Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa62e6b5-a40e-41d2-ac73-5fe6ebcd9ba7.roa
File:                     aa62e6b5-a40e-41d2-ac73-5fe6ebcd9ba7.roa (raw, json)
Hash identifier:          dnwf985O2GO5IudZXLxLU7kP25eBCTKatzQTlVeT9D0=
Subject key identifier:   17:83:E8:95:AD:6C:80:5B:AF:4E:77:1C:86:EF:24:11:AD:91:DF:65
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4DB5B3CBF7E74ECC8CD9D64B0D5BF08CD54604F8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa62e6b5-a40e-41d2-ac73-5fe6ebcd9ba7.roa
Signing time:             Tue 14 Oct 2025 17:42:06 +0000
ROA not before:           Tue 14 Oct 2025 17:42:06 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        71.152.59.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b5:b3:cb:f7:e7:4e:cc:8c:d9:d6:4b:0d:5b:f0:8c:d5:46:04:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 17:42:06 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=55086faaef90435e99c62ccde8775b34f6110e3bc78c7a843de31d6581499f52, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d5:4e:d1:ad:eb:9d:7e:6e:bd:12:e1:81:43:
                    2b:11:41:fc:9c:37:01:e8:74:db:58:08:f4:68:a2:
                    c1:a4:5f:67:0a:a7:d0:a6:51:53:0c:45:a4:73:64:
                    61:f1:77:13:12:d1:d7:25:0e:fa:93:91:f7:d1:4d:
                    6a:8e:0e:32:d9:12:84:65:67:d0:02:02:3c:22:50:
                    41:21:ca:ce:b0:f3:49:d0:e5:a3:81:b3:46:64:28:
                    37:a5:6c:4b:47:6e:ef:b1:3a:14:3d:86:13:2a:41:
                    13:5d:aa:d9:47:bd:85:ed:5f:7d:87:61:db:52:ee:
                    5d:7b:33:b8:e4:6f:18:5a:39:e8:00:f1:92:bf:b5:
                    e1:70:58:43:27:9f:b0:e6:99:00:da:3f:af:c5:57:
                    dd:cb:71:33:ee:0a:55:d9:b1:ab:fb:3c:cf:62:9b:
                    a4:2e:52:9e:92:ca:35:9e:11:cc:66:93:26:ce:b2:
                    f7:eb:f1:97:32:7e:90:26:90:a9:7a:74:88:9e:5b:
                    5f:21:20:e7:7b:46:23:2a:4b:46:dd:d5:60:81:bf:
                    8e:ea:c0:8c:cd:7e:eb:2e:43:02:5d:38:ef:90:69:
                    a9:0d:75:43:8a:a5:65:f1:76:20:57:a8:49:5b:56:
                    33:89:11:72:2c:34:54:52:0d:f5:17:fa:19:30:eb:
                    99:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:83:E8:95:AD:6C:80:5B:AF:4E:77:1C:86:EF:24:11:AD:91:DF:65
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa62e6b5-a40e-41d2-ac73-5fe6ebcd9ba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.152.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:3e:76:ae:65:49:e8:04:f9:b3:39:28:f6:4a:9a:9d:3f:f9:
         c5:99:5f:be:93:17:ce:2b:75:1a:f9:1b:f7:b5:2f:f1:e5:bb:
         0f:de:f0:29:3e:ae:11:87:ec:9e:08:30:80:b7:2a:88:4d:b0:
         11:40:86:70:d4:0e:f5:e8:59:df:c4:e2:ae:18:8e:10:be:fc:
         64:06:b4:2c:19:5d:4b:9c:60:4d:62:62:46:0e:0d:7e:78:59:
         75:29:3c:d2:a1:91:ad:ae:b1:96:d0:0d:1f:91:0f:9f:f2:1c:
         a2:8d:df:a4:d7:fb:35:a4:9d:ef:e9:f9:a1:c5:5f:fc:e6:dd:
         52:f1:4d:96:d9:fd:a6:4b:11:6d:63:e8:72:1e:8d:e2:02:86:
         ab:0f:c2:67:a0:35:6e:9a:d7:03:a8:4e:3d:ef:2f:a6:71:40:
         78:a7:c3:64:39:1a:44:d3:ff:0a:a6:f3:9f:85:5f:d6:88:e5:
         c9:a7:2a:e1:e8:08:a3:fb:83:b8:5a:46:3a:6a:a9:a3:60:fa:
         d1:74:ad:f5:31:fb:2d:92:ab:fa:7d:8a:94:aa:8d:03:3c:02:
         a6:49:3b:0c:32:fa:fa:f6:f3:b3:45:29:4f:04:4c:f3:12:93:
         b0:44:e2:29:9a:0e:b3:67:44:33:d3:1c:51:f6:00:6f:b2:7f:
         10:70:e4:c1
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUTbWzy/fnTsyM2dZLDVvwjNVGBPgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MTc0MjA2WhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A1NTA4NmZhYWVmOTA0MzVlOTljNjJjY2RlODc3NWIzNGY2
MTEwZTNiYzc4YzdhODQzZGUzMWQ2NTgxNDk5ZjUyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCi1U7Rreudfm69EuGBQysRQfycNwHodNtYCPRoosGkX2cK
p9CmUVMMRaRzZGHxdxMS0dclDvqTkffRTWqODjLZEoRlZ9ACAjwiUEEhys6w80nQ
5aOBs0ZkKDelbEtHbu+xOhQ9hhMqQRNdqtlHvYXtX32HYdtS7l17M7jkbxhaOegA
8ZK/teFwWEMnn7DmmQDaP6/FV93LcTPuClXZsav7PM9im6QuUp6SyjWeEcxmkybO
svfr8ZcyfpAmkKl6dIieW18hIOd7RiMqS0bd1WCBv47qwIzNfusuQwJdOO+QaakN
dUOKpWXxdiBXqElbVjOJEXIsNFRSDfUX+hkw65lhAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUF4Pola1sgFuvTncchu8kEa2R32UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FhNjJlNmI1LWE0MGUtNDFkMi1hYzczLTVmZTZlYmNkOWJhNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABHmDswDQYJKoZIhvcNAQELBQADggEBAJU+dq5lSegE+bM5KPZKmp0/+cWZ
X76TF84rdRr5G/e1L/Hluw/e8Ck+rhGH7J4IMIC3KohNsBFAhnDUDvXoWd/E4q4Y
jhC+/GQGtCwZXUucYE1iYkYODX54WXUpPNKhka2usZbQDR+RD5/yHKKN36TX+zWk
ne/p+aHFX/zm3VLxTZbZ/aZLEW1j6HIejeIChqsPwmegNW6a1wOoTj3vL6ZxQHin
w2Q5GkTT/wqm85+FX9aI5cmnKuHoCKP7g7haRjpqqaNg+tF0rfUx+y2Sq/p9ipSq
jQM8AqZJOwwy+vr287NFKU8ETPMSk7BE4imaDrNnRDPTHFH2AG+yfxBw5ME=
-----END CERTIFICATE-----