Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24d9276b-263e-407d-a430-3b8b325a790d.roa
File:                     24d9276b-263e-407d-a430-3b8b325a790d.roa (raw, json)
Hash identifier:          23dZ9sA1OWZAARZDKwfyFc6u1ucXpmk+cA1fr9k11v4=
Subject key identifier:   22:70:3C:6A:64:93:E2:76:EC:2E:A6:76:59:F7:F8:C8:C1:F6:06:8E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       175938091765929F554424B1B554880C35BDF4EF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24d9276b-263e-407d-a430-3b8b325a790d.roa
Signing time:             Sat 18 Oct 2025 00:21:41 +0000
ROA not before:           Sat 18 Oct 2025 00:21:41 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        110.239.12.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:59:38:09:17:65:92:9f:55:44:24:b1:b5:54:88:0c:35:bd:f4:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 00:21:41 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=957f0244119bc52e1c052863ceb5906cce4cdd756879e058b566d91c1b76972f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:52:a4:c9:17:33:f0:96:35:5e:04:bd:7a:ef:
                    cc:01:bc:34:8d:97:c4:9d:a8:fa:03:eb:87:44:23:
                    02:22:d9:8d:6d:af:1f:2a:12:cf:3c:6d:e8:94:22:
                    c8:db:91:57:a5:e1:ca:2b:72:25:0e:0e:cf:cc:81:
                    39:c0:7f:2a:d9:ea:c0:84:9f:3c:3d:01:6a:8d:41:
                    6c:2e:96:67:2a:7a:76:a3:9d:79:2d:1c:5e:e2:c5:
                    ab:4b:3b:76:02:c4:b4:80:a1:db:30:e7:26:c6:c4:
                    b5:21:f6:34:a4:d2:17:9c:d9:63:f9:04:f5:36:8f:
                    cc:e0:0a:99:2f:b9:1a:0a:8e:09:3b:12:f3:4a:2e:
                    9b:94:68:7e:40:6d:df:4c:bf:ba:a7:ea:c9:04:b6:
                    c4:e5:cd:a2:52:98:58:20:ea:a1:9f:a7:79:40:c8:
                    9a:c6:2a:5f:79:67:f3:b2:ee:03:34:63:3c:94:fc:
                    92:f2:6a:3d:a8:e5:b9:41:5b:e5:2e:18:66:46:fb:
                    11:43:7f:4d:b0:7a:71:b6:79:38:57:bd:55:95:33:
                    09:62:8f:73:21:34:bc:bd:2a:c1:50:d3:a6:71:d9:
                    0d:8d:29:04:f8:43:2d:52:c5:2d:ba:fa:de:8d:b3:
                    d3:6e:a5:75:7f:aa:7d:3e:f0:36:32:6a:5d:76:a7:
                    52:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:70:3C:6A:64:93:E2:76:EC:2E:A6:76:59:F7:F8:C8:C1:F6:06:8E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24d9276b-263e-407d-a430-3b8b325a790d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.239.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:1d:39:58:71:47:1d:2e:f0:0d:89:9a:ac:91:27:49:d2:1e:
         44:6a:db:fa:b1:cd:23:87:cc:c6:01:11:19:46:04:81:5f:04:
         9a:d4:d8:75:a0:21:81:34:f3:08:f8:61:dd:3f:a7:7e:ea:b3:
         ff:97:4b:82:47:04:dd:9f:0f:02:1b:cb:d6:47:fe:40:ee:57:
         9e:ea:c1:49:7a:bd:83:12:b8:46:9a:ad:7b:c3:b2:08:50:ff:
         66:c5:53:0a:ad:a9:c6:f2:5b:88:56:63:1a:7a:cd:60:19:e4:
         54:39:8c:6e:71:dd:ce:ff:a4:bd:33:76:83:d2:ec:6d:c5:a9:
         ff:d6:c1:a8:f2:c6:6a:dd:04:61:b8:4d:90:8b:a0:c3:52:98:
         67:a7:9b:ec:98:03:3c:a9:61:47:4b:b9:26:8d:ea:9a:8f:cf:
         9b:ad:1c:b3:a4:49:81:d8:ad:af:a7:32:0c:23:a7:09:83:f2:
         39:73:41:ee:35:f4:00:1c:c3:a2:74:cc:38:02:90:b6:0e:cc:
         77:19:9d:47:c4:99:ae:56:f8:7f:14:3f:8e:50:f7:81:12:99:
         2b:e4:12:f9:28:50:06:e8:29:76:a2:5d:10:2f:8d:8d:80:95:
         c5:93:9c:de:85:30:1d:2e:46:db:8f:c6:16:1f:81:3d:1a:5e:
         0e:1e:0b:a7
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUF1k4CRdlkp9VRCSxtVSIDDW99O8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDAyMTQxWhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A5NTdmMDI0NDExOWJjNTJlMWMwNTI4NjNjZWI1OTA2Y2Nl
NGNkZDc1Njg3OWUwNThiNTY2ZDkxYzFiNzY5NzJmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDNUqTJFzPwljVeBL1678wBvDSNl8SdqPoD64dEIwIi2Y1t
rx8qEs88beiUIsjbkVel4corciUODs/MgTnAfyrZ6sCEnzw9AWqNQWwulmcqenaj
nXktHF7ixatLO3YCxLSAodsw5ybGxLUh9jSk0hec2WP5BPU2j8zgCpkvuRoKjgk7
EvNKLpuUaH5Abd9Mv7qn6skEtsTlzaJSmFgg6qGfp3lAyJrGKl95Z/Oy7gM0YzyU
/JLyaj2o5blBW+UuGGZG+xFDf02wenG2eThXvVWVMwlij3MhNLy9KsFQ06Zx2Q2N
KQT4Qy1SxS26+t6Ns9NupXV/qn0+8DYyal12p1KdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUInA8amST4nbsLqZ2Wff4yMH2Bo4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzI0ZDkyNzZiLTI2M2UtNDA3ZC1hNDMwLTNiOGIzMjVhNzkwZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFu7wwwDQYJKoZIhvcNAQELBQADggEBAEkdOVhxRx0u8A2JmqyRJ0nSHkRq
2/qxzSOHzMYBERlGBIFfBJrU2HWgIYE08wj4Yd0/p37qs/+XS4JHBN2fDwIby9ZH
/kDuV57qwUl6vYMSuEaarXvDsghQ/2bFUwqtqcbyW4hWYxp6zWAZ5FQ5jG5x3c7/
pL0zdoPS7G3Fqf/WwajyxmrdBGG4TZCLoMNSmGenm+yYAzypYUdLuSaN6pqPz5ut
HLOkSYHYra+nMgwjpwmD8jlzQe419AAcw6J0zDgCkLYOzHcZnUfEma5W+H8UP45Q
94ESmSvkEvkoUAboKXaiXRAvjY2AlcWTnN6FMB0uRtuPxhYfgT0aXg4eC6c=
-----END CERTIFICATE-----