Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/641b68cf-d9ca-474c-bec7-4a74387333c1.roa
File:                     641b68cf-d9ca-474c-bec7-4a74387333c1.roa (raw, json)
Hash identifier:          wdBMRJeUPlc7BWf4oA2NKMMGmE5FIFRleEfvh6RXrnY=
Subject key identifier:   EA:54:80:E5:09:3A:E0:F0:03:3C:CB:CF:9F:0A:4E:40:65:EB:B3:17
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4E47ACF6824D650222ECC7509C1D873B3CC93FBA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/641b68cf-d9ca-474c-bec7-4a74387333c1.roa
Signing time:             Tue 30 Sep 2025 00:01:22 +0000
ROA not before:           Tue 30 Sep 2025 00:01:22 +0000
ROA not after:            Tue 04 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.241.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:47:ac:f6:82:4d:65:02:22:ec:c7:50:9c:1d:87:3b:3c:c9:3f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 30 00:01:22 2025 GMT
            Not After : Nov  4 23:59:59 2025 GMT
        Subject: serialNumber=cccc2a23ca47f3f813f94c2001d188945fe9bf1432457325a395c649a81a2d46, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:71:c4:36:15:62:44:1c:25:d0:ce:ea:19:b0:
                    89:34:24:ec:0f:66:7d:cc:c2:db:9d:8c:8f:3e:40:
                    d6:4c:2c:9e:34:12:9c:48:db:01:b6:8b:9b:19:3f:
                    5f:9f:8b:ff:c2:03:a1:e2:5b:4a:fe:83:9f:b5:ed:
                    dc:b4:87:f2:6b:ec:4d:5c:21:97:93:78:ca:eb:5f:
                    7e:aa:74:81:ca:48:65:d3:a9:ca:ec:81:53:83:7b:
                    ba:60:0a:e9:93:f0:47:9f:49:97:d8:74:bb:e1:33:
                    6f:3e:81:b4:b7:af:f3:b6:d5:bd:d8:00:fc:03:0c:
                    72:fb:e6:ed:0a:5b:1f:ef:3a:8d:da:53:93:19:00:
                    70:fd:b2:30:4d:77:59:57:a3:80:fb:d7:66:a2:c1:
                    16:89:47:d5:5d:b1:78:6d:9b:b2:7d:e4:89:91:74:
                    46:2b:8c:04:ee:4f:a0:9b:2c:71:5c:27:e8:49:98:
                    01:a9:7e:e4:73:86:df:73:35:1d:33:49:d6:d6:fb:
                    5c:d3:f7:d8:0a:84:96:9d:17:43:ff:09:01:a0:a6:
                    b1:53:1f:bc:25:ac:19:dc:e1:2d:5e:8e:86:81:aa:
                    38:28:36:b8:d7:53:d1:9f:5d:c6:6f:8c:6f:6a:85:
                    57:c4:59:42:e1:23:ef:55:47:af:30:57:04:57:80:
                    8b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:54:80:E5:09:3A:E0:F0:03:3C:CB:CF:9F:0A:4E:40:65:EB:B3:17
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/641b68cf-d9ca-474c-bec7-4a74387333c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.241.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d4:18:46:46:cf:56:0b:93:73:9d:d5:96:4b:72:7b:03:0b:b9:
         d0:ce:11:d9:f5:33:3e:86:f5:03:a9:4d:48:27:34:f5:b3:b3:
         d3:34:0d:a5:06:e9:45:b0:fd:3d:48:54:50:73:f3:b4:30:72:
         fa:06:65:9f:3b:48:e1:d3:4c:08:28:f4:0d:62:96:8e:3f:be:
         4b:21:7e:60:64:6d:ad:68:c2:65:ce:f8:99:0d:97:53:a4:de:
         36:a3:1a:2a:ac:c2:10:bb:c7:63:ef:6c:8c:56:85:f6:c7:f8:
         b8:ca:8a:f7:93:36:ef:2f:ca:11:35:cb:1d:99:ac:2f:7b:39:
         da:7a:f2:c2:a7:05:33:e9:6f:c4:b3:47:e9:2d:1d:47:c8:1d:
         eb:6f:2c:67:d1:2e:13:50:76:d5:b3:87:c5:72:4c:62:71:04:
         31:6d:74:8d:b6:aa:c8:6c:b1:59:a0:66:86:fe:67:b9:67:3d:
         b7:19:8a:83:69:8a:85:4d:20:66:66:05:ab:a3:09:fc:64:6e:
         4d:78:37:9a:d3:bf:bc:8d:9e:28:b0:76:0e:cc:52:57:90:e6:
         ab:8d:d6:b7:4e:98:93:6d:46:f0:6c:83:4d:d3:cb:c2:29:1a:
         15:e6:f1:56:f9:e1:97:ea:d2:7f:48:1e:14:54:5a:45:fc:68:
         f1:c0:d2:e2
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUTkes9oJNZQIi7MdQnB2HOzzJP7owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTMwMDAwMTIyWhcNMjUxMTA0MjM1OTU5
WjB6MUkwRwYDVQQFE0BjY2NjMmEyM2NhNDdmM2Y4MTNmOTRjMjAwMWQxODg5NDVm
ZTliZjE0MzI0NTczMjVhMzk1YzY0OWE4MWEyZDQ2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCrccQ2FWJEHCXQzuoZsIk0JOwPZn3MwtudjI8+QNZMLJ40
EpxI2wG2i5sZP1+fi//CA6HiW0r+g5+17dy0h/Jr7E1cIZeTeMrrX36qdIHKSGXT
qcrsgVODe7pgCumT8EefSZfYdLvhM28+gbS3r/O21b3YAPwDDHL75u0KWx/vOo3a
U5MZAHD9sjBNd1lXo4D712aiwRaJR9VdsXhtm7J95ImRdEYrjATuT6CbLHFcJ+hJ
mAGpfuRzht9zNR0zSdbW+1zT99gKhJadF0P/CQGgprFTH7wlrBnc4S1ejoaBqjgo
NrjXU9GfXcZvjG9qhVfEWULhI+9VR68wVwRXgIv7AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU6lSA5Qk64PADPMvPnwpOQGXrsxcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzY0MWI2OGNmLWQ5Y2EtNDc0Yy1iZWM3LTRhNzQzODczMzNjMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAP8TANBgkqhkiG9w0BAQsFAAOCAQEA1BhGRs9WC5NzndWWS3J7Awu50M4R
2fUzPob1A6lNSCc09bOz0zQNpQbpRbD9PUhUUHPztDBy+gZlnztI4dNMCCj0DWKW
jj++SyF+YGRtrWjCZc74mQ2XU6TeNqMaKqzCELvHY+9sjFaF9sf4uMqK95M27y/K
ETXLHZmsL3s52nrywqcFM+lvxLNH6S0dR8gd628sZ9EuE1B21bOHxXJMYnEEMW10
jbaqyGyxWaBmhv5nuWc9txmKg2mKhU0gZmYFq6MJ/GRuTXg3mtO/vI2eKLB2DsxS
V5Dmq43Wt06Yk21G8GyDTdPLwikaFebxVvnhl+rSf0geFFRaRfxo8cDS4g==
-----END CERTIFICATE-----