Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4cf5248-8548-403a-a8c0-653a5df9191e.roa
File:                     a4cf5248-8548-403a-a8c0-653a5df9191e.roa (raw, json)
Hash identifier:          1mWJbvs4e0GOWhFN34t/OuCP5FVinCQQFThqKjvLXpA=
Subject key identifier:   B0:C5:26:90:17:BF:46:90:22:5B:5A:28:D5:80:37:3E:41:3A:A1:DD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3FA8FA38C0F98125B4D2768C7DE5DF1A71C781F0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4cf5248-8548-403a-a8c0-653a5df9191e.roa
Signing time:             Wed 08 Oct 2025 00:22:11 +0000
ROA not before:           Wed 08 Oct 2025 00:22:11 +0000
ROA not after:            Wed 12 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.92.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a8:fa:38:c0:f9:81:25:b4:d2:76:8c:7d:e5:df:1a:71:c7:81:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  8 00:22:11 2025 GMT
            Not After : Nov 12 23:59:59 2025 GMT
        Subject: serialNumber=5694f4cc0da3e74635edf66542741ad902cd9a4d3c5bd9fe8ad3fa9e47553424, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b1:45:9b:76:45:d1:af:62:1d:43:0f:a6:3a:
                    fc:e4:ef:2f:fd:80:42:e0:1a:30:31:cc:7a:f8:a1:
                    63:00:83:16:1c:76:c1:e3:eb:5f:02:34:05:c6:be:
                    92:93:d2:6c:63:5c:f3:97:9c:41:6f:41:f3:c6:07:
                    bb:9c:a6:49:4c:06:a5:44:75:c6:30:d8:5a:90:e2:
                    49:82:7b:4a:2e:9c:af:56:e0:46:7f:d1:12:12:1a:
                    8c:f9:f2:0a:74:b2:1d:ee:6a:0d:e6:a0:b2:6f:d2:
                    a0:40:a1:25:ea:ee:69:89:9f:f2:f4:a2:55:21:4c:
                    a0:07:7d:c7:dc:03:50:f8:8a:dd:4d:b5:ef:68:2b:
                    7c:cd:eb:82:52:73:39:ab:90:91:05:ed:02:ff:e0:
                    f9:e0:3e:5a:a5:3e:8d:a3:dc:a9:82:f5:97:f4:82:
                    26:8d:b1:16:b4:70:86:3b:9c:71:8e:74:02:05:5c:
                    f5:e9:4a:eb:cc:98:b1:11:be:b7:26:14:4a:b6:b7:
                    61:81:c7:9b:a8:13:20:cd:f5:f3:d3:58:96:8d:28:
                    61:b6:8f:87:ef:48:1a:e9:a4:35:56:f6:65:f6:73:
                    dd:c9:17:cb:f0:c2:bf:86:62:e3:ff:73:95:0e:dc:
                    18:1b:06:eb:fb:54:08:80:ab:5f:51:96:11:c2:8f:
                    52:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C5:26:90:17:BF:46:90:22:5B:5A:28:D5:80:37:3E:41:3A:A1:DD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4cf5248-8548-403a-a8c0-653a5df9191e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.92.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         73:3e:1c:c0:e6:6b:28:71:1c:a5:8b:ab:45:85:5f:05:af:13:
         31:b3:22:f2:a3:60:93:5b:f8:01:41:7e:55:1e:0c:ae:1d:df:
         c3:a6:61:31:04:92:f7:87:0e:c3:c2:d0:55:f2:4b:ca:48:00:
         08:d0:14:95:d2:18:f0:ad:39:e5:f6:26:0a:de:b5:9c:8d:23:
         5d:8c:fd:49:38:95:1a:4a:a1:5b:40:c3:0c:33:c9:b7:16:34:
         5f:90:17:c7:ab:9e:bb:34:ea:df:ad:75:e8:89:bd:88:d6:08:
         a7:70:a2:db:cc:b1:51:51:4b:51:fc:40:82:5f:03:fe:1e:cd:
         a7:8e:e3:df:f2:8b:ed:ec:d4:50:89:50:a4:62:e1:c3:e4:e9:
         dc:fd:ff:cb:db:80:32:6a:f2:50:c0:92:29:ed:0d:e4:75:11:
         d3:83:cd:fb:14:49:bb:0a:d2:7c:d5:a2:c6:f7:12:9b:71:c8:
         01:d4:ee:45:84:41:99:f7:8b:72:9e:30:54:57:b2:82:f5:21:
         2d:45:f1:70:3c:75:33:96:be:42:c3:c9:73:72:bb:cb:9a:8d:
         80:03:27:15:72:16:c1:20:01:cc:cf:19:15:ca:c9:da:2e:ad:
         f7:0f:de:c2:a3:16:45:c1:ee:f0:fb:7d:90:fe:a9:9c:e1:5a:
         c7:0a:9d:81
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUP6j6OMD5gSW00naMfeXfGnHHgfAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDA4MDAyMjExWhcNMjUxMTEyMjM1OTU5
WjB6MUkwRwYDVQQFE0A1Njk0ZjRjYzBkYTNlNzQ2MzVlZGY2NjU0Mjc0MWFkOTAy
Y2Q5YTRkM2M1YmQ5ZmU4YWQzZmE5ZTQ3NTUzNDI0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCasUWbdkXRr2IdQw+mOvzk7y/9gELgGjAxzHr4oWMAgxYc
dsHj618CNAXGvpKT0mxjXPOXnEFvQfPGB7ucpklMBqVEdcYw2FqQ4kmCe0ounK9W
4EZ/0RISGoz58gp0sh3uag3moLJv0qBAoSXq7mmJn/L0olUhTKAHfcfcA1D4it1N
te9oK3zN64JSczmrkJEF7QL/4PngPlqlPo2j3KmC9Zf0giaNsRa0cIY7nHGOdAIF
XPXpSuvMmLERvrcmFEq2t2GBx5uoEyDN9fPTWJaNKGG2j4fvSBrppDVW9mX2c93J
F8vwwr+GYuP/c5UO3BgbBuv7VAiAq19RlhHCj1JxAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUsMUmkBe/RpAiW1oo1YA3PkE6od0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2E0Y2Y1MjQ4LTg1NDgtNDAzYS1hOGMwLTY1M2E1ZGY5MTkxZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4XDANBgkqhkiG9w0BAQsFAAOCAQEAcz4cwOZrKHEcpYurRYVfBa8TMbMi
8qNgk1v4AUF+VR4Mrh3fw6ZhMQSS94cOw8LQVfJLykgACNAUldIY8K055fYmCt61
nI0jXYz9STiVGkqhW0DDDDPJtxY0X5AXx6ueuzTq36116Im9iNYIp3Ci28yxUVFL
UfxAgl8D/h7Np47j3/KL7ezUUIlQpGLhw+Tp3P3/y9uAMmryUMCSKe0N5HUR04PN
+xRJuwrSfNWixvcSm3HIAdTuRYRBmfeLcp4wVFeygvUhLUXxcDx1M5a+QsPJc3K7
y5qNgAMnFXIWwSABzM8ZFcrJ2i6t9w/ewqMWRcHu8Pt9kP6pnOFaxwqdgQ==
-----END CERTIFICATE-----