Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d06c4360-59d9-4f8a-9e60-9ad149bb4f4a.roa
File:                     d06c4360-59d9-4f8a-9e60-9ad149bb4f4a.roa (raw, json)
Hash identifier:          d0ZlLNfsAXcSxdbB2/5itsn+aW7Bp/8RdlNUxvpXZ1c=
Subject key identifier:   5D:A9:BF:AD:31:7F:59:8A:43:23:86:7D:DB:08:21:1F:26:04:E2:52
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2358BC35EF3942B004D8422899BA147FD7D207C1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d06c4360-59d9-4f8a-9e60-9ad149bb4f4a.roa
Signing time:             Sat 18 Oct 2025 02:31:44 +0000
ROA not before:           Sat 18 Oct 2025 02:31:44 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        23.22.80.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:58:bc:35:ef:39:42:b0:04:d8:42:28:99:ba:14:7f:d7:d2:07:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 02:31:44 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=ea8f35c75b4ff9434ef4d8788aa5468b223a874f4b36c64b78fe4db291e09594, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:36:e7:78:f3:4f:0c:c2:36:3f:2d:92:b2:a5:
                    65:bb:ad:f3:42:c0:c5:61:70:52:c1:70:fa:22:22:
                    1e:a3:45:df:9b:99:21:31:24:1c:02:c7:35:01:0d:
                    bd:fa:7a:fa:03:1c:63:a9:79:68:22:69:ad:4c:84:
                    78:2e:c6:0e:5f:f0:ce:6f:21:84:de:c0:c1:de:36:
                    39:95:49:a0:89:a2:af:8f:a7:89:51:30:aa:69:7d:
                    bf:b4:19:2a:d3:b8:eb:a6:63:ab:76:33:52:63:6c:
                    be:02:05:e1:a8:be:6f:77:53:12:ea:07:03:0c:24:
                    ad:8e:2a:1c:02:29:d6:b9:0d:4d:0e:bc:b0:45:bc:
                    89:2c:85:40:ad:c4:02:1a:04:55:f2:31:98:92:11:
                    3b:e2:65:f9:ca:4c:83:9f:59:26:e7:2d:ff:cb:08:
                    5b:ab:1f:a3:a3:d9:b9:eb:3d:aa:ab:66:07:55:90:
                    3f:f9:c7:b4:fa:3f:e5:40:9c:13:af:11:94:7d:f9:
                    fd:0a:03:14:7f:14:99:8c:17:06:c6:d8:3a:8f:09:
                    07:23:d7:9e:f2:69:b6:64:35:8e:dc:c0:1e:af:19:
                    ad:07:da:fe:ce:0e:5f:c4:41:11:4a:b2:53:8e:3f:
                    e1:fe:9f:d6:ac:00:2d:5c:14:b9:3b:17:41:54:59:
                    94:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A9:BF:AD:31:7F:59:8A:43:23:86:7D:DB:08:21:1F:26:04:E2:52
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d06c4360-59d9-4f8a-9e60-9ad149bb4f4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.22.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a6:38:e2:a7:b7:80:17:cf:ac:37:83:02:1d:1e:d9:76:85:2c:
         2b:be:e7:11:b7:00:19:66:0e:ef:ff:2b:01:6e:76:92:29:c4:
         27:6c:05:04:d8:35:44:f0:e0:f4:2c:9c:88:26:ad:42:c1:0b:
         ef:1a:05:e7:30:64:4a:f3:5c:83:24:9e:5b:5a:35:7a:52:41:
         0a:11:5b:36:62:cf:56:65:67:5c:71:c1:73:b3:8d:e6:f4:1e:
         e1:02:04:a5:a4:66:2b:94:4e:38:e0:55:94:e9:0d:ae:41:e3:
         98:19:eb:dd:7a:92:6f:59:e8:4c:c8:1c:81:d6:8e:2e:53:69:
         bf:fa:f4:59:c2:5f:05:ff:58:26:c4:e8:29:c4:7b:14:9d:99:
         85:9d:23:52:97:68:95:5b:a2:59:ca:90:2b:51:58:27:b5:02:
         d3:2b:ac:55:eb:19:54:d7:fa:46:02:99:6f:7a:02:51:63:c8:
         65:e9:a0:1c:35:d5:3b:54:a6:67:07:b3:d1:6a:73:d1:77:3e:
         0e:eb:61:f4:c1:93:dc:76:37:0e:b3:db:65:86:5b:d4:89:a7:
         6e:90:80:8d:9b:b6:e5:52:b6:96:e8:9a:63:71:f7:42:22:35:
         43:27:47:cc:5c:20:6f:53:2c:b3:75:2d:ff:b4:43:41:f1:e0:
         c9:f2:b5:ef
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUI1i8Ne85QrAE2EIomboUf9fSB8EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDIzMTQ0WhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BlYThmMzVjNzViNGZmOTQzNGVmNGQ4Nzg4YWE1NDY4YjIy
M2E4NzRmNGIzNmM2NGI3OGZlNGRiMjkxZTA5NTk0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCaNud4808MwjY/LZKypWW7rfNCwMVhcFLBcPoiIh6jRd+b
mSExJBwCxzUBDb36evoDHGOpeWgiaa1MhHguxg5f8M5vIYTewMHeNjmVSaCJoq+P
p4lRMKppfb+0GSrTuOumY6t2M1JjbL4CBeGovm93UxLqBwMMJK2OKhwCKda5DU0O
vLBFvIkshUCtxAIaBFXyMZiSETviZfnKTIOfWSbnLf/LCFurH6Oj2bnrPaqrZgdV
kD/5x7T6P+VAnBOvEZR9+f0KAxR/FJmMFwbG2DqPCQcj157yabZkNY7cwB6vGa0H
2v7ODl/EQRFKslOOP+H+n9asAC1cFLk7F0FUWZTZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUXam/rTF/WYpDI4Z92wghHyYE4lIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2QwNmM0MzYwLTU5ZDktNGY4YS05ZTYwLTlhZDE0OWJiNGY0YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQXFlAwDQYJKoZIhvcNAQELBQADggEBAKY44qe3gBfPrDeDAh0e2XaFLCu+
5xG3ABlmDu//KwFudpIpxCdsBQTYNUTw4PQsnIgmrULBC+8aBecwZErzXIMknlta
NXpSQQoRWzZiz1ZlZ1xxwXOzjeb0HuECBKWkZiuUTjjgVZTpDa5B45gZ6916km9Z
6EzIHIHWji5Tab/69FnCXwX/WCbE6CnEexSdmYWdI1KXaJVbolnKkCtRWCe1AtMr
rFXrGVTX+kYCmW96AlFjyGXpoBw11TtUpmcHs9Fqc9F3Pg7rYfTBk9x2Nw6z22WG
W9SJp26QgI2btuVStpbommNx90IiNUMnR8xcIG9TLLN1Lf+0Q0Hx4Mnyte8=
-----END CERTIFICATE-----