Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efd756d4-e0b5-41e9-9af5-0c6e3ad6be04.roa
File:                     efd756d4-e0b5-41e9-9af5-0c6e3ad6be04.roa (raw, json)
Hash identifier:          rn9fqGHulriu7og29Pl3F5UghvDhNpKyB1vqbchy3nM=
Subject key identifier:   6D:09:0B:D5:48:1F:E7:88:57:48:F4:61:E9:3F:E9:F7:E6:DB:73:49
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5956A6B78C43B3BC922C21221062B937E0477BA7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efd756d4-e0b5-41e9-9af5-0c6e3ad6be04.roa
Signing time:             Fri 17 Oct 2025 20:50:18 +0000
ROA not before:           Fri 17 Oct 2025 20:50:18 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        162.222.150.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:56:a6:b7:8c:43:b3:bc:92:2c:21:22:10:62:b9:37:e0:47:7b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 20:50:18 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=d7968f79f6a25193f0e3f3d1e4fdaa403f91ee3c46aacf39b5b0ca32d4990335, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:09:d3:e6:a0:d1:0e:f1:4a:d9:72:f7:90:0a:
                    3f:57:f1:d1:b0:d6:75:3e:4a:0e:21:b7:31:0c:5d:
                    de:2f:9e:fc:86:05:d9:40:a1:6d:c3:e8:88:88:22:
                    70:3c:66:ef:d5:ba:55:56:d3:cd:dd:fa:86:a5:34:
                    91:2c:33:86:cd:54:72:61:74:11:78:16:ce:b8:30:
                    05:28:fb:69:89:69:71:9a:9b:c0:0b:c9:66:5c:bc:
                    bf:64:19:51:77:53:aa:ae:35:25:84:08:cf:2f:ae:
                    a9:7b:28:60:4b:ee:f5:86:1b:50:2b:cf:1e:2a:f3:
                    28:57:ea:8a:b6:ef:59:d5:3b:20:2a:1a:e3:f4:70:
                    84:9c:67:23:08:b3:af:9a:89:25:41:bb:0e:b0:06:
                    a6:8f:fd:75:98:9a:0e:0d:30:6b:ef:7f:4c:7d:9d:
                    c0:c2:d1:87:90:6d:62:8e:57:f7:ad:01:d8:97:c4:
                    2f:ad:2c:1b:82:c1:0e:fa:c7:57:c2:47:74:5e:47:
                    50:be:a8:57:f7:8a:ee:02:f3:d8:65:54:e5:64:66:
                    bd:c7:80:31:e8:31:e3:4b:3c:32:9e:83:bc:71:a5:
                    c4:5c:79:8e:06:79:c9:d5:96:a0:79:77:5a:52:22:
                    9b:e2:d3:9c:75:86:df:e9:95:13:61:b7:5f:75:0b:
                    2f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:09:0B:D5:48:1F:E7:88:57:48:F4:61:E9:3F:E9:F7:E6:DB:73:49
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efd756d4-e0b5-41e9-9af5-0c6e3ad6be04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:2f:d4:0a:1e:a9:fe:91:0f:6b:15:ff:fc:d1:66:4a:d8:74:
         fa:c8:cc:ab:b7:66:dd:7b:b6:57:aa:40:76:ca:92:76:3e:27:
         71:0a:de:7a:b3:8d:34:ed:b5:7d:15:e4:84:0b:92:a9:77:54:
         f4:d0:06:0b:b1:a1:b5:ef:02:92:3e:03:86:2e:43:b6:28:cb:
         95:15:41:f3:33:b1:fa:e6:c4:fa:ca:c7:3b:27:0c:a6:60:ed:
         60:38:31:5d:74:02:eb:90:47:dc:90:86:c2:b1:5b:8f:26:50:
         ef:8d:05:75:76:01:1d:d1:88:42:5b:5b:a1:e6:fd:24:41:09:
         fa:98:51:a3:ea:0a:e4:de:4d:ab:50:fc:af:81:32:01:9f:fc:
         83:94:df:c4:72:e7:26:e5:ca:83:90:ac:9f:23:b2:68:48:35:
         88:8e:03:68:b5:92:49:99:dc:15:9b:47:ec:70:a3:9d:b6:05:
         f2:c6:36:ee:66:c1:1d:32:d1:c9:f7:94:17:ed:1a:4c:c2:99:
         27:3d:b2:94:d4:a9:03:cc:57:d5:b3:9e:55:7f:93:62:10:83:
         24:8d:32:95:ff:6f:20:bf:f1:3e:d8:83:8e:ae:1a:bb:a8:3e:
         a9:a8:48:02:e8:59:48:c9:35:ba:1a:9f:70:fd:25:00:a5:a8:
         82:c3:0b:22
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUWVamt4xDs7ySLCEiEGK5N+BHe6cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE3MjA1MDE4WhcNMjUxMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BkNzk2OGY3OWY2YTI1MTkzZjBlM2YzZDFlNGZkYWE0MDNm
OTFlZTNjNDZhYWNmMzliNWIwY2EzMmQ0OTkwMzM1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCVCdPmoNEO8UrZcveQCj9X8dGw1nU+Sg4htzEMXd4vnvyG
BdlAoW3D6IiIInA8Zu/VulVW083d+oalNJEsM4bNVHJhdBF4Fs64MAUo+2mJaXGa
m8ALyWZcvL9kGVF3U6quNSWECM8vrql7KGBL7vWGG1Arzx4q8yhX6oq271nVOyAq
GuP0cIScZyMIs6+aiSVBuw6wBqaP/XWYmg4NMGvvf0x9ncDC0YeQbWKOV/etAdiX
xC+tLBuCwQ76x1fCR3ReR1C+qFf3iu4C89hlVOVkZr3HgDHoMeNLPDKeg7xxpcRc
eY4GecnVlqB5d1pSIpvi05x1ht/plRNht191Cy8ZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUbQkL1Ugf54hXSPRh6T/p9+bbc0kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2VmZDc1NmQ0LWUwYjUtNDFlOS05YWY1LTBjNmUzYWQ2YmUwNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACi3pYwDQYJKoZIhvcNAQELBQADggEBADUv1Aoeqf6RD2sV//zRZkrYdPrI
zKu3Zt17tleqQHbKknY+J3EK3nqzjTTttX0V5IQLkql3VPTQBguxobXvApI+A4Yu
Q7Yoy5UVQfMzsfrmxPrKxzsnDKZg7WA4MV10AuuQR9yQhsKxW48mUO+NBXV2AR3R
iEJbW6Hm/SRBCfqYUaPqCuTeTatQ/K+BMgGf/IOU38Ry5yblyoOQrJ8jsmhINYiO
A2i1kkmZ3BWbR+xwo522BfLGNu5mwR0y0cn3lBftGkzCmSc9spTUqQPMV9WznlV/
k2IQgySNMpX/byC/8T7Yg46uGruoPqmoSALoWUjJNboan3D9JQClqILDCyI=
-----END CERTIFICATE-----