Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4241cd7d-6764-4829-9ae0-6e63780008af.roa
File:                     4241cd7d-6764-4829-9ae0-6e63780008af.roa (raw, json)
Hash identifier:          HurnTh7eSGJaYta1TDEjCOmCdBs4aa9j5wQ/cb9IcTg=
Subject key identifier:   55:41:E3:83:BB:C1:21:A4:BC:36:BD:EA:56:15:62:96:B5:2F:53:6E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       78B0524CEC43A149749A0620DDECAE8DAF1435BE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4241cd7d-6764-4829-9ae0-6e63780008af.roa
Signing time:             Sun 19 Oct 2025 02:01:08 +0000
ROA not before:           Sun 19 Oct 2025 02:01:08 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.62.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b0:52:4c:ec:43:a1:49:74:9a:06:20:dd:ec:ae:8d:af:14:35:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 02:01:08 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=aff41c1ad70843f3c2369b47fda37c84af2238e398baed0b59fe17eca3248b9e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7c:46:ac:10:55:16:64:f1:82:dd:f4:7b:8f:
                    4a:24:49:49:96:f2:b1:ef:5b:73:3a:b0:2e:a4:bb:
                    4a:80:31:3e:a9:93:cb:d1:05:a9:69:dd:5d:fb:0c:
                    a6:4a:8f:bd:f1:fe:e9:0c:0e:8a:20:16:37:97:14:
                    4e:af:cf:77:74:4b:e4:16:86:68:78:72:d7:1d:e6:
                    ed:96:10:66:66:0d:3f:ab:22:a4:91:6d:00:4e:51:
                    2c:05:5c:4f:34:bd:e9:f2:40:fe:19:51:06:16:f1:
                    7e:79:66:34:e2:87:5d:53:8f:57:c9:15:56:6c:a3:
                    59:90:e4:2b:e5:61:74:d6:33:3b:eb:ea:af:ee:e1:
                    9c:1f:33:6d:16:88:20:ee:90:49:9d:01:d9:1c:20:
                    1b:08:e7:4f:85:cc:8a:a5:90:ea:51:22:86:62:54:
                    b5:07:80:81:2a:f3:99:dc:14:92:3f:8a:97:e4:68:
                    34:e2:28:2c:b3:06:66:17:77:88:1e:f3:a6:1f:ac:
                    85:5a:01:c9:f4:9e:be:34:89:9a:75:18:53:1c:b7:
                    a3:66:6b:44:18:2b:96:d8:ab:7a:07:bb:66:62:11:
                    dc:57:e4:f2:2e:d8:65:cd:a5:5f:18:53:cb:ef:0d:
                    63:de:a8:94:5b:6d:93:b4:fe:26:52:5e:ed:e4:5a:
                    7f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:41:E3:83:BB:C1:21:A4:BC:36:BD:EA:56:15:62:96:B5:2F:53:6E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4241cd7d-6764-4829-9ae0-6e63780008af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.62.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         27:c3:80:ae:6a:b0:df:a1:c1:37:94:85:42:b5:f4:f0:59:05:
         ed:e1:2b:e1:df:a2:e7:82:79:ef:37:12:1a:b1:91:11:0a:e2:
         15:e2:6c:84:2f:60:5b:29:35:cf:91:b7:6a:e3:cb:68:ca:4a:
         f2:42:5a:87:44:45:f1:9d:94:83:a7:bb:ec:ac:4c:36:e5:ac:
         d1:7d:23:1b:2c:0a:2d:89:b0:bf:57:08:43:9c:62:7b:ae:8e:
         66:6d:6a:07:5b:45:b9:d4:83:62:85:a2:29:88:79:90:32:34:
         05:24:6c:a0:e5:cc:97:90:d3:44:d0:f6:d0:43:19:7a:36:68:
         63:1a:78:76:38:8f:8f:fb:d2:5c:54:29:cb:05:44:c3:39:32:
         a4:ef:97:79:19:69:22:30:b4:f6:0f:9a:0b:e2:a3:77:09:bf:
         19:c2:9a:f7:45:b7:b8:9c:c5:ac:a7:6b:ab:ca:75:22:3f:c7:
         e5:28:b4:7d:6f:77:93:56:10:93:84:17:af:ce:89:b2:1f:0a:
         8d:ae:a4:5b:bc:4c:db:c4:bc:66:61:1e:7d:06:fc:35:20:d8:
         53:5f:89:11:f3:e9:90:58:09:43:e1:9a:12:38:a8:70:ed:a4:
         81:f8:da:4e:0f:ca:e1:96:31:13:dc:68:43:83:75:bd:39:31:
         ac:ed:d8:14
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUeLBSTOxDoUl0mgYg3eyuja8UNb4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDIwMTA4WhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BhZmY0MWMxYWQ3MDg0M2YzYzIzNjliNDdmZGEzN2M4NGFm
MjIzOGUzOThiYWVkMGI1OWZlMTdlY2EzMjQ4YjllMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC3fEasEFUWZPGC3fR7j0okSUmW8rHvW3M6sC6ku0qAMT6p
k8vRBalp3V37DKZKj73x/ukMDoogFjeXFE6vz3d0S+QWhmh4ctcd5u2WEGZmDT+r
IqSRbQBOUSwFXE80venyQP4ZUQYW8X55ZjTih11Tj1fJFVZso1mQ5CvlYXTWMzvr
6q/u4ZwfM20WiCDukEmdAdkcIBsI50+FzIqlkOpRIoZiVLUHgIEq85ncFJI/ipfk
aDTiKCyzBmYXd4ge86YfrIVaAcn0nr40iZp1GFMct6Nma0QYK5bYq3oHu2ZiEdxX
5PIu2GXNpV8YU8vvDWPeqJRbbZO0/iZSXu3kWn9fAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUVUHjg7vBIaS8Nr3qVhVilrUvU24wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQyNDFjZDdkLTY3NjQtNDgyOS05YWUwLTZlNjM3ODAwMDhhZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4PjANBgkqhkiG9w0BAQsFAAOCAQEAJ8OArmqw36HBN5SFQrX08FkF7eEr
4d+i54J57zcSGrGREQriFeJshC9gWyk1z5G3auPLaMpK8kJah0RF8Z2Ug6e77KxM
NuWs0X0jGywKLYmwv1cIQ5xie66OZm1qB1tFudSDYoWiKYh5kDI0BSRsoOXMl5DT
RND20EMZejZoYxp4djiPj/vSXFQpywVEwzkypO+XeRlpIjC09g+aC+Kjdwm/GcKa
90W3uJzFrKdrq8p1Ij/H5Si0fW93k1YQk4QXr86Jsh8Kja6kW7xM28S8ZmEefQb8
NSDYU1+JEfPpkFgJQ+GaEjiocO2kgfjaTg/K4ZYxE9xoQ4N1vTkxrO3YFA==
-----END CERTIFICATE-----