Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91001fb5-7e82-4774-8dd3-3dcc376a6060.roa
File:                     91001fb5-7e82-4774-8dd3-3dcc376a6060.roa (raw, json)
Hash identifier:          RmcVxLbzZQRnLW6fpFCHNH94z/Q535vSAJhscX1HdLc=
Subject key identifier:   4F:A6:45:0B:A7:46:09:D4:D8:59:C4:F3:16:EE:E6:F8:F5:AF:A1:55
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       32C3293C1F50930053A04E011E2CC8D035154700
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91001fb5-7e82-4774-8dd3-3dcc376a6060.roa
Signing time:             Sat 18 Oct 2025 04:20:10 +0000
ROA not before:           Sat 18 Oct 2025 04:20:10 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.48.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:c3:29:3c:1f:50:93:00:53:a0:4e:01:1e:2c:c8:d0:35:15:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 04:20:10 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=6614a6d31c16cbad9b08a5e141a567fe0d8774f7deb85b691265a462d60f9bff, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:04:ae:9d:b9:77:50:da:ef:2e:1b:b6:a0:ae:
                    38:51:40:60:d2:ca:68:19:db:25:66:9e:7e:0a:3a:
                    69:2a:83:50:81:64:35:4d:7e:59:56:b6:25:d0:d1:
                    01:c5:3f:38:27:25:83:f2:98:c8:42:15:19:3c:72:
                    43:ba:88:6a:67:f7:cc:be:4a:bd:8d:d9:c5:2b:7e:
                    38:72:9e:9c:b5:06:da:63:ad:db:ff:8a:c4:48:2b:
                    f3:69:a4:76:96:a8:80:b8:8a:b9:bd:cd:4d:65:9c:
                    b6:bc:a4:03:dd:fa:79:00:1f:c9:6d:50:0b:a1:92:
                    b7:ff:91:09:f4:c6:6f:75:d9:f1:8f:7f:27:cb:14:
                    18:f2:4a:88:b2:7f:94:58:e9:c4:ee:74:7c:11:15:
                    43:d5:26:46:a4:b5:be:38:72:f9:a6:d6:14:cf:44:
                    76:e1:b8:68:a0:c2:a4:91:4b:93:68:bc:73:55:24:
                    7a:5c:0a:d5:99:1f:6f:b1:f9:37:01:3a:26:66:65:
                    68:10:94:f8:6f:61:d4:f4:f6:c3:9e:dd:61:9b:dc:
                    eb:a6:4d:5d:1a:fe:90:4b:8a:e5:ea:ae:10:26:42:
                    36:ac:11:5b:a6:c8:3a:75:be:b1:6f:bf:00:77:8d:
                    3e:27:68:8f:81:6a:e9:fb:7c:b5:3f:f5:37:0a:ff:
                    c3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A6:45:0B:A7:46:09:D4:D8:59:C4:F3:16:EE:E6:F8:F5:AF:A1:55
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91001fb5-7e82-4774-8dd3-3dcc376a6060.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:4c:a5:e8:d7:d5:c8:c8:c6:76:0f:83:23:bc:d7:ea:64:8a:
         da:e9:7e:45:a6:a2:6a:f5:ad:02:34:25:a2:2c:45:af:81:8c:
         11:43:8b:a9:7d:bb:47:0f:c9:39:f5:00:e9:9d:a7:13:6c:0c:
         f2:dc:be:df:77:7a:75:84:d9:9a:23:7b:77:fe:d1:65:31:ca:
         47:8c:47:d8:20:e1:a7:22:11:34:7b:a3:29:b1:f9:1f:14:b1:
         b7:30:26:26:46:a1:01:11:d1:2d:c9:c8:dd:25:2a:6d:95:4a:
         04:8f:13:bb:81:5e:c4:2b:86:46:7b:c2:a7:e7:19:f4:cb:80:
         12:8e:31:c4:87:86:47:22:42:f2:f0:48:e0:5c:0f:87:f5:1c:
         c3:1f:20:9e:1b:4d:8c:25:a9:3e:19:b3:da:26:a1:76:6b:59:
         ef:81:a2:fd:cc:c5:d9:69:ff:50:dd:ff:cf:ac:a3:54:5b:d4:
         70:95:b4:02:3a:92:f8:73:ae:f0:5d:e5:d9:c8:f1:3b:17:4b:
         75:45:e0:1e:51:56:2e:6c:fb:fc:21:ab:4d:26:a6:2c:2c:45:
         12:bc:e6:38:af:bd:fa:80:34:65:e5:3f:75:db:fd:19:75:20:
         a6:19:6d:e9:c9:1d:4e:e0:2e:10:d0:81:e4:4a:e1:5c:94:09:
         7a:13:d0:31
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUMsMpPB9QkwBToE4BHizI0DUVRwAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDQyMDEwWhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A2NjE0YTZkMzFjMTZjYmFkOWIwOGE1ZTE0MWE1NjdmZTBk
ODc3NGY3ZGViODViNjkxMjY1YTQ2MmQ2MGY5YmZmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5BK6duXdQ2u8uG7agrjhRQGDSymgZ2yVmnn4KOmkqg1CB
ZDVNfllWtiXQ0QHFPzgnJYPymMhCFRk8ckO6iGpn98y+Sr2N2cUrfjhynpy1Btpj
rdv/isRIK/NppHaWqIC4irm9zU1lnLa8pAPd+nkAH8ltUAuhkrf/kQn0xm912fGP
fyfLFBjySoiyf5RY6cTudHwRFUPVJkaktb44cvmm1hTPRHbhuGigwqSRS5NovHNV
JHpcCtWZH2+x+TcBOiZmZWgQlPhvYdT09sOe3WGb3OumTV0a/pBLiuXqrhAmQjas
EVumyDp1vrFvvwB3jT4naI+Baun7fLU/9TcK/8NFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUT6ZFC6dGCdTYWcTzFu7m+PWvoVUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzkxMDAxZmI1LTdlODItNDc3NC04ZGQzLTNkY2MzNzZhNjA2MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJBCTAwDQYJKoZIhvcNAQELBQADggEBABZMpejX1cjIxnYPgyO81+pkitrp
fkWmomr1rQI0JaIsRa+BjBFDi6l9u0cPyTn1AOmdpxNsDPLcvt93enWE2Zoje3f+
0WUxykeMR9gg4aciETR7oymx+R8UsbcwJiZGoQER0S3JyN0lKm2VSgSPE7uBXsQr
hkZ7wqfnGfTLgBKOMcSHhkciQvLwSOBcD4f1HMMfIJ4bTYwlqT4Zs9omoXZrWe+B
ov3Mxdlp/1Dd/8+so1Rb1HCVtAI6kvhzrvBd5dnI8TsXS3VF4B5RVi5s+/whq00m
piwsRRK85jivvfqANGXlP3Xb/Rl1IKYZbenJHU7gLhDQgeRK4VyUCXoT0DE=
-----END CERTIFICATE-----