Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec239bda-5a50-4b9d-afec-c178a10d8a78.roa
File:                     ec239bda-5a50-4b9d-afec-c178a10d8a78.roa (raw, json)
Hash identifier:          xaDOwQUqFVgdEA2ZN7lJZd4A1E1PpBa+tHrLX+7aJP4=
Subject key identifier:   AC:F3:CF:2F:42:F5:93:50:61:D7:C7:27:D6:F9:DB:88:8C:E9:94:8A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       11088E02682951D48DEADED75E32F9501FC9F645
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec239bda-5a50-4b9d-afec-c178a10d8a78.roa
Signing time:             Fri 17 Oct 2025 21:40:07 +0000
ROA not before:           Fri 17 Oct 2025 21:40:07 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        174.129.64.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:08:8e:02:68:29:51:d4:8d:ea:de:d7:5e:32:f9:50:1f:c9:f6:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 21:40:07 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=553b0db2312305c5b90f1de222c0ec94f27a7c133514d98fda2f4944f4701415, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:86:18:7d:df:48:9f:dc:5a:13:1a:94:52:7a:
                    dc:a0:c1:6f:2f:b9:5e:da:b9:8b:7a:39:ec:18:d4:
                    60:98:6c:60:15:19:7a:28:e8:34:17:af:93:d2:d1:
                    11:98:e7:5f:a7:37:63:13:63:f9:ef:4c:79:c0:5e:
                    2b:30:e9:6f:dc:ba:d8:06:2a:2b:33:7b:56:07:70:
                    b9:eb:ba:f2:a9:b1:d5:a2:e1:03:c6:dd:28:16:13:
                    e8:c7:16:44:61:43:3b:8a:cb:e9:6b:18:2c:f7:24:
                    83:54:42:71:0b:96:93:15:7d:b2:b4:fc:2a:1a:61:
                    53:0a:ec:b3:8c:0f:23:c2:cc:4c:94:bf:1e:08:c2:
                    cb:a7:af:f7:ab:8e:7e:6a:1b:92:24:f3:f8:91:a5:
                    af:0b:01:ce:84:87:6d:06:65:f7:38:d3:6d:c1:23:
                    38:31:bd:3b:01:67:00:28:f6:93:45:c0:70:32:52:
                    b0:7b:07:de:9c:11:36:98:8d:f5:64:c1:d9:01:a0:
                    a5:17:07:1c:14:cb:79:c3:0e:39:2a:86:a1:88:52:
                    b1:7f:8b:b0:9b:3b:7c:76:0d:ee:49:8b:55:b9:56:
                    41:5e:4b:68:8a:69:30:0b:3f:ae:6c:9b:3d:03:00:
                    d0:5b:d3:c7:f6:28:4b:5b:51:19:a4:af:30:c1:a7:
                    ee:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F3:CF:2F:42:F5:93:50:61:D7:C7:27:D6:F9:DB:88:8C:E9:94:8A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec239bda-5a50-4b9d-afec-c178a10d8a78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.129.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         96:dd:a1:d5:74:18:ee:67:bc:82:80:b5:3c:b8:5a:ad:e6:65:
         fb:10:c4:7b:80:50:72:4e:70:89:07:13:5a:19:35:04:06:03:
         77:74:b3:19:56:27:4b:8e:3d:16:bd:15:a1:42:66:25:af:84:
         c9:93:be:10:f6:95:f7:5b:7b:b5:17:70:cb:99:a0:7f:68:c5:
         b4:db:9e:1a:c8:7c:10:b3:67:54:69:ae:25:21:8c:bc:2f:bc:
         e0:0c:d2:89:aa:9d:9a:c5:d0:ed:f9:e9:cd:de:70:48:bf:91:
         b8:15:88:ff:75:c8:ae:a4:7f:b7:fd:ce:60:c8:de:59:97:ed:
         07:9c:64:80:a8:6b:1b:e2:58:64:6c:fb:3f:b8:58:84:c6:2f:
         75:9b:42:80:ba:fc:b4:e2:3f:fa:11:1b:cc:aa:ea:4d:0f:e7:
         61:42:87:5c:0f:e8:8d:d4:1e:69:2d:11:bc:5b:5c:68:d4:8e:
         8b:37:2d:fe:cd:72:7a:31:bf:6f:e5:ca:19:3a:17:d3:41:36:
         76:1d:f1:c0:11:e6:00:8f:74:74:1e:ae:b9:74:bc:28:18:92:
         55:56:a3:ca:fd:64:7b:3c:72:4c:ea:52:39:68:88:55:3a:bf:
         7d:bd:a4:3d:0f:2b:6b:36:de:83:c3:ce:9c:20:5e:8e:b7:9a:
         43:1f:10:79
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEQiOAmgpUdSN6t7XXjL5UB/J9kUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE3MjE0MDA3WhcNMjUxMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A1NTNiMGRiMjMxMjMwNWM1YjkwZjFkZTIyMmMwZWM5NGYy
N2E3YzEzMzUxNGQ5OGZkYTJmNDk0NGY0NzAxNDE1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDnhhh930if3FoTGpRSetygwW8vuV7auYt6OewY1GCYbGAV
GXoo6DQXr5PS0RGY51+nN2MTY/nvTHnAXisw6W/cutgGKisze1YHcLnruvKpsdWi
4QPG3SgWE+jHFkRhQzuKy+lrGCz3JINUQnELlpMVfbK0/CoaYVMK7LOMDyPCzEyU
vx4Iwsunr/erjn5qG5Ik8/iRpa8LAc6Eh20GZfc4023BIzgxvTsBZwAo9pNFwHAy
UrB7B96cETaYjfVkwdkBoKUXBxwUy3nDDjkqhqGIUrF/i7CbO3x2De5Ji1W5VkFe
S2iKaTALP65smz0DANBb08f2KEtbURmkrzDBp+7hAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUrPPPL0L1k1Bh18cn1vnbiIzplIowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2VjMjM5YmRhLTVhNTAtNGI5ZC1hZmVjLWMxNzhhMTBkOGE3OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAaugUAwDQYJKoZIhvcNAQELBQADggEBAJbdodV0GO5nvIKAtTy4Wq3mZfsQ
xHuAUHJOcIkHE1oZNQQGA3d0sxlWJ0uOPRa9FaFCZiWvhMmTvhD2lfdbe7UXcMuZ
oH9oxbTbnhrIfBCzZ1RpriUhjLwvvOAM0omqnZrF0O356c3ecEi/kbgViP91yK6k
f7f9zmDI3lmX7QecZICoaxviWGRs+z+4WITGL3WbQoC6/LTiP/oRG8yq6k0P52FC
h1wP6I3UHmktEbxbXGjUjos3Lf7Ncnoxv2/lyhk6F9NBNnYd8cAR5gCPdHQerrl0
vCgYklVWo8r9ZHs8ckzqUjloiFU6v329pD0PK2s23oPDzpwgXo63mkMfEHk=
-----END CERTIFICATE-----