Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3d5bebf-09af-4f01-bd8d-6ac74c0e8379.roa
File:                     a3d5bebf-09af-4f01-bd8d-6ac74c0e8379.roa (raw, json)
Hash identifier:          WFHhXtwpeDADl+Zjww1zDDIucOrk27kcVtSqdka77A8=
Subject key identifier:   7C:F6:19:FB:A8:27:1B:36:10:1D:B3:A1:20:00:FF:27:C0:F1:BE:58
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1D203001970CC0C2907FB1CC6CBEC3C9C9A66ED9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3d5bebf-09af-4f01-bd8d-6ac74c0e8379.roa
Signing time:             Sat 11 Oct 2025 00:38:41 +0000
ROA not before:           Sat 11 Oct 2025 00:38:41 +0000
ROA not after:            Sat 15 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        216.246.195.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:20:30:01:97:0c:c0:c2:90:7f:b1:cc:6c:be:c3:c9:c9:a6:6e:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 11 00:38:41 2025 GMT
            Not After : Nov 15 23:59:59 2025 GMT
        Subject: serialNumber=cb318ddabbbaf9de1ba1b41cbfc11b6c3a63e11bbfaa9a76ae10fd415c744d35, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9a:82:1c:3a:07:52:b6:2b:63:76:59:3a:ee:
                    c5:a0:6f:e7:5e:ea:0d:de:76:66:6f:da:0f:a5:ef:
                    5f:21:5d:23:7b:0a:c3:51:83:a3:7a:4e:ac:b9:99:
                    b1:34:ff:59:9f:00:d8:37:71:da:68:df:3d:2d:00:
                    c3:9a:d1:8f:61:9d:0a:9b:52:11:0b:4c:5c:25:ab:
                    55:dd:f2:59:6a:69:e7:da:3c:ab:41:e9:4c:e4:4c:
                    ba:b3:8d:0b:c8:b6:27:49:f4:bc:ce:08:6b:06:42:
                    2d:72:9d:44:ae:19:5b:f2:4e:1c:55:d6:dc:9b:e9:
                    74:f2:31:08:2a:ba:2a:bb:d9:2f:ad:fb:cf:bb:01:
                    84:42:fb:84:14:ac:de:c8:a4:38:41:0a:f4:98:2e:
                    05:e4:90:6e:c2:0c:55:e8:c7:75:54:90:4e:7d:65:
                    73:ab:ba:33:29:6f:ed:df:38:0e:48:68:b9:ad:95:
                    ae:17:61:eb:36:52:fb:61:71:5a:50:e4:b6:85:1c:
                    4f:04:c4:0a:0d:b8:51:d6:26:a0:17:83:18:d0:65:
                    c9:5f:21:d6:e2:04:a3:88:fc:92:3d:43:eb:b7:a8:
                    74:bc:d6:44:36:89:f5:10:37:db:d6:e2:56:7a:0f:
                    8d:c6:71:14:9e:c7:02:e8:bd:d8:03:32:cc:7c:b5:
                    16:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F6:19:FB:A8:27:1B:36:10:1D:B3:A1:20:00:FF:27:C0:F1:BE:58
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3d5bebf-09af-4f01-bd8d-6ac74c0e8379.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:fd:29:bb:a1:05:48:37:0e:52:f4:85:59:b8:2e:86:a3:ff:
         92:75:7e:68:03:ca:ff:2c:6d:a3:89:b0:72:be:01:0b:f1:d1:
         64:dd:78:8a:8e:85:1a:a2:e9:4c:8b:c0:6f:7e:c5:0a:fb:aa:
         f9:38:74:9c:88:5b:c9:7d:3f:0a:ad:b4:31:17:64:b5:73:49:
         b7:f7:aa:b2:7e:c8:9e:cd:e9:69:b2:75:fd:ef:f2:3c:ad:31:
         07:2a:8a:26:06:17:23:ff:36:78:dd:37:5c:50:8d:5e:85:1b:
         53:38:2c:be:21:80:27:bb:71:d8:61:81:51:1a:5f:3a:67:27:
         c0:1f:07:49:d6:c3:41:79:b9:fb:7f:3e:67:81:49:96:4c:5f:
         84:0d:44:59:86:65:54:ab:46:76:af:8a:e0:9b:14:88:d0:54:
         89:d8:e5:97:64:dd:00:b1:8b:ce:ad:bc:bc:a6:4b:26:c4:45:
         f6:84:7c:f4:97:68:f1:74:b1:be:ea:8f:97:55:9f:91:12:42:
         15:c3:eb:38:02:72:ad:7f:79:4c:50:14:8a:2b:7d:33:9a:9e:
         7a:1b:9a:50:13:45:0b:a9:16:af:b4:03:fe:d3:c0:ba:a0:37:
         47:cc:f7:f5:fe:f7:46:49:ba:33:bc:c8:b8:e9:16:1c:36:39:
         d6:1c:f6:35
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUHSAwAZcMwMKQf7HMbL7DycmmbtkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDExMDAzODQxWhcNMjUxMTE1MjM1OTU5
WjB6MUkwRwYDVQQFE0BjYjMxOGRkYWJiYmFmOWRlMWJhMWI0MWNiZmMxMWI2YzNh
NjNlMTFiYmZhYTlhNzZhZTEwZmQ0MTVjNzQ0ZDM1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDgmoIcOgdStitjdlk67sWgb+de6g3edmZv2g+l718hXSN7
CsNRg6N6Tqy5mbE0/1mfANg3cdpo3z0tAMOa0Y9hnQqbUhELTFwlq1Xd8llqaefa
PKtB6UzkTLqzjQvItidJ9LzOCGsGQi1ynUSuGVvyThxV1tyb6XTyMQgquiq72S+t
+8+7AYRC+4QUrN7IpDhBCvSYLgXkkG7CDFXox3VUkE59ZXOrujMpb+3fOA5IaLmt
la4XYes2UvthcVpQ5LaFHE8ExAoNuFHWJqAXgxjQZclfIdbiBKOI/JI9Q+u3qHS8
1kQ2ifUQN9vW4lZ6D43GcRSexwLovdgDMsx8tRafAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUfPYZ+6gnGzYQHbOhIAD/J8DxvlgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2EzZDViZWJmLTA5YWYtNGYwMS1iZDhkLTZhYzc0YzBlODM3OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADY9sMwDQYJKoZIhvcNAQELBQADggEBAD79KbuhBUg3DlL0hVm4Loaj/5J1
fmgDyv8sbaOJsHK+AQvx0WTdeIqOhRqi6UyLwG9+xQr7qvk4dJyIW8l9PwqttDEX
ZLVzSbf3qrJ+yJ7N6Wmydf3v8jytMQcqiiYGFyP/NnjdN1xQjV6FG1M4LL4hgCe7
cdhhgVEaXzpnJ8AfB0nWw0F5uft/PmeBSZZMX4QNRFmGZVSrRnaviuCbFIjQVInY
5Zdk3QCxi86tvLymSybERfaEfPSXaPF0sb7qj5dVn5ESQhXD6zgCcq1/eUxQFIor
fTOannobmlATRQupFq+0A/7TwLqgN0fM9/X+90ZJujO8yLjpFhw2OdYc9jU=
-----END CERTIFICATE-----