Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a39ad442-6343-4bbf-8019-22387be1de5c.roa
File:                     a39ad442-6343-4bbf-8019-22387be1de5c.roa (raw, json)
Hash identifier:          reNdRYr+QFmPkIc+Np2fvY0kVpiYKENqgkFYRT+LA4g=
Subject key identifier:   1C:5C:2F:34:A7:FC:F1:AD:BD:F3:4D:74:3B:70:0A:93:DB:5B:90:E3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       38D6C0804C391D78D9AAE8B4A1A8993C347EB3AA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a39ad442-6343-4bbf-8019-22387be1de5c.roa
Signing time:             Fri 17 Oct 2025 00:51:14 +0000
ROA not before:           Fri 17 Oct 2025 00:51:14 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        157.175.32.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d6:c0:80:4c:39:1d:78:d9:aa:e8:b4:a1:a8:99:3c:34:7e:b3:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 00:51:14 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=8c7d0634cc03a370a1aab2f73843b0b108d80e783ae87ff4ead83a2d022c468f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:12:8f:06:99:a0:b8:64:83:3d:d4:a7:ae:a1:
                    40:8a:49:64:28:cd:8d:8b:f2:dd:10:64:af:89:72:
                    81:9e:a6:5c:41:5b:c5:a3:af:da:9f:43:0a:81:63:
                    b0:df:35:21:02:0d:a2:88:93:67:a3:7b:b0:37:99:
                    38:a5:99:42:14:ab:37:dc:a2:72:e9:3f:a9:49:88:
                    1d:c5:de:91:bc:1d:80:12:61:6f:30:8e:3c:49:06:
                    a8:0f:5e:13:fb:91:cd:ed:46:aa:17:bf:60:f7:b3:
                    7f:34:f5:ca:64:21:00:29:64:2c:f9:c2:33:b1:09:
                    dd:99:b4:b9:4b:fa:b4:fa:92:32:b1:79:60:21:8a:
                    73:47:df:5c:d9:d8:01:88:d4:58:99:74:64:60:48:
                    0b:35:f4:79:20:ce:b1:4e:8e:d1:9e:af:34:e6:15:
                    43:fc:46:0b:de:3a:f3:e9:e2:cb:24:e9:b1:67:fb:
                    fa:9f:c8:a5:f0:e2:e2:57:3a:3f:08:0f:4f:49:e7:
                    83:e8:a3:eb:3e:af:62:82:09:21:0e:4b:9e:f0:e9:
                    90:7e:14:d7:43:f0:62:63:67:8b:d9:ad:2b:b1:70:
                    05:29:66:ca:15:07:be:eb:32:49:d6:5b:70:d4:ee:
                    85:6e:78:be:1b:31:b7:be:a5:2d:f8:aa:19:a9:9b:
                    56:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:5C:2F:34:A7:FC:F1:AD:BD:F3:4D:74:3B:70:0A:93:DB:5B:90:E3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a39ad442-6343-4bbf-8019-22387be1de5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.175.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2a:d0:42:7f:22:c9:68:b2:fd:37:f2:1d:38:0f:9a:f7:17:3e:
         bc:30:6e:db:80:ee:1e:84:ff:6a:6b:15:46:7c:80:9b:db:80:
         a8:0f:cd:c1:f7:fb:cb:87:3b:d0:04:4a:cc:0a:18:4f:73:c0:
         11:20:a6:3b:b7:01:fb:96:f2:7d:36:3b:1b:83:47:47:04:53:
         bb:eb:5c:8a:61:0e:91:31:ac:07:b2:b9:23:e7:5c:34:b4:71:
         b6:55:48:17:d3:24:4f:6e:f3:73:47:c4:0d:a6:ca:79:df:23:
         3b:e3:0a:73:f5:fe:14:83:0a:9b:65:75:e5:8a:ed:9a:00:ea:
         b7:72:fb:b0:52:62:01:37:fe:e4:28:5d:6e:e8:d3:03:7b:df:
         f3:4d:10:45:be:61:96:3a:83:00:db:f3:01:3a:70:d0:d4:90:
         a1:27:b7:db:68:2f:f5:63:d1:21:ed:8d:42:2a:9d:ca:08:f4:
         20:64:23:cf:3e:1e:57:bd:3c:7d:8d:f0:93:0e:f2:92:3d:a0:
         1c:b2:be:09:9f:b9:7b:3a:bc:f9:bb:05:b7:0f:50:4c:0c:31:
         74:95:08:12:10:58:23:57:2a:68:86:a7:6c:bc:39:5b:14:2f:
         66:92:85:da:15:28:b5:ff:9f:0c:18:59:44:35:b6:0f:9a:41:
         af:b4:e7:57
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUONbAgEw5HXjZqui0oaiZPDR+s6owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE3MDA1MTE0WhcNMjUxMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A4YzdkMDYzNGNjMDNhMzcwYTFhYWIyZjczODQzYjBiMTA4
ZDgwZTc4M2FlODdmZjRlYWQ4M2EyZDAyMmM0NjhmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6Eo8GmaC4ZIM91KeuoUCKSWQozY2L8t0QZK+JcoGeplxB
W8Wjr9qfQwqBY7DfNSECDaKIk2eje7A3mTilmUIUqzfconLpP6lJiB3F3pG8HYAS
YW8wjjxJBqgPXhP7kc3tRqoXv2D3s3809cpkIQApZCz5wjOxCd2ZtLlL+rT6kjKx
eWAhinNH31zZ2AGI1FiZdGRgSAs19HkgzrFOjtGerzTmFUP8RgveOvPp4ssk6bFn
+/qfyKXw4uJXOj8ID09J54Poo+s+r2KCCSEOS57w6ZB+FNdD8GJjZ4vZrSuxcAUp
ZsoVB77rMknWW3DU7oVueL4bMbe+pS34qhmpm1bNAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUHFwvNKf88a298010O3AKk9tbkOMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2EzOWFkNDQyLTYzNDMtNGJiZi04MDE5LTIyMzg3YmUxZGU1Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAWdryAwDQYJKoZIhvcNAQELBQADggEBACrQQn8iyWiy/TfyHTgPmvcXPrww
btuA7h6E/2prFUZ8gJvbgKgPzcH3+8uHO9AESswKGE9zwBEgpju3AfuW8n02OxuD
R0cEU7vrXIphDpExrAeyuSPnXDS0cbZVSBfTJE9u83NHxA2mynnfIzvjCnP1/hSD
CptldeWK7ZoA6rdy+7BSYgE3/uQoXW7o0wN73/NNEEW+YZY6gwDb8wE6cNDUkKEn
t9toL/Vj0SHtjUIqncoI9CBkI88+Hle9PH2N8JMO8pI9oByyvgmfuXs6vPm7BbcP
UEwMMXSVCBIQWCNXKmiGp2y8OVsUL2aShdoVKLX/nwwYWUQ1tg+aQa+051c=
-----END CERTIFICATE-----