Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c86bc9f9-dc6b-47eb-9431-aae70aaf54ea.roa
File:                     c86bc9f9-dc6b-47eb-9431-aae70aaf54ea.roa (raw, json)
Hash identifier:          ogO0khrMRDZDSlXLrJURgjpQHrFPsocwnlNl8tKHaKQ=
Subject key identifier:   68:A8:EC:97:85:AB:DC:6A:F0:BE:20:70:09:D9:2F:F7:33:D9:55:0D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4FA7D7460216A2E61645ABDF1256A9C9316495DD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c86bc9f9-dc6b-47eb-9431-aae70aaf54ea.roa
Signing time:             Sat 18 Oct 2025 02:40:58 +0000
ROA not before:           Sat 18 Oct 2025 02:40:58 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        23.20.0.0/14 maxlen: 14
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:a7:d7:46:02:16:a2:e6:16:45:ab:df:12:56:a9:c9:31:64:95:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 02:40:58 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=f60848e96c67e85a94f9f30f610b647e02d6554887c42d8f2233f8d36e4eaf63, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6c:ba:6c:3e:73:95:32:d6:77:e1:d5:a1:4b:
                    85:a4:0a:5b:34:33:d5:ad:8a:1d:16:5b:b5:cf:57:
                    28:35:17:8c:b3:a7:e8:d1:ab:b3:eb:47:c5:e5:64:
                    5b:fd:8b:d5:3e:2c:91:e9:c8:0b:2e:23:30:a7:4c:
                    1e:d5:a7:ed:24:d7:f1:6a:9b:48:2e:69:8a:9d:dc:
                    65:73:0b:c5:94:db:d8:66:30:44:7d:a7:5e:da:6f:
                    3b:82:f1:f2:34:4d:99:ab:fd:cd:e4:85:14:e7:d8:
                    30:44:59:b6:0d:b2:db:2a:fc:de:c3:ed:30:51:ae:
                    b1:16:c4:94:62:ad:14:46:25:c0:fc:6d:f2:9b:51:
                    6d:d3:58:d9:40:f0:2e:01:7b:6e:2b:d8:92:15:37:
                    4c:bb:cf:06:af:c9:0a:1c:0c:96:94:dd:2a:5f:d0:
                    42:82:96:1e:6e:4a:9f:0b:d8:3d:c9:3f:ec:4b:35:
                    c3:ed:6f:4a:86:8f:5d:d2:0d:0f:25:bc:50:2b:a6:
                    77:db:25:ed:c4:10:cf:cd:8e:10:7a:74:15:2e:c4:
                    d1:c5:66:60:0a:79:40:f4:a5:cc:ef:95:0d:a4:bf:
                    48:ee:66:f8:f0:cc:8a:f7:ca:00:63:94:35:7d:d5:
                    c1:ad:58:0b:1a:1f:79:c0:44:25:46:2a:26:a7:e2:
                    42:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A8:EC:97:85:AB:DC:6A:F0:BE:20:70:09:D9:2F:F7:33:D9:55:0D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c86bc9f9-dc6b-47eb-9431-aae70aaf54ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.20.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         a2:42:b3:f6:27:a2:18:e6:c8:e5:fc:74:d6:d3:04:4a:e8:42:
         9d:66:41:e6:8c:e3:12:e4:0f:4d:2f:65:39:64:18:e2:eb:53:
         7d:8e:66:c3:09:44:c8:dd:6d:e2:af:9d:60:6e:c1:19:4e:5e:
         8d:b4:16:f5:3f:ce:b4:e2:48:e9:76:30:8f:38:c0:3f:32:01:
         fc:3f:8d:5e:75:78:f7:31:e1:72:9c:50:96:10:08:fe:47:cc:
         c4:22:b3:00:da:8e:3b:c3:ea:be:57:6b:8a:65:e0:96:10:55:
         c4:87:64:d1:f2:8b:df:d6:59:31:a3:f5:a2:62:ce:d6:81:48:
         6f:72:eb:37:68:6c:00:95:dd:0b:b5:89:f1:af:3e:d3:70:c5:
         ed:43:5d:bc:dd:d7:33:78:4b:87:de:7d:7b:07:e6:08:b9:cf:
         d4:df:37:89:48:b8:85:5d:cf:5b:8e:1c:8e:c1:06:d3:05:f2:
         81:02:9c:65:13:dd:f7:39:09:42:f9:05:91:72:7c:62:96:48:
         2a:e9:2b:a8:27:f1:3d:64:bd:c3:cb:b6:36:17:36:83:b5:72:
         7a:52:7c:f9:6a:d0:5e:4b:3f:3b:c1:4d:55:7b:55:4c:32:9c:
         cb:7d:e9:cb:a6:72:de:48:45:54:e0:91:c0:2e:d3:be:1f:18:
         6f:5b:7b:b6
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUT6fXRgIWouYWRavfElapyTFkld0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDI0MDU4WhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BmNjA4NDhlOTZjNjdlODVhOTRmOWYzMGY2MTBiNjQ3ZTAy
ZDY1NTQ4ODdjNDJkOGYyMjMzZjhkMzZlNGVhZjYzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDHbLpsPnOVMtZ34dWhS4WkCls0M9Wtih0WW7XPVyg1F4yz
p+jRq7PrR8XlZFv9i9U+LJHpyAsuIzCnTB7Vp+0k1/Fqm0guaYqd3GVzC8WU29hm
MER9p17abzuC8fI0TZmr/c3khRTn2DBEWbYNstsq/N7D7TBRrrEWxJRirRRGJcD8
bfKbUW3TWNlA8C4Be24r2JIVN0y7zwavyQocDJaU3Spf0EKClh5uSp8L2D3JP+xL
NcPtb0qGj13SDQ8lvFArpnfbJe3EEM/NjhB6dBUuxNHFZmAKeUD0pczvlQ2kv0ju
ZvjwzIr3ygBjlDV91cGtWAsaH3nARCVGKian4kKxAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUaKjsl4Wr3GrwviBwCdkv9zPZVQ0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2M4NmJjOWY5LWRjNmItNDdlYi05NDMxLWFhZTcwYWFmNTRlYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwIXFDANBgkqhkiG9w0BAQsFAAOCAQEAokKz9ieiGObI5fx01tMESuhCnWZB
5ozjEuQPTS9lOWQY4utTfY5mwwlEyN1t4q+dYG7BGU5ejbQW9T/OtOJI6XYwjzjA
PzIB/D+NXnV49zHhcpxQlhAI/kfMxCKzANqOO8PqvldrimXglhBVxIdk0fKL39ZZ
MaP1omLO1oFIb3LrN2hsAJXdC7WJ8a8+03DF7UNdvN3XM3hLh959ewfmCLnP1N83
iUi4hV3PW44cjsEG0wXygQKcZRPd9zkJQvkFkXJ8YpZIKukrqCfxPWS9w8u2Nhc2
g7VyelJ8+WrQXks/O8FNVXtVTDKcy33py6Zy3khFVOCRwC7Tvh8Yb1t7tg==
-----END CERTIFICATE-----