56:68:83:A0:54:3D:64:5E:95:15:A6:02:98:F7:13:7A:5B:CC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24d921c1-9e96-4ec0-8d95-a45b8c083105.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.242.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         90:36:f1:57:b5:98:02:54:8b:bf:cd:81:f8:2d:88:58:7d:ea:
         46:71:3c:21:a7:dd:53:d7:70:1d:2e:0a:14:5e:af:d3:29:35:
         c2:01:8b:42:12:e9:1e:be:dd:f1:8a:9a:50:28:c9:ee:8e:ca:
         3d:6f:9b:06:80:4f:02:ce:9e:42:3a:68:60:2e:70:25:19:61:
         11:b0:b8:08:c9:7d:91:43:f3:f7:12:6d:26:f6:c4:0e:b9:d0:
         97:24:84:4d:19:24:3d:22:ff:bb:b9:d4:35:a7:6f:c1:71:c8:
         a8:94:32:f8:83:1b:86:c5:ed:7f:d4:5f:0b:e9:8d:c5:bd:f1:
         35:7e:c9:87:3e:67:00:c4:6b:75:c2:83:74:ae:da:c3:69:16:
         32:a6:c8:b5:03:88:e7:1e:60:eb:37:9e:14:e0:b2:c2:54:6f:
         d4:39:85:d4:c6:18:3e:39:42:5e:c6:b7:8b:6b:15:4e:35:5d:
         48:0c:67:5c:93:34:57:0c:00:78:fb:b6:b0:5c:af:32:63:ba:
         6f:1c:52:45:d2:3e:15:4b:08:4f:e1:11:56:e5:4b:48:b5:9f:
         4d:ea:3b:26:7e:19:e7:4f:87:69:d1:0b:54:ef:a0:f2:c7:08:
         7a:c6:56:2d:8a:49:be:4b:46:da:6d:97:6d:86:96:16:c6:04:
         73:40:c3:a1
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUJ0RqOO70e7gz5ORlcsddKlnaalUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE3MjE1MDQ1WhcNMjUxMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0AyMTZiMWYzZWFiZWRjMDI5NmM0NWMxN2IxNDI1NTRhOTRm
ZjBhMmM5NzQyOTY3YTIwMTE0YmJlZDI5NjFlMWJmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1boIXuFmyJ5L4+/y/Y05ouYFsDKuiOhmg1yjkJRGsvT/C
8/AuLvsv8rK/0rw9Alhk/B/9Jiudja9TrKhoFFWREN1KN93B0DMVCFmwU3EzaPgA
XXIjX4jQYeMzS5aNJaoD+ytVutI+Hz/jZ/yZlltrBnQS/UQRtRyvJ3YmmREpup7J
p4+Y2SFT/4OtMQ7+JGsQqhqN6aSRY9WMZ8Vacw7V0nz7RgVxU0dNc1OlTd4ULIl5
Tby9RuiflL5PJ9Bx9EDVx254MOiOMNY+Rx77Huip/lcZ5u/MUdAk0hVKM0p+0BaF
IdE5RJ04ifM/1MPknEixq4k7+Y4fFRcfZYbaJ4S9AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUyxtWaIOgVD1kXpUVpgKY9xN6W8wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzI0ZDkyMWMxLTllOTYtNGVjMC04ZDk1LWE0NWI4YzA4MzEwNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCo8jANBgkqhkiG9w0BAQsFAAOCAQEAkDbxV7WYAlSLv82B+C2IWH3qRnE8
IafdU9dwHS4KFF6v0yk1wgGLQhLpHr7d8YqaUCjJ7o7KPW+bBoBPAs6eQjpoYC5w
JRlhEbC4CMl9kUPz9xJtJvbEDrnQlySETRkkPSL/u7nUNadvwXHIqJQy+IMbhsXt
f9RfC+mNxb3xNX7Jhz5nAMRrdcKDdK7aw2kWMqbItQOI5x5g6zeeFOCywlRv1DmF
1MYYPjlCXsa3i2sVTjVdSAxnXJM0VwwAePu2sFyvMmO6bxxSRdI+FUsIT+ERVuVL
SLWfTeo7Jn4Z50+HadELVO+g8scIesZWLYpJvktG2m2XbYaWFsYEc0DDoQ==
-----END CERTIFICATE-----