Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0a6e2e2-64ef-45e6-b6a8-9a5830ee2ade.roa
File:                     f0a6e2e2-64ef-45e6-b6a8-9a5830ee2ade.roa (raw, json)
Hash identifier:          owno7bTZLCBQHOxfZDEeCYnLYpjVkrRWlDT0um1LiyY=
Subject key identifier:   E1:84:84:1C:CA:75:DE:A6:2C:31:82:3B:9C:E8:99:7F:AE:7F:A3:EF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2015BED926888D5E8FEC1DC9961EED600D5D6694
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0a6e2e2-64ef-45e6-b6a8-9a5830ee2ade.roa
Signing time:             Sun 19 Oct 2025 00:31:12 +0000
ROA not before:           Sun 19 Oct 2025 00:31:12 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        35.36.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:15:be:d9:26:88:8d:5e:8f:ec:1d:c9:96:1e:ed:60:0d:5d:66:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 00:31:12 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=455f8250304e56b7602c021ebc01467bffc2c45e38339ab723e58170d2a83852, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:38:22:d0:ac:7b:ef:15:6e:7b:12:6c:04:6d:
                    7b:ce:c0:5b:cd:4b:fd:20:0a:0a:01:97:93:ce:fa:
                    cc:1a:0c:84:08:07:51:3c:86:a4:8b:b0:3d:3d:bf:
                    3d:e6:8c:73:2a:13:84:25:60:c0:65:21:08:d7:25:
                    53:32:35:7b:d8:a5:63:2a:79:87:05:d5:28:a0:00:
                    e6:80:8c:4b:17:9b:2d:23:57:2f:9c:0f:f2:a8:a5:
                    87:eb:03:2a:10:3b:b6:d3:38:41:40:64:e2:c6:9b:
                    bc:4d:f0:18:00:33:aa:1f:48:4c:4d:ac:13:81:b0:
                    06:2d:48:24:b0:84:da:d0:9e:d7:dc:d1:87:24:7a:
                    80:60:94:21:ea:0b:88:a8:3e:90:c9:af:e4:93:61:
                    68:b1:03:7b:ff:d2:b0:90:8c:2d:06:a6:46:13:36:
                    39:5d:a1:c5:23:d7:89:80:bd:b0:18:f3:f6:30:52:
                    7a:18:59:89:ed:a7:17:c1:53:90:ff:fa:df:fe:13:
                    04:c8:5c:fd:51:01:f5:3e:61:f8:79:fd:4d:f0:75:
                    1c:fd:35:d4:40:df:1d:fd:4f:99:36:fb:b1:e6:60:
                    e0:a4:ca:ce:13:6d:55:fe:9e:ca:d9:2c:88:52:33:
                    f5:f3:02:03:96:d6:78:f9:e4:dc:62:3d:b0:c5:84:
                    e6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:84:84:1C:CA:75:DE:A6:2C:31:82:3B:9C:E8:99:7F:AE:7F:A3:EF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0a6e2e2-64ef-45e6-b6a8-9a5830ee2ade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.36.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         59:08:09:81:ae:4f:7c:15:98:b3:71:9f:79:a5:25:68:b4:6a:
         eb:db:c9:13:87:8d:7a:1a:e4:4c:5f:11:d8:16:e5:a9:96:77:
         71:1f:39:19:9c:d9:a8:10:54:60:65:1a:6b:46:09:ac:b5:3f:
         37:fb:a4:39:15:e6:37:c1:a0:5e:0f:a8:7c:6d:ed:1a:75:35:
         3c:89:70:94:5f:07:35:19:e1:71:2f:7f:17:6d:dd:34:2d:38:
         a0:b4:0d:1f:52:d4:b3:9d:04:3b:3d:c9:b9:5d:5c:7c:e4:8b:
         e3:62:55:ca:ec:6e:ab:5a:23:82:75:af:1b:37:be:2f:10:49:
         20:b7:72:55:93:bc:1b:51:80:9d:42:4d:1d:dd:27:52:9d:6d:
         5e:59:d8:26:e5:9c:6b:03:af:ff:29:e5:06:75:dd:fc:69:66:
         06:f0:8b:39:f6:d6:77:d8:8d:73:9d:7a:08:ce:ea:38:89:12:
         6a:81:74:4b:a7:e2:a2:c2:6c:f4:cd:5a:9f:05:39:58:d6:7a:
         db:1d:9e:3a:af:de:09:53:a7:a1:fe:e5:37:19:a6:ee:ce:08:
         5a:5a:20:6a:5d:64:f2:a0:fc:d3:63:ea:b5:f2:84:7f:27:26:
         01:37:ae:cd:7e:c2:02:0f:42:17:fa:c9:9d:3a:5b:2e:5d:40:
         b0:de:46:7a
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUIBW+2SaIjV6P7B3Jlh7tYA1dZpQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDAzMTEyWhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0A0NTVmODI1MDMwNGU1NmI3NjAyYzAyMWViYzAxNDY3YmZm
YzJjNDVlMzgzMzlhYjcyM2U1ODE3MGQyYTgzODUyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDsOCLQrHvvFW57EmwEbXvOwFvNS/0gCgoBl5PO+swaDIQI
B1E8hqSLsD09vz3mjHMqE4QlYMBlIQjXJVMyNXvYpWMqeYcF1SigAOaAjEsXmy0j
Vy+cD/KopYfrAyoQO7bTOEFAZOLGm7xN8BgAM6ofSExNrBOBsAYtSCSwhNrQntfc
0YckeoBglCHqC4ioPpDJr+STYWixA3v/0rCQjC0GpkYTNjldocUj14mAvbAY8/Yw
UnoYWYntpxfBU5D/+t/+EwTIXP1RAfU+Yfh5/U3wdRz9NdRA3x39T5k2+7HmYOCk
ys4TbVX+nsrZLIhSM/XzAgOW1nj55NxiPbDFhOZRAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU4YSEHMp13qYsMYI7nOiZf65/o+8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2YwYTZlMmUyLTY0ZWYtNDVlNi1iNmE4LTlhNTgzMGVlMmFkZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAjJDANBgkqhkiG9w0BAQsFAAOCAQEAWQgJga5PfBWYs3GfeaUlaLRq69vJ
E4eNehrkTF8R2BblqZZ3cR85GZzZqBBUYGUaa0YJrLU/N/ukORXmN8GgXg+ofG3t
GnU1PIlwlF8HNRnhcS9/F23dNC04oLQNH1LUs50EOz3JuV1cfOSL42JVyuxuq1oj
gnWvGze+LxBJILdyVZO8G1GAnUJNHd0nUp1tXlnYJuWcawOv/ynlBnXd/GlmBvCL
OfbWd9iNc516CM7qOIkSaoF0S6fiosJs9M1anwU5WNZ62x2eOq/eCVOnof7lNxmm
7s4IWlogal1k8qD802PqtfKEfycmATeuzX7CAg9CF/rJnTpbLl1AsN5Geg==
-----END CERTIFICATE-----