Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30f73843-bbd8-4e0f-be28-9d4ea5fbb8f5.roa
File:                     30f73843-bbd8-4e0f-be28-9d4ea5fbb8f5.roa (raw, json)
Hash identifier:          ie2kPFHefBRSGdnRcJ0DI1II/FW0al/XflXbDR9AYbM=
Subject key identifier:   22:82:BC:03:B1:74:31:4C:02:B4:AE:C9:D8:78:E3:DB:7D:BE:C4:14
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5BAF8A659BF2CC769970F10F8C9A3BACC2E07B99
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30f73843-bbd8-4e0f-be28-9d4ea5fbb8f5.roa
Signing time:             Sat 18 Oct 2025 02:21:35 +0000
ROA not before:           Sat 18 Oct 2025 02:21:35 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.8.62.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:af:8a:65:9b:f2:cc:76:99:70:f1:0f:8c:9a:3b:ac:c2:e0:7b:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 02:21:35 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=c8ce1dac25c12f88e6b8da16307c8530cceefccbe1cbef627ba6dd84b746c485, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:39:35:38:45:52:3a:69:9b:aa:c4:5d:8a:bf:
                    0f:c2:23:e7:c9:79:1b:8f:e9:0b:07:96:29:ce:bf:
                    34:cf:5b:a2:36:2b:f9:c2:e6:21:30:79:ff:2a:87:
                    a6:49:85:34:ed:a1:ce:ed:37:b9:70:0b:58:a6:91:
                    95:90:88:af:2b:0a:43:1b:d3:0b:ac:be:09:6e:9f:
                    ee:18:c2:30:98:3e:ab:32:a5:38:1b:c5:34:e7:6b:
                    13:43:a1:2f:51:33:f7:3a:93:5a:49:2c:16:f4:1d:
                    d4:f9:c4:f6:c3:7f:fe:e5:0c:8b:30:50:05:a4:88:
                    7c:de:5f:79:61:f2:78:b3:66:7d:39:fa:4a:02:87:
                    76:3e:c3:f9:fa:2e:48:39:c0:0f:34:27:d9:bb:68:
                    bf:9f:b0:80:26:c0:36:1b:70:72:8a:3d:19:b5:ef:
                    be:9c:c8:51:80:47:97:7a:7b:35:7b:d6:d0:b9:b4:
                    30:70:76:b3:5e:8e:f5:a8:34:8b:9b:44:60:90:d1:
                    3e:84:03:db:7d:4f:17:0e:81:39:8d:91:5c:22:b2:
                    b9:f7:e8:13:f6:8f:28:ea:c3:2f:c2:bb:57:3d:bf:
                    39:ad:31:a5:41:43:e0:2d:b8:fc:42:f2:61:bf:99:
                    a7:52:31:37:4c:ae:c8:85:e4:4f:99:6e:b7:44:0f:
                    2a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:82:BC:03:B1:74:31:4C:02:B4:AE:C9:D8:78:E3:DB:7D:BE:C4:14
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30f73843-bbd8-4e0f-be28-9d4ea5fbb8f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.8.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:be:27:88:d5:d5:1c:35:ba:1c:32:0b:d2:0c:db:29:a7:3f:
         8b:92:ee:f1:fd:1d:98:7b:8d:73:ec:78:48:16:93:e7:5e:1c:
         5e:5e:85:80:1e:33:dc:bf:6b:b1:ed:77:0e:9b:3a:10:c6:b2:
         b2:c4:5e:31:bd:ed:d6:87:08:d8:a2:c7:fe:a5:43:3a:a9:09:
         78:9d:e9:5f:d3:9e:5a:e7:81:f8:cb:3b:bd:97:63:05:3d:8e:
         b2:77:3e:b0:74:ca:38:81:9b:ec:da:ce:9d:5b:d6:ee:c6:9b:
         6c:31:ed:bf:68:11:c1:34:34:26:80:36:1b:dd:24:48:55:e1:
         67:e6:09:cb:2d:ae:a1:94:7b:04:4c:6d:d9:df:c5:5b:7f:5c:
         d0:4a:a2:20:58:4d:fa:6c:09:df:3f:25:59:2d:7c:77:d9:e1:
         25:1a:30:07:60:c7:e5:db:e3:c1:7f:4a:fd:51:3c:a6:7d:e7:
         3d:bf:eb:0f:a2:95:20:ad:73:47:f8:63:37:b4:94:25:aa:ab:
         8a:e3:55:67:12:1f:93:6b:63:6d:35:14:bd:37:ea:ab:86:5c:
         71:97:4d:6b:d5:39:5d:58:f6:fd:17:ac:8d:15:b2:5d:72:a7:
         13:07:ed:7f:c1:89:ab:d7:d9:6a:17:18:d6:8a:1c:f1:27:cc:
         c8:b7:3b:64
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUW6+KZZvyzHaZcPEPjJo7rMLge5kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDIyMTM1WhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BjOGNlMWRhYzI1YzEyZjg4ZTZiOGRhMTYzMDdjODUzMGNj
ZWVmY2NiZTFjYmVmNjI3YmE2ZGQ4NGI3NDZjNDg1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDKOTU4RVI6aZuqxF2Kvw/CI+fJeRuP6QsHlinOvzTPW6I2
K/nC5iEwef8qh6ZJhTTtoc7tN7lwC1imkZWQiK8rCkMb0wusvglun+4YwjCYPqsy
pTgbxTTnaxNDoS9RM/c6k1pJLBb0HdT5xPbDf/7lDIswUAWkiHzeX3lh8nizZn05
+koCh3Y+w/n6Lkg5wA80J9m7aL+fsIAmwDYbcHKKPRm1776cyFGAR5d6ezV71tC5
tDBwdrNejvWoNIubRGCQ0T6EA9t9TxcOgTmNkVwisrn36BP2jyjqwy/Cu1c9vzmt
MaVBQ+AtuPxC8mG/madSMTdMrsiF5E+ZbrdEDypLAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUIoK8A7F0MUwCtK7J2Hjj232+xBQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzMwZjczODQzLWJiZDgtNGUwZi1iZTI4LTlkNGVhNWZiYjhmNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFBCD4wDQYJKoZIhvcNAQELBQADggEBAL++J4jV1Rw1uhwyC9IM2ymnP4uS
7vH9HZh7jXPseEgWk+deHF5ehYAeM9y/a7Htdw6bOhDGsrLEXjG97daHCNiix/6l
QzqpCXid6V/TnlrngfjLO72XYwU9jrJ3PrB0yjiBm+zazp1b1u7Gm2wx7b9oEcE0
NCaANhvdJEhV4WfmCcstrqGUewRMbdnfxVt/XNBKoiBYTfpsCd8/JVktfHfZ4SUa
MAdgx+Xb48F/Sv1RPKZ95z2/6w+ilSCtc0f4Yze0lCWqq4rjVWcSH5NrY201FL03
6quGXHGXTWvVOV1Y9v0XrI0Vsl1ypxMH7X/BiavX2WoXGNaKHPEnzMi3O2Q=
-----END CERTIFICATE-----