Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f9e4c99-1745-41a5-a36b-cdd7f466d60a.roa
File:                     6f9e4c99-1745-41a5-a36b-cdd7f466d60a.roa (raw, json)
Hash identifier:          zbEq9aiUhCsD8ogXEWxpEhLfrOABBH40qI8saoGEzG4=
Subject key identifier:   13:37:97:18:78:E6:93:B4:F0:B5:20:BB:91:09:1B:1E:41:5E:60:6C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1E6B6EDDC775FC0125AA70F52F4DECBE1D3A5FB1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f9e4c99-1745-41a5-a36b-cdd7f466d60a.roa
Signing time:             Sun 19 Oct 2025 02:11:45 +0000
ROA not before:           Sun 19 Oct 2025 02:11:45 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        136.8.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:6b:6e:dd:c7:75:fc:01:25:aa:70:f5:2f:4d:ec:be:1d:3a:5f:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 02:11:45 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=d91d6432dffe7b7c4db6e463adeeb8fa08539205ba050d2a1d3e96b18ffa4704, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e8:31:1b:15:66:9f:fe:b9:fc:9a:6c:3e:0e:
                    6e:37:d1:1e:59:f9:82:af:ab:c4:d8:49:3c:ec:68:
                    0a:10:ee:70:97:92:4f:f2:93:94:61:d3:93:b0:5e:
                    2b:25:dc:aa:ce:cc:01:11:50:88:10:f0:84:c5:1e:
                    63:75:9f:9f:84:b6:96:58:b6:52:29:bc:53:80:86:
                    98:41:8c:77:45:b6:77:7b:27:50:fd:bf:6e:8e:74:
                    6f:e1:35:44:23:80:00:2f:a7:18:33:c9:dd:7b:46:
                    b3:77:f2:f0:22:01:69:4b:81:23:72:17:f6:8c:30:
                    e1:e1:56:d4:6e:ba:9d:ba:fb:b3:ce:5d:07:59:30:
                    cb:4e:da:f1:db:fe:f2:31:e2:52:9f:83:8e:db:41:
                    72:c4:54:6a:57:ce:26:36:b4:e4:67:ec:3a:6a:d0:
                    28:ea:2c:2b:6e:3c:63:ec:2c:db:b3:f6:52:a7:bf:
                    a1:cd:d6:cc:ae:72:f0:3b:a3:82:48:e9:81:20:aa:
                    76:50:98:1c:7d:ff:c8:6e:c5:49:9d:09:cb:60:71:
                    b4:fd:b0:15:47:6e:14:13:60:51:b4:44:43:dc:a3:
                    1a:fd:27:83:c7:4f:28:0e:53:db:f5:fb:77:c3:d8:
                    2f:06:d0:8b:b2:83:ec:e9:c5:15:a5:ac:f9:b7:4d:
                    ab:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:37:97:18:78:E6:93:B4:F0:B5:20:BB:91:09:1B:1E:41:5E:60:6C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f9e4c99-1745-41a5-a36b-cdd7f466d60a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.8.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         75:23:7d:fb:b9:d0:cd:d2:87:09:a2:04:02:52:90:57:7a:9e:
         65:ba:d4:c4:ec:f1:79:0b:d3:ad:9f:81:7b:f9:0e:e7:9b:e9:
         53:a7:55:15:98:de:88:5a:3a:76:c5:cf:f9:c1:73:bf:45:de:
         45:c8:39:7c:e5:f8:ad:b7:cd:05:86:39:85:c0:78:10:fe:09:
         fd:03:24:b0:30:8d:75:aa:50:75:3f:8f:36:82:eb:a2:7c:46:
         e6:ec:53:74:01:d2:b9:df:b2:12:1e:f2:0c:11:6f:9c:37:ac:
         ea:0b:72:74:b2:01:0a:d5:b7:65:74:97:27:50:9b:98:a4:35:
         4e:b2:96:90:53:54:11:4a:bf:19:37:39:0a:51:aa:de:bd:4a:
         7f:c0:33:81:09:eb:1b:14:b4:81:74:40:67:6e:0b:6e:31:d0:
         4e:06:06:7e:06:75:e7:2b:f8:a2:8c:99:b2:8b:87:dc:b5:14:
         04:52:75:2d:f4:76:92:c8:1d:40:bf:76:d5:e6:04:a8:7d:9d:
         11:b3:c2:a9:20:d4:31:d2:6e:d6:b5:50:35:7a:d4:12:d2:69:
         af:ec:85:c8:c6:ae:52:78:f6:df:e7:3a:ed:b5:c8:0e:de:d0:
         29:ca:2b:0f:40:49:16:0d:5f:e8:77:0a:33:70:97:45:38:f2:
         54:e6:7a:5c
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUHmtu3cd1/AElqnD1L03svh06X7EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDIxMTQ1WhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BkOTFkNjQzMmRmZmU3YjdjNGRiNmU0NjNhZGVlYjhmYTA4
NTM5MjA1YmEwNTBkMmExZDNlOTZiMThmZmE0NzA0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCu6DEbFWaf/rn8mmw+Dm430R5Z+YKvq8TYSTzsaAoQ7nCX
kk/yk5Rh05OwXisl3KrOzAERUIgQ8ITFHmN1n5+EtpZYtlIpvFOAhphBjHdFtnd7
J1D9v26OdG/hNUQjgAAvpxgzyd17RrN38vAiAWlLgSNyF/aMMOHhVtRuup26+7PO
XQdZMMtO2vHb/vIx4lKfg47bQXLEVGpXziY2tORn7Dpq0CjqLCtuPGPsLNuz9lKn
v6HN1syucvA7o4JI6YEgqnZQmBx9/8huxUmdCctgcbT9sBVHbhQTYFG0REPcoxr9
J4PHTygOU9v1+3fD2C8G0Iuyg+zpxRWlrPm3TatBAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUEzeXGHjmk7TwtSC7kQkbHkFeYGwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZmOWU0Yzk5LTE3NDUtNDFhNS1hMzZiLWNkZDdmNDY2ZDYwYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwGICDANBgkqhkiG9w0BAQsFAAOCAQEAdSN9+7nQzdKHCaIEAlKQV3qeZbrU
xOzxeQvTrZ+Be/kO55vpU6dVFZjeiFo6dsXP+cFzv0XeRcg5fOX4rbfNBYY5hcB4
EP4J/QMksDCNdapQdT+PNoLronxG5uxTdAHSud+yEh7yDBFvnDes6gtydLIBCtW3
ZXSXJ1CbmKQ1TrKWkFNUEUq/GTc5ClGq3r1Kf8AzgQnrGxS0gXRAZ24LbjHQTgYG
fgZ15yv4ooyZsouH3LUUBFJ1LfR2ksgdQL921eYEqH2dEbPCqSDUMdJu1rVQNXrU
EtJpr+yFyMauUnj23+c67bXIDt7QKcorD0BJFg1f6HcKM3CXRTjyVOZ6XA==
-----END CERTIFICATE-----