Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9efedb5e-e5a9-4c3f-bc39-369b3f0c2b65.roa
File:                     9efedb5e-e5a9-4c3f-bc39-369b3f0c2b65.roa (raw, json)
Hash identifier:          RDzu9L53cmfPYmo3VpkO+HILyUNd4537EUWyttu/GVk=
Subject key identifier:   74:CA:74:B5:15:4F:D7:5F:C5:B7:0C:8C:C6:75:85:32:2F:99:9A:B4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0A720E41B9AAF636AD93DB13B6E4497FBB4D7D73
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9efedb5e-e5a9-4c3f-bc39-369b3f0c2b65.roa
Signing time:             Fri 03 Oct 2025 00:42:15 +0000
ROA not before:           Fri 03 Oct 2025 00:42:15 +0000
ROA not after:            Fri 07 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        70.232.96.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:72:0e:41:b9:aa:f6:36:ad:93:db:13:b6:e4:49:7f:bb:4d:7d:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  3 00:42:15 2025 GMT
            Not After : Nov  7 23:59:59 2025 GMT
        Subject: serialNumber=dc434cd365cde059d641bce241b6ab1d352e5f62e77616be3e04828a86c7800b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:40:33:67:89:22:e4:cc:d3:cb:fa:1e:2e:1a:
                    d2:48:27:ad:dc:48:bc:9e:4d:8e:a6:58:83:ba:ee:
                    98:d5:1a:f3:2b:a0:6b:c5:1b:ab:f4:89:37:57:bb:
                    b2:fb:0e:3f:8f:75:6e:4f:d5:dd:55:2b:f6:fd:a4:
                    19:31:85:69:45:1c:90:c7:12:66:a7:1b:5d:f2:4d:
                    17:12:e8:98:26:53:da:f0:f1:7c:75:5b:33:04:8c:
                    c4:f2:a8:8d:f0:c0:66:9e:66:3b:dd:c3:3d:d3:8f:
                    16:b2:39:92:ad:e8:ce:bd:20:63:be:d6:45:d9:ba:
                    b8:46:87:28:86:5b:a0:28:f1:5a:76:25:7b:24:33:
                    26:2d:6b:2d:0b:cf:58:0d:af:90:ec:6b:73:c3:4f:
                    df:b6:b6:a7:9c:12:3b:78:11:5d:d4:d7:cf:cb:15:
                    a5:90:da:ed:4d:2f:a1:dd:f2:68:27:b8:3a:70:5d:
                    8a:ec:e5:f5:bd:9a:8f:2f:02:ee:b2:81:ee:a3:17:
                    67:88:96:f8:ba:eb:91:a5:18:f4:97:ed:c4:68:2e:
                    8f:a7:fd:9c:91:73:7c:87:fa:fd:7c:65:05:0e:2b:
                    eb:25:55:bb:7d:2a:21:d3:f2:b2:9e:46:46:97:5c:
                    fd:e4:c2:6d:da:00:78:71:10:4a:6b:19:12:71:d2:
                    ae:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CA:74:B5:15:4F:D7:5F:C5:B7:0C:8C:C6:75:85:32:2F:99:9A:B4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9efedb5e-e5a9-4c3f-bc39-369b3f0c2b65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.232.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5a:26:63:e6:3d:3f:83:a2:95:82:01:f4:25:38:bd:2c:19:f5:
         60:57:00:66:61:91:42:04:53:b8:b7:0b:e1:51:8f:59:6d:4a:
         62:83:71:3f:0f:e3:73:6d:5a:48:17:cb:45:77:41:30:23:b4:
         e7:b7:0e:0f:ea:af:d5:98:f7:6d:71:22:c0:79:a1:18:e7:89:
         da:30:68:09:33:7d:a5:d7:c7:86:2f:eb:08:b3:f6:3c:75:23:
         2e:af:47:80:8a:30:3d:14:8f:ac:12:64:75:3c:c4:bc:55:b3:
         41:31:ce:69:70:57:76:c8:6c:ea:43:f3:bd:0b:d6:0e:cb:80:
         29:f3:e0:63:07:83:e6:86:8d:07:5d:b5:84:4c:ca:cf:72:5e:
         6b:c7:34:14:85:7d:64:bd:a1:f2:d7:19:13:b5:60:24:e6:94:
         f7:0b:0a:8b:fd:62:26:24:0a:0e:cd:95:26:9b:f7:17:10:07:
         aa:1d:86:61:a2:aa:40:73:6e:56:d9:5f:f8:1f:d2:8c:b8:b1:
         a8:f6:9d:dc:60:e1:89:e2:fb:4c:98:ce:73:1f:65:9d:f1:e0:
         f6:dd:7d:8f:30:4e:88:16:ca:b4:14:9c:4f:c4:3e:44:cb:3b:
         13:1f:34:1c:06:31:5b:7e:6b:16:68:7f:3d:53:b5:0b:90:3e:
         4b:32:c9:bf
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUCnIOQbmq9jatk9sTtuRJf7tNfXMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDAzMDA0MjE1WhcNMjUxMTA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BkYzQzNGNkMzY1Y2RlMDU5ZDY0MWJjZTI0MWI2YWIxZDM1
MmU1ZjYyZTc3NjE2YmUzZTA0ODI4YTg2Yzc4MDBiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC3QDNniSLkzNPL+h4uGtJIJ63cSLyeTY6mWIO67pjVGvMr
oGvFG6v0iTdXu7L7Dj+PdW5P1d1VK/b9pBkxhWlFHJDHEmanG13yTRcS6JgmU9rw
8Xx1WzMEjMTyqI3wwGaeZjvdwz3TjxayOZKt6M69IGO+1kXZurhGhyiGW6Ao8Vp2
JXskMyYtay0Lz1gNr5Dsa3PDT9+2tqecEjt4EV3U18/LFaWQ2u1NL6Hd8mgnuDpw
XYrs5fW9mo8vAu6yge6jF2eIlvi665GlGPSX7cRoLo+n/ZyRc3yH+v18ZQUOK+sl
Vbt9KiHT8rKeRkaXXP3kwm3aAHhxEEprGRJx0q6tAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUdMp0tRVP11/FtwyMxnWFMi+ZmrQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzllZmVkYjVlLWU1YTktNGMzZi1iYzM5LTM2OWIzZjBjMmI2NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARG6GAwDQYJKoZIhvcNAQELBQADggEBAFomY+Y9P4OilYIB9CU4vSwZ9WBX
AGZhkUIEU7i3C+FRj1ltSmKDcT8P43NtWkgXy0V3QTAjtOe3Dg/qr9WY921xIsB5
oRjnidowaAkzfaXXx4Yv6wiz9jx1Iy6vR4CKMD0Uj6wSZHU8xLxVs0ExzmlwV3bI
bOpD870L1g7LgCnz4GMHg+aGjQddtYRMys9yXmvHNBSFfWS9ofLXGRO1YCTmlPcL
Cov9YiYkCg7NlSab9xcQB6odhmGiqkBzblbZX/gf0oy4saj2ndxg4Yni+0yYznMf
ZZ3x4PbdfY8wTogWyrQUnE/EPkTLOxMfNBwGMVt+axZofz1TtQuQPksyyb8=
-----END CERTIFICATE-----