Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57b75184-8a3e-4f18-a0d7-5736fb88e199.roa
File:                     57b75184-8a3e-4f18-a0d7-5736fb88e199.roa (raw, json)
Hash identifier:          81AUB5+FHNOR2SmkOHpLvh3L7JaHVM/930z+3eeDTlI=
Subject key identifier:   63:84:98:10:F5:87:81:69:7B:91:70:D9:81:D1:B6:7F:94:94:E1:8F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5E1882394B63577906E31942CED62A903181B5BC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57b75184-8a3e-4f18-a0d7-5736fb88e199.roa
Signing time:             Sat 18 Oct 2025 03:20:09 +0000
ROA not before:           Sat 18 Oct 2025 03:20:09 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.8.192.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:18:82:39:4b:63:57:79:06:e3:19:42:ce:d6:2a:90:31:81:b5:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 03:20:09 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=9bcdf425ae35e7cb3b4462dd81230e45435c1b29715f3e0c651871b09829537c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:55:42:4a:a3:48:3a:f3:09:65:62:c2:a2:20:
                    ed:05:35:31:a0:d1:2e:b1:34:a4:c0:ac:67:86:a2:
                    4e:ae:58:75:3f:ff:6d:44:46:ca:2a:18:2d:1f:c1:
                    e8:9a:de:db:f2:2a:e6:3c:73:65:7b:ba:11:e8:af:
                    6b:24:c8:24:f7:12:d5:af:49:43:07:6f:fe:a0:92:
                    27:1a:0d:e9:c5:29:75:cf:ef:1a:34:92:42:37:1e:
                    b6:64:8c:7e:cc:df:38:0d:38:df:19:02:15:b1:2d:
                    62:0c:c2:55:62:7d:b0:d6:24:3b:44:b0:ae:32:e1:
                    12:13:42:cc:d4:e6:fc:15:b4:aa:e8:4a:99:83:bf:
                    4c:79:f4:b7:ed:9c:4c:fe:91:35:75:04:a7:54:75:
                    21:b9:90:8a:c3:0a:58:48:fd:a4:72:09:0a:e9:35:
                    51:a3:af:54:4c:a1:98:d5:60:2c:c5:46:a0:cc:e6:
                    61:b0:3a:41:71:f6:55:11:c8:c7:e7:02:c8:4d:d4:
                    eb:09:14:a2:78:7c:56:ba:14:0e:12:b1:de:e5:fe:
                    bd:c4:9a:ca:1d:68:d6:ac:f1:2c:3c:da:a0:8a:6a:
                    b5:f4:26:f9:aa:a1:59:78:bf:5f:b0:c3:3a:15:00:
                    ca:2f:85:97:c9:65:d1:94:e7:c9:27:8d:4e:1d:70:
                    a6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:84:98:10:F5:87:81:69:7B:91:70:D9:81:D1:B6:7F:94:94:E1:8F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57b75184-8a3e-4f18-a0d7-5736fb88e199.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.8.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0f:ec:73:21:86:86:91:c6:dd:e8:62:6f:37:c8:0a:77:d8:40:
         f7:ca:bf:4a:07:6d:3a:d9:c0:61:ee:b3:5a:9b:7c:b6:11:aa:
         70:7a:75:69:af:66:05:ab:21:c1:2e:30:f9:65:d3:ba:50:ac:
         af:35:63:c1:59:4b:4c:e1:65:d6:c2:81:2c:fd:f0:87:9b:fa:
         bf:aa:e4:6d:e8:12:20:12:c8:68:30:61:64:36:97:d9:c8:b0:
         86:7b:f2:de:d0:da:78:35:65:5e:1f:8e:c6:b3:a7:65:01:28:
         29:33:9c:6b:19:78:55:a9:8a:7a:f1:2b:c7:1b:24:1b:0c:b5:
         cb:69:da:c5:4c:02:7d:c3:fa:ad:98:e0:94:c1:88:87:67:63:
         5e:82:b3:e3:6b:8d:2d:30:40:c6:06:08:e6:30:82:3a:ac:fb:
         1c:0a:ab:38:54:d4:b0:69:23:97:78:98:04:a3:55:38:66:da:
         c4:ea:07:6f:53:c3:c3:3c:4a:96:23:7e:e4:1f:88:9d:59:c8:
         b8:21:78:14:9d:a2:7f:a1:8d:a1:e8:d5:4b:fe:81:86:17:0c:
         cb:26:2a:a6:ef:aa:53:c4:8b:ba:48:20:d4:25:69:d3:8f:e3:
         e5:7d:f4:a6:85:89:0b:f8:6c:1a:d9:85:15:0e:cc:2e:e2:5f:
         bf:eb:56:aa
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUXhiCOUtjV3kG4xlCztYqkDGBtbwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDMyMDA5WhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A5YmNkZjQyNWFlMzVlN2NiM2I0NDYyZGQ4MTIzMGU0NTQz
NWMxYjI5NzE1ZjNlMGM2NTE4NzFiMDk4Mjk1MzdjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDxVUJKo0g68wllYsKiIO0FNTGg0S6xNKTArGeGok6uWHU/
/21ERsoqGC0fweia3tvyKuY8c2V7uhHor2skyCT3EtWvSUMHb/6gkicaDenFKXXP
7xo0kkI3HrZkjH7M3zgNON8ZAhWxLWIMwlVifbDWJDtEsK4y4RITQszU5vwVtKro
SpmDv0x59LftnEz+kTV1BKdUdSG5kIrDClhI/aRyCQrpNVGjr1RMoZjVYCzFRqDM
5mGwOkFx9lURyMfnAshN1OsJFKJ4fFa6FA4Ssd7l/r3EmsodaNas8Sw82qCKarX0
JvmqoVl4v1+wwzoVAMovhZfJZdGU58knjU4dcKYFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUY4SYEPWHgWl7kXDZgdG2f5SU4Y8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzU3Yjc1MTg0LThhM2UtNGYxOC1hMGQ3LTU3MzZmYjg4ZTE5OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZBCMAwDQYJKoZIhvcNAQELBQADggEBAA/scyGGhpHG3ehibzfICnfYQPfK
v0oHbTrZwGHus1qbfLYRqnB6dWmvZgWrIcEuMPll07pQrK81Y8FZS0zhZdbCgSz9
8Ieb+r+q5G3oEiASyGgwYWQ2l9nIsIZ78t7Q2ng1ZV4fjsazp2UBKCkznGsZeFWp
inrxK8cbJBsMtctp2sVMAn3D+q2Y4JTBiIdnY16Cs+NrjS0wQMYGCOYwgjqs+xwK
qzhU1LBpI5d4mASjVThm2sTqB29Tw8M8SpYjfuQfiJ1ZyLgheBSdon+hjaHo1Uv+
gYYXDMsmKqbvqlPEi7pIINQladOP4+V99KaFiQv4bBrZhRUOzC7iX7/rVqo=
-----END CERTIFICATE-----