Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7325b5c8-c5a3-498a-9164-530c63b89822.roa
File:                     7325b5c8-c5a3-498a-9164-530c63b89822.roa (raw, json)
Hash identifier:          yGBjI/iQIwDPAmjuU90XStmi6I+hMObi2GTswWjSppM=
Subject key identifier:   16:08:2D:04:24:A2:7C:4C:61:25:F7:FE:3C:84:0B:86:72:FF:42:10
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       439226F17FEDFD705DA4D07098054EBC62D41AA2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7325b5c8-c5a3-498a-9164-530c63b89822.roa
Signing time:             Sat 11 Oct 2025 00:42:42 +0000
ROA not before:           Sat 11 Oct 2025 00:42:42 +0000
ROA not after:            Sat 15 Nov 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        40.38.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:92:26:f1:7f:ed:fd:70:5d:a4:d0:70:98:05:4e:bc:62:d4:1a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 11 00:42:42 2025 GMT
            Not After : Nov 15 23:59:59 2025 GMT
        Subject: serialNumber=8d8f04e88c15b354fff7c67f8ab2688f3ed3b40624003d927ba73a808c0d2cbf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cc:94:68:d8:f9:dd:a7:38:e3:ba:e7:cd:61:
                    5d:72:99:30:29:4b:d3:8b:42:d7:ee:e8:b1:4d:18:
                    81:62:61:dd:19:b4:3d:55:79:dd:68:56:71:96:6d:
                    b1:86:bb:c6:27:f1:e4:82:eb:21:e9:ec:e3:76:3b:
                    b2:7a:aa:24:00:ed:d6:ec:84:84:38:3e:6b:ec:cb:
                    05:31:e3:47:ee:df:95:c8:48:f8:0c:76:9f:a5:cd:
                    da:77:5c:8a:e5:4b:61:b4:bc:3c:7e:3c:3c:2c:ef:
                    62:54:ff:12:a5:4b:68:af:c8:2b:10:03:dd:f6:f9:
                    ea:0e:ad:e7:f0:a3:05:ae:54:cb:39:5f:40:22:8e:
                    a4:ba:1d:74:96:06:03:b5:5d:29:6b:67:82:6c:f8:
                    fb:4d:99:ae:b2:65:38:9f:5c:b7:4c:81:f9:91:b2:
                    2e:b8:36:32:3a:a8:b1:c2:60:d3:cb:96:38:36:91:
                    54:54:53:d2:81:dd:1b:71:76:2c:94:33:64:da:84:
                    4a:33:30:0a:bd:df:12:50:fc:97:ee:30:ed:3d:f2:
                    0c:6d:9e:8b:08:8f:be:e5:17:1b:d9:28:9d:4d:fc:
                    cf:ed:75:9e:55:2f:1a:7b:ba:a2:88:6a:16:2e:54:
                    1b:63:cb:07:0b:00:39:3e:97:9d:95:d8:c7:6a:33:
                    d7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:08:2D:04:24:A2:7C:4C:61:25:F7:FE:3C:84:0B:86:72:FF:42:10
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7325b5c8-c5a3-498a-9164-530c63b89822.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.38.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         28:0e:c7:5c:69:99:48:71:6d:af:ef:7b:56:b0:ab:9d:ed:12:
         d7:8e:77:c8:53:57:40:12:c5:0e:d6:e7:26:8f:ff:76:b7:ef:
         6d:ea:1a:8d:2e:8d:4e:68:58:e0:89:28:34:6f:73:c0:54:1e:
         6d:29:ca:a0:48:fa:2e:e7:9d:2e:98:e5:61:93:f3:4f:a2:77:
         d0:11:50:98:18:0e:6e:0b:04:f2:81:b0:af:41:09:c4:78:41:
         c7:c0:55:6e:66:90:ff:d1:03:62:0b:f2:0f:0c:ef:90:59:3f:
         08:52:66:8a:7e:37:49:6b:2a:92:76:fc:e4:4e:6a:27:38:cf:
         4e:4f:3c:4a:83:a6:64:51:6a:1c:0f:07:01:13:38:32:8f:9f:
         d0:22:4d:03:f6:53:7c:2e:0f:ca:ce:22:60:64:a3:61:72:e0:
         d0:1e:ec:b8:73:3a:c6:d3:98:e4:65:fd:cd:24:ab:d5:26:79:
         b3:0d:0b:49:8d:b3:1c:83:2d:b7:15:64:2c:c6:fd:a0:5e:8e:
         7e:7d:81:fc:b8:19:77:c3:e2:d0:a6:84:a8:4b:02:18:8d:95:
         bd:00:67:bf:70:4b:af:84:f2:25:e2:14:44:7e:c9:17:71:91:
         65:70:51:53:21:6d:87:b6:15:3c:39:8d:bb:2a:54:3a:e3:4e:
         0f:83:54:fd
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUQ5Im8X/t/XBdpNBwmAVOvGLUGqIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDExMDA0MjQyWhcNMjUxMTE1MjM1OTU5
WjB6MUkwRwYDVQQFE0A4ZDhmMDRlODhjMTViMzU0ZmZmN2M2N2Y4YWIyNjg4ZjNl
ZDNiNDA2MjQwMDNkOTI3YmE3M2E4MDhjMGQyY2JmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDdzJRo2PndpzjjuufNYV1ymTApS9OLQtfu6LFNGIFiYd0Z
tD1Ved1oVnGWbbGGu8Yn8eSC6yHp7ON2O7J6qiQA7dbshIQ4PmvsywUx40fu35XI
SPgMdp+lzdp3XIrlS2G0vDx+PDws72JU/xKlS2ivyCsQA932+eoOrefwowWuVMs5
X0AijqS6HXSWBgO1XSlrZ4Js+PtNma6yZTifXLdMgfmRsi64NjI6qLHCYNPLljg2
kVRUU9KB3RtxdiyUM2TahEozMAq93xJQ/JfuMO098gxtnosIj77lFxvZKJ1N/M/t
dZ5VLxp7uqKIahYuVBtjywcLADk+l52V2MdqM9fTAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUFggtBCSifExhJff+PIQLhnL/QhAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzczMjViNWM4LWM1YTMtNDk4YS05MTY0LTUzMGM2M2I4OTgyMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAoJjANBgkqhkiG9w0BAQsFAAOCAQEAKA7HXGmZSHFtr+97VrCrne0S1453
yFNXQBLFDtbnJo//drfvbeoajS6NTmhY4IkoNG9zwFQebSnKoEj6LuedLpjlYZPz
T6J30BFQmBgObgsE8oGwr0EJxHhBx8BVbmaQ/9EDYgvyDwzvkFk/CFJmin43SWsq
knb85E5qJzjPTk88SoOmZFFqHA8HARM4Mo+f0CJNA/ZTfC4Pys4iYGSjYXLg0B7s
uHM6xtOY5GX9zSSr1SZ5sw0LSY2zHIMttxVkLMb9oF6Ofn2B/LgZd8Pi0KaEqEsC
GI2VvQBnv3BLr4TyJeIURH7JF3GRZXBRUyFth7YVPDmNuypUOuNOD4NU/Q==
-----END CERTIFICATE-----