Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3de168b-9f50-44d1-9a40-b87bb278f41e.roa
File:                     d3de168b-9f50-44d1-9a40-b87bb278f41e.roa (raw, json)
Hash identifier:          ro8VeiHKEclKtCiPu127uIhQ7C2HaPzRgs29+fd47A4=
Subject key identifier:   B2:E4:F8:BC:99:18:16:E0:10:9F:D0:6A:AD:F9:85:A6:94:35:5F:83
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1FCF7C3AC273F7AEF3FBE541CA2E6D4424A96F6E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3de168b-9f50-44d1-9a40-b87bb278f41e.roa
Signing time:             Fri 26 Sep 2025 00:22:38 +0000
ROA not before:           Fri 26 Sep 2025 00:22:38 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        23.254.24.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:cf:7c:3a:c2:73:f7:ae:f3:fb:e5:41:ca:2e:6d:44:24:a9:6f:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 26 00:22:38 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=334a3882458f69276d1ba49b6bf2c0be2dda08fee5e8e380d36b4cf628ab129a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a7:d2:86:22:97:9e:b1:c3:82:24:9a:01:19:
                    95:48:f0:b9:cb:08:46:51:85:8f:f4:6b:55:bf:54:
                    40:63:a8:37:c0:26:21:fb:22:64:07:2d:9e:ba:e0:
                    2e:f3:7d:95:0c:4c:d5:12:58:16:49:03:3a:18:73:
                    ef:f8:3e:b4:8a:99:63:2f:14:e4:2d:db:e6:0e:cd:
                    9d:eb:51:c0:1c:c1:98:03:f2:cb:45:e6:f0:bd:64:
                    99:19:ab:97:72:1d:22:ba:3c:27:bd:d4:1c:f0:ec:
                    52:ca:18:ca:62:63:64:b3:d0:3c:c6:dd:54:2b:31:
                    23:bc:a5:a0:7c:00:8e:32:73:43:b2:8d:4c:d9:06:
                    b3:2c:91:02:16:46:20:59:24:68:42:22:ff:55:5a:
                    d4:ca:0f:37:87:48:67:89:e2:63:3a:d9:ad:c5:c1:
                    ab:a0:c5:7b:fe:79:c1:b3:87:1c:95:9e:17:3b:cc:
                    8b:dc:6f:33:3e:86:63:8a:8f:13:6b:ab:6e:2f:15:
                    61:5b:a6:f4:ae:19:5f:9d:f8:9f:b8:83:da:79:9a:
                    44:41:b7:fa:74:17:f0:75:60:f6:14:16:23:c6:6c:
                    c9:af:3e:c6:13:42:84:f3:4e:ee:36:c1:2a:3a:ba:
                    f6:09:dd:6f:87:cb:6b:c4:76:cb:6f:8d:22:a5:0f:
                    63:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E4:F8:BC:99:18:16:E0:10:9F:D0:6A:AD:F9:85:A6:94:35:5F:83
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3de168b-9f50-44d1-9a40-b87bb278f41e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.254.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:b9:11:47:ac:23:f4:ff:41:7b:09:2e:f8:66:30:47:6c:97:
         ae:81:9c:50:16:4b:dc:58:c7:b1:af:ab:30:dc:4e:c6:c9:f7:
         8b:52:39:51:7b:12:cb:b7:89:12:96:a6:df:5f:a1:c2:a2:00:
         24:42:62:55:3c:84:c3:aa:22:68:2a:29:8e:92:06:5d:c9:86:
         94:05:95:53:f4:6b:fe:ee:57:c6:cd:da:4d:35:c1:3d:18:4b:
         f2:4c:e0:4a:bc:7b:6e:dc:2a:6b:42:be:4a:cc:bd:e2:5e:25:
         55:20:49:aa:ed:e5:c3:c1:97:c8:80:5d:ff:a1:45:41:84:20:
         24:dd:e1:d2:7c:b0:e1:3a:78:eb:2e:08:07:62:0e:ac:fb:59:
         fa:98:2c:64:1f:83:e1:53:48:74:1f:58:72:4b:22:b1:89:af:
         ef:19:c8:b6:ec:f6:ad:de:15:99:b0:ee:d9:59:7f:4b:2b:b6:
         05:2b:d8:7e:b1:ea:4a:a6:ef:2d:ca:3a:a6:78:72:36:c0:a1:
         fd:51:c0:06:cf:c1:16:4a:8f:7a:bc:7a:28:8b:5e:78:ce:e5:
         4b:fd:8f:47:0d:f8:0c:bf:0f:39:11:19:2b:08:25:f4:94:a5:
         33:64:74:12:c9:1c:53:ed:96:0f:1d:0e:3f:1a:87:5a:ff:fd:
         6f:72:c6:dd
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUH898OsJz967z++VByi5tRCSpb24wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTI2MDAyMjM4WhcNMjUxMDMxMjM1OTU5
WjB6MUkwRwYDVQQFE0AzMzRhMzg4MjQ1OGY2OTI3NmQxYmE0OWI2YmYyYzBiZTJk
ZGEwOGZlZTVlOGUzODBkMzZiNGNmNjI4YWIxMjlhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCtp9KGIpeescOCJJoBGZVI8LnLCEZRhY/0a1W/VEBjqDfA
JiH7ImQHLZ664C7zfZUMTNUSWBZJAzoYc+/4PrSKmWMvFOQt2+YOzZ3rUcAcwZgD
8stF5vC9ZJkZq5dyHSK6PCe91Bzw7FLKGMpiY2Sz0DzG3VQrMSO8paB8AI4yc0Oy
jUzZBrMskQIWRiBZJGhCIv9VWtTKDzeHSGeJ4mM62a3FwaugxXv+ecGzhxyVnhc7
zIvcbzM+hmOKjxNrq24vFWFbpvSuGV+d+J+4g9p5mkRBt/p0F/B1YPYUFiPGbMmv
PsYTQoTzTu42wSo6uvYJ3W+Hy2vEdstvjSKlD2MzAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUsuT4vJkYFuAQn9BqrfmFppQ1X4MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2QzZGUxNjhiLTlmNTAtNDRkMS05YTQwLWI4N2JiMjc4ZjQxZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEX/hgwDQYJKoZIhvcNAQELBQADggEBABO5EUesI/T/QXsJLvhmMEdsl66B
nFAWS9xYx7GvqzDcTsbJ94tSOVF7Esu3iRKWpt9focKiACRCYlU8hMOqImgqKY6S
Bl3JhpQFlVP0a/7uV8bN2k01wT0YS/JM4Eq8e27cKmtCvkrMveJeJVUgSart5cPB
l8iAXf+hRUGEICTd4dJ8sOE6eOsuCAdiDqz7WfqYLGQfg+FTSHQfWHJLIrGJr+8Z
yLbs9q3eFZmw7tlZf0srtgUr2H6x6kqm7y3KOqZ4cjbAof1RwAbPwRZKj3q8eiiL
XnjO5Uv9j0cN+Ay/DzkRGSsIJfSUpTNkdBLJHFPtlg8dDj8ah1r//W9yxt0=
-----END CERTIFICATE-----