Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e18127e7-1573-4e16-8284-95afb7316aa5.roa
File:                     e18127e7-1573-4e16-8284-95afb7316aa5.roa (raw, json)
Hash identifier:          VaplmUuwRi9w0lYRMnk/yd+GGUOPBUr2uaVI2PHKRvI=
Subject key identifier:   41:82:5C:DB:97:87:CB:D8:01:90:3B:6D:82:8A:9F:93:22:4D:6C:5E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       25CA87AE7CDDE78CB589EB4363A48190A176CA89
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e18127e7-1573-4e16-8284-95afb7316aa5.roa
Signing time:             Fri 26 Sep 2025 00:40:26 +0000
ROA not before:           Fri 26 Sep 2025 00:40:26 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.137.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ca:87:ae:7c:dd:e7:8c:b5:89:eb:43:63:a4:81:90:a1:76:ca:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 26 00:40:26 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=7634d50747ed2029da326659ac3c11d9cb3fd1789ea26996db3e007395495c80, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:53:03:88:9f:df:3d:02:ea:73:09:4d:4b:b3:
                    25:e6:9a:00:98:c3:2c:46:a6:8f:7c:48:82:8f:06:
                    37:6c:d1:7a:76:16:21:53:fc:4b:f6:63:27:07:4a:
                    02:8d:24:b2:88:5e:17:17:33:49:58:b8:64:c6:eb:
                    a6:62:b3:bd:55:a5:a1:c0:79:2c:44:76:e3:b0:e8:
                    9c:ac:ee:1c:76:07:a7:12:e6:cc:d7:b4:e4:91:0a:
                    8e:e2:bc:74:b5:f4:b9:89:70:00:ab:93:47:01:69:
                    8e:4f:4f:77:50:0d:3a:d2:7e:c0:9c:0e:ba:7b:e0:
                    92:d4:2f:23:8b:93:65:a1:1e:c4:a2:c5:9a:5b:ab:
                    99:75:ba:d8:72:97:6d:a1:a2:36:d2:6b:e2:13:d0:
                    5f:a0:d7:b0:3e:5c:ec:45:3c:f0:5c:0d:bd:4f:7c:
                    3c:34:98:ec:f0:06:ff:ed:cc:0e:15:42:02:4c:bd:
                    32:45:88:fb:9e:59:ca:39:c1:14:f6:be:0f:d4:ad:
                    99:cf:05:85:0a:4f:d1:1c:d2:83:cf:80:35:37:21:
                    0e:72:f9:ba:68:32:d4:6e:14:69:e9:ab:4b:5d:77:
                    a4:36:bb:ba:0c:27:c4:c2:2e:b8:b7:7e:e6:aa:0b:
                    a8:dc:d9:e1:1e:33:50:a0:ae:01:9e:5c:43:48:a9:
                    88:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:82:5C:DB:97:87:CB:D8:01:90:3B:6D:82:8A:9F:93:22:4D:6C:5E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e18127e7-1573-4e16-8284-95afb7316aa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.137.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         cb:03:c9:0d:2b:e6:38:d9:59:e3:d0:d9:2a:fb:d1:b9:1f:bd:
         c7:f7:cc:9d:63:5e:41:c8:fc:78:93:98:d4:ec:7e:93:55:b3:
         82:15:72:9b:e4:2b:aa:4e:6d:a9:cd:0f:f6:f9:75:86:00:8f:
         21:06:99:94:56:34:13:5f:4d:f6:82:bc:f5:db:0b:93:e2:91:
         32:9d:40:07:f1:ee:33:75:e5:d1:d2:6f:1b:94:73:b3:5d:30:
         b1:8e:0d:d7:79:f3:01:2c:89:63:bc:ce:14:2a:9a:4c:ca:4c:
         07:46:1a:e5:e2:ff:3a:7b:23:a1:a9:b7:50:d1:57:fb:e1:c0:
         30:f2:59:9b:b6:c9:27:ce:a0:ab:4d:5a:79:1c:0b:11:89:87:
         59:19:c1:2e:d9:37:47:91:e5:cf:4c:06:22:54:d1:10:71:e7:
         63:db:fd:93:f1:7f:e0:2d:72:92:07:7a:de:9d:9d:ab:ca:5a:
         5c:df:68:07:1e:bb:4c:23:bc:02:3a:85:ae:76:92:d9:82:8d:
         89:82:c5:6c:e6:97:e5:c7:30:ee:1f:f1:b1:b5:af:58:62:7e:
         d2:84:77:c1:c4:23:f3:08:ab:06:65:9b:c6:41:ae:9b:9f:ca:
         cb:fa:cd:76:d0:47:d1:ab:73:85:19:b9:e2:c1:fa:04:57:0c:
         da:0e:66:8a
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUJcqHrnzd54y1ietDY6SBkKF2yokwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTI2MDA0MDI2WhcNMjUxMDMxMjM1OTU5
WjB6MUkwRwYDVQQFE0A3NjM0ZDUwNzQ3ZWQyMDI5ZGEzMjY2NTlhYzNjMTFkOWNi
M2ZkMTc4OWVhMjY5OTZkYjNlMDA3Mzk1NDk1YzgwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCSUwOIn989AupzCU1LsyXmmgCYwyxGpo98SIKPBjds0Xp2
FiFT/Ev2YycHSgKNJLKIXhcXM0lYuGTG66Zis71VpaHAeSxEduOw6Jys7hx2B6cS
5szXtOSRCo7ivHS19LmJcACrk0cBaY5PT3dQDTrSfsCcDrp74JLULyOLk2WhHsSi
xZpbq5l1uthyl22hojbSa+IT0F+g17A+XOxFPPBcDb1PfDw0mOzwBv/tzA4VQgJM
vTJFiPueWco5wRT2vg/UrZnPBYUKT9Ec0oPPgDU3IQ5y+bpoMtRuFGnpq0tdd6Q2
u7oMJ8TCLri3fuaqC6jc2eEeM1CgrgGeXENIqYibAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUQYJc25eHy9gBkDttgoqfkyJNbF4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2UxODEyN2U3LTE1NzMtNGUxNi04Mjg0LTk1YWZiNzMxNmFhNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA2iTANBgkqhkiG9w0BAQsFAAOCAQEAywPJDSvmONlZ49DZKvvRuR+9x/fM
nWNeQcj8eJOY1Ox+k1WzghVym+Qrqk5tqc0P9vl1hgCPIQaZlFY0E19N9oK89dsL
k+KRMp1AB/HuM3Xl0dJvG5Rzs10wsY4N13nzASyJY7zOFCqaTMpMB0Ya5eL/Onsj
oam3UNFX++HAMPJZm7bJJ86gq01aeRwLEYmHWRnBLtk3R5Hlz0wGIlTREHHnY9v9
k/F/4C1ykgd63p2dq8paXN9oBx67TCO8AjqFrnaS2YKNiYLFbOaX5ccw7h/xsbWv
WGJ+0oR3wcQj8wirBmWbxkGum5/Ky/rNdtBH0atzhRm54sH6BFcM2g5mig==
-----END CERTIFICATE-----