Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ebefafd8-9641-4906-bdd7-3cdd9411560b.roa
File:                     ebefafd8-9641-4906-bdd7-3cdd9411560b.roa (raw, json)
Hash identifier:          sP1hv2wPAOwtQui2lfYJM14H9ZhJsulRfsQx9ygvYII=
Subject key identifier:   F4:CC:D4:C6:50:BE:89:48:BA:57:04:AC:78:BB:BC:07:BD:63:1A:D2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0B7397AC54A933A9F13B625A048C1D029A513863
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ebefafd8-9641-4906-bdd7-3cdd9411560b.roa
Signing time:             Fri 17 Oct 2025 00:52:45 +0000
ROA not before:           Fri 17 Oct 2025 00:52:45 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        16.25.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:73:97:ac:54:a9:33:a9:f1:3b:62:5a:04:8c:1d:02:9a:51:38:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 00:52:45 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=fb8dffa4dda452945efe2690b5ed09c0236de4ad47b05b7e9e85a95d29c483b6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8c:9d:53:d2:f1:a9:da:0d:1d:3d:9a:29:d4:
                    2a:f3:45:9e:20:2c:9b:67:69:d4:61:5d:5a:96:4b:
                    5e:30:f2:77:5e:a6:ea:87:b9:53:f9:48:36:ca:5d:
                    b6:50:37:e3:59:76:6e:d2:16:bb:06:8b:94:05:94:
                    76:79:a2:a7:ee:f1:b2:23:9f:76:46:32:41:f9:33:
                    24:94:f8:7d:a3:b4:95:79:eb:7c:6e:67:df:ab:ae:
                    d5:33:1a:0f:84:1f:bb:f7:7f:b1:a9:df:f3:a1:0a:
                    0d:d1:48:16:16:04:f1:59:71:1b:05:4e:96:4a:e2:
                    21:dd:fb:fd:9b:1f:b8:0c:2c:54:f9:7d:f3:60:07:
                    9b:6d:c5:86:73:45:25:ed:d1:78:bc:bb:91:d0:f3:
                    39:25:0a:85:a0:94:ac:45:26:5c:26:fd:da:c6:36:
                    d4:09:d2:f2:2a:09:77:82:6a:d1:5d:51:95:47:7c:
                    fe:d7:2f:48:ff:c4:9c:29:4f:a0:db:f6:9c:b3:c4:
                    f0:3f:c8:59:a9:ab:4d:e3:65:9a:bc:a5:01:be:2b:
                    1a:63:6d:56:6e:a8:93:22:74:eb:92:1b:9e:e7:b3:
                    05:79:d4:71:e0:40:38:22:09:49:90:5c:3c:cd:c8:
                    3d:57:ea:9a:cf:32:77:9d:e6:d0:c0:29:b7:34:af:
                    a2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:CC:D4:C6:50:BE:89:48:BA:57:04:AC:78:BB:BC:07:BD:63:1A:D2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ebefafd8-9641-4906-bdd7-3cdd9411560b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.25.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8e:da:78:4a:6a:22:42:82:f8:c9:dc:a5:be:1d:ea:e4:bf:cc:
         d0:0d:93:e7:e3:da:74:b4:7d:e6:ac:7c:ad:67:ac:93:5d:07:
         9b:87:97:03:46:e6:cb:49:81:f2:9e:a4:91:1f:f5:db:6e:a1:
         77:fd:2a:5f:b2:50:34:26:d9:75:8e:00:8e:8c:d9:01:7d:1b:
         3b:3f:86:36:a7:60:2f:49:97:b7:0c:ef:a2:c7:30:25:18:0c:
         c6:ff:19:22:1d:8b:44:54:26:25:a5:47:1c:d5:f6:39:6d:b7:
         00:d4:ff:39:e1:1c:ef:4e:a8:33:19:ca:6b:a5:92:b2:97:dc:
         e2:04:3c:a2:be:8f:35:3e:50:ac:b4:25:01:1e:6e:c1:e6:d9:
         7c:5a:8b:ff:50:3d:ce:51:ab:64:9f:b1:11:1b:c5:24:c6:4b:
         70:62:d5:e6:0a:e8:41:45:fa:3c:89:7f:1a:f3:48:7b:23:88:
         0d:67:11:a6:25:54:74:0c:71:e9:35:68:b2:80:8b:33:17:ee:
         19:79:b2:2c:82:36:05:4a:79:bb:b4:d2:c4:9f:0a:55:61:fa:
         7b:9d:50:75:0c:82:ef:6c:c0:0e:ec:c6:75:94:71:9a:10:6c:
         36:9b:df:e7:2c:c5:94:25:b8:55:24:ad:87:2b:f7:06:2e:83:
         8c:24:95:75
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUC3OXrFSpM6nxO2JaBIwdAppROGMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE3MDA1MjQ1WhcNMjUxMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BmYjhkZmZhNGRkYTQ1Mjk0NWVmZTI2OTBiNWVkMDljMDIz
NmRlNGFkNDdiMDViN2U5ZTg1YTk1ZDI5YzQ4M2I2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCrjJ1T0vGp2g0dPZop1CrzRZ4gLJtnadRhXVqWS14w8nde
puqHuVP5SDbKXbZQN+NZdm7SFrsGi5QFlHZ5oqfu8bIjn3ZGMkH5MySU+H2jtJV5
63xuZ9+rrtUzGg+EH7v3f7Gp3/OhCg3RSBYWBPFZcRsFTpZK4iHd+/2bH7gMLFT5
ffNgB5ttxYZzRSXt0Xi8u5HQ8zklCoWglKxFJlwm/drGNtQJ0vIqCXeCatFdUZVH
fP7XL0j/xJwpT6Db9pyzxPA/yFmpq03jZZq8pQG+KxpjbVZuqJMidOuSG57nswV5
1HHgQDgiCUmQXDzNyD1X6prPMned5tDAKbc0r6K7AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU9MzUxlC+iUi6VwSseLu8B71jGtIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2ViZWZhZmQ4LTk2NDEtNDkwNi1iZGQ3LTNjZGQ5NDExNTYwYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQGTANBgkqhkiG9w0BAQsFAAOCAQEAjtp4SmoiQoL4ydylvh3q5L/M0A2T
5+PadLR95qx8rWesk10Hm4eXA0bmy0mB8p6kkR/1226hd/0qX7JQNCbZdY4AjozZ
AX0bOz+GNqdgL0mXtwzvoscwJRgMxv8ZIh2LRFQmJaVHHNX2OW23ANT/OeEc706o
MxnKa6WSspfc4gQ8or6PNT5QrLQlAR5uwebZfFqL/1A9zlGrZJ+xERvFJMZLcGLV
5groQUX6PIl/GvNIeyOIDWcRpiVUdAxx6TVosoCLMxfuGXmyLII2BUp5u7TSxJ8K
VWH6e51QdQyC72zADuzGdZRxmhBsNpvf5yzFlCW4VSSthyv3Bi6DjCSVdQ==
-----END CERTIFICATE-----