Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4509cfff-2756-4090-9163-f198714b099d.roa
File:                     4509cfff-2756-4090-9163-f198714b099d.roa (raw, json)
Hash identifier:          0w7TFeR71rMZZ8LlBp4km8sc9sFu71tVSxSog+xbFAM=
Subject key identifier:   A8:21:38:EE:8B:3F:C4:16:3D:A2:EE:7E:15:D8:12:59:15:35:AC:B1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0B746A55F1653080792271A6E5E32781354B2C58
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4509cfff-2756-4090-9163-f198714b099d.roa
Signing time:             Fri 17 Oct 2025 00:52:48 +0000
ROA not before:           Fri 17 Oct 2025 00:52:48 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.51.30.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:74:6a:55:f1:65:30:80:79:22:71:a6:e5:e3:27:81:35:4b:2c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 00:52:48 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=cf6d9e4b3d0509dcca11b170bb9001e95b18392ecf851aa06cff32e3cc4eeb94, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:57:e1:30:99:df:75:b7:01:d6:37:40:6f:9b:
                    a7:e9:a6:79:de:62:53:dc:33:ec:72:d7:c5:f1:31:
                    16:ba:0d:88:96:35:60:66:55:8d:b8:b9:28:28:05:
                    de:27:cf:ee:ea:70:77:19:13:71:eb:62:4a:e5:6f:
                    fa:9e:f9:f1:fa:ee:78:c6:c4:38:8f:b8:81:27:a0:
                    0e:80:6d:68:85:55:20:55:6c:66:6a:c3:89:eb:75:
                    1f:33:8b:f9:8f:5b:03:47:7c:0a:35:1e:c4:34:ee:
                    7e:41:9d:80:68:a2:11:bc:78:9e:af:c8:84:ea:31:
                    12:da:9f:8b:cc:65:0b:ef:5d:38:15:87:68:c1:f9:
                    0d:a9:07:cb:d4:d0:12:bd:6e:0f:9c:64:3b:00:6b:
                    6f:b3:b4:aa:e8:0c:5b:92:15:18:79:26:e7:65:97:
                    a7:ea:6d:4c:4f:4f:25:fc:9c:86:16:37:42:fb:72:
                    c6:39:97:f2:6e:18:7c:cb:f6:51:3b:07:b4:e2:6d:
                    30:02:97:20:51:38:e1:fc:21:66:55:71:35:68:66:
                    bd:7d:e9:4f:5b:3b:3e:b4:07:9c:08:3e:29:2b:7b:
                    ae:31:98:a8:39:ea:ac:d0:eb:99:5e:a2:cc:00:47:
                    e2:e3:8c:9b:01:06:33:46:ec:af:76:29:a5:50:74:
                    31:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:21:38:EE:8B:3F:C4:16:3D:A2:EE:7E:15:D8:12:59:15:35:AC:B1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4509cfff-2756-4090-9163-f198714b099d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.51.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:a7:7e:73:b9:8b:04:59:6a:4f:9a:d0:c1:4a:68:48:a5:81:
         85:11:cb:52:16:1f:af:9d:b5:e7:8d:be:00:ba:07:81:40:45:
         e1:0e:4a:86:eb:30:38:2c:1f:b2:21:4d:8c:a9:e9:3a:21:52:
         ef:ab:9e:75:e9:0f:7e:a4:b7:49:9e:1e:3f:6d:7d:f4:8d:63:
         37:85:da:04:e0:23:83:8b:ea:b3:5d:dd:20:a3:42:eb:b3:37:
         c3:f7:bd:6c:e8:11:c8:8a:dd:d9:ab:bb:85:db:33:ff:08:43:
         06:06:bc:7f:d1:ea:7b:19:3d:72:04:b0:6e:95:33:0b:4b:4e:
         bd:93:70:27:a8:0f:d5:ea:61:5c:6a:c8:12:15:d6:f4:13:f5:
         e3:e1:7c:39:ae:c6:15:97:ab:eb:dd:85:84:73:3a:d0:33:bf:
         df:d0:22:92:c4:4b:c8:25:f2:6e:1d:dc:d8:aa:8f:28:fb:8f:
         f2:95:35:b9:96:c7:5d:4a:06:db:3c:16:f0:b1:ab:ce:cf:13:
         8b:80:7a:d6:21:ab:bf:b4:9c:37:1d:53:4c:10:ff:de:8d:f3:
         fe:34:bc:03:41:70:d6:d0:79:8e:f9:7b:ac:c4:e3:8e:b7:0e:
         88:a5:49:b1:26:6d:da:76:fb:06:74:b7:23:86:28:35:df:5c:
         79:48:fb:b6
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUC3RqVfFlMIB5InGm5eMngTVLLFgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE3MDA1MjQ4WhcNMjUxMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BjZjZkOWU0YjNkMDUwOWRjY2ExMWIxNzBiYjkwMDFlOTVi
MTgzOTJlY2Y4NTFhYTA2Y2ZmMzJlM2NjNGVlYjk0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDbV+Ewmd91twHWN0Bvm6fppnneYlPcM+xy18XxMRa6DYiW
NWBmVY24uSgoBd4nz+7qcHcZE3HrYkrlb/qe+fH67njGxDiPuIEnoA6AbWiFVSBV
bGZqw4nrdR8zi/mPWwNHfAo1HsQ07n5BnYBoohG8eJ6vyITqMRLan4vMZQvvXTgV
h2jB+Q2pB8vU0BK9bg+cZDsAa2+ztKroDFuSFRh5Judll6fqbUxPTyX8nIYWN0L7
csY5l/JuGHzL9lE7B7TibTAClyBROOH8IWZVcTVoZr196U9bOz60B5wIPikre64x
mKg56qzQ65leoswAR+LjjJsBBjNG7K92KaVQdDH1AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUqCE47os/xBY9ou5+FdgSWRU1rLEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQ1MDljZmZmLTI3NTYtNDA5MC05MTYzLWYxOTg3MTRiMDk5ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEQMx4wDQYJKoZIhvcNAQELBQADggEBAESnfnO5iwRZak+a0MFKaEilgYUR
y1IWH6+dteeNvgC6B4FAReEOSobrMDgsH7IhTYyp6TohUu+rnnXpD36kt0meHj9t
ffSNYzeF2gTgI4OL6rNd3SCjQuuzN8P3vWzoEciK3dmru4XbM/8IQwYGvH/R6nsZ
PXIEsG6VMwtLTr2TcCeoD9XqYVxqyBIV1vQT9ePhfDmuxhWXq+vdhYRzOtAzv9/Q
IpLES8gl8m4d3Niqjyj7j/KVNbmWx11KBts8FvCxq87PE4uAetYhq7+0nDcdU0wQ
/96N8/40vANBcNbQeY75e6zE4463DoilSbEmbdp2+wZ0tyOGKDXfXHlI+7Y=
-----END CERTIFICATE-----