Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2f664cf-8e1a-45a6-8d3b-99d9b7a40e41.roa
File:                     f2f664cf-8e1a-45a6-8d3b-99d9b7a40e41.roa (raw, json)
Hash identifier:          uvWscc0/EaO2qIBaM034iUuRCcLktIjYfqcZZdF8DQc=
Subject key identifier:   01:A1:FE:2D:C0:01:F4:3A:44:C0:43:F2:E9:6B:0A:70:54:B8:29:08
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4CB23CE2F9177027C3D860C7D7A2100A33F6C90A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2f664cf-8e1a-45a6-8d3b-99d9b7a40e41.roa
Signing time:             Mon 29 Sep 2025 15:11:43 +0000
ROA not before:           Mon 29 Sep 2025 15:11:43 +0000
ROA not after:            Mon 03 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        98.88.14.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b2:3c:e2:f9:17:70:27:c3:d8:60:c7:d7:a2:10:0a:33:f6:c9:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 29 15:11:43 2025 GMT
            Not After : Nov  3 23:59:59 2025 GMT
        Subject: serialNumber=b0efd910e77418b2dcd32b0f14ab1114207300fc5361e81c7362fec499351896, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a4:b0:10:c6:79:bd:ca:73:53:98:3e:ad:b6:
                    25:d6:61:b2:5b:ab:65:26:9c:74:70:9b:3f:19:bc:
                    05:16:e6:bf:19:24:38:bd:3b:25:81:c2:e8:b0:2c:
                    a3:2d:eb:c2:64:d0:cf:d3:86:2d:ef:8f:79:92:ad:
                    36:33:d7:d3:73:f7:3f:b3:ee:e7:c1:a1:b6:8b:18:
                    22:c6:19:99:5b:c9:1b:3c:8c:ea:66:61:43:68:81:
                    da:69:65:dc:8e:fc:d0:4d:c5:16:87:36:b2:2d:10:
                    07:f8:83:c3:e9:ab:04:2e:8f:34:09:e8:30:5b:f2:
                    d9:bc:d1:3a:83:0c:62:75:2c:52:fa:6a:ec:90:88:
                    10:97:d3:18:46:85:86:03:ba:81:84:5e:ae:32:2d:
                    94:4d:dc:4c:5f:91:36:0e:a0:9c:88:c6:94:90:86:
                    b3:ee:f7:d6:bf:16:94:7b:69:d9:68:3a:1a:fb:f4:
                    b4:d9:8b:b3:15:0a:f6:71:cc:64:25:36:b9:5a:76:
                    cf:87:4c:a9:84:77:a7:86:f8:ec:6a:a6:42:3e:7d:
                    51:c6:51:1c:3a:95:a8:47:39:e0:d0:5f:31:0b:3e:
                    87:40:9d:34:e8:59:ef:12:8c:30:c5:57:81:52:5a:
                    64:86:03:98:40:ab:88:4d:5b:3b:92:e7:18:83:87:
                    e8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A1:FE:2D:C0:01:F4:3A:44:C0:43:F2:E9:6B:0A:70:54:B8:29:08
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2f664cf-8e1a-45a6-8d3b-99d9b7a40e41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.88.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:fe:25:d2:92:cc:76:14:a4:d9:3e:1a:38:83:87:95:bb:fd:
         b6:25:aa:4e:db:73:c2:77:3f:fc:ce:57:35:05:23:c2:19:13:
         f4:ea:88:8b:54:f6:ac:12:5e:ef:84:61:f8:cf:5f:40:4e:74:
         cc:82:35:a4:e2:1a:f1:10:76:15:41:91:c6:42:b3:60:10:29:
         9f:12:7b:5e:f3:7e:1e:30:5e:55:aa:1c:9c:6c:61:1f:00:e2:
         69:9f:f8:b9:c2:c3:f8:58:da:ec:12:ba:de:63:f0:c8:95:3f:
         c5:6f:7e:60:64:5c:ce:d9:31:8c:84:31:6a:84:ac:6c:af:98:
         a4:e5:e5:23:79:da:db:75:64:22:a5:41:8c:a9:9a:1c:86:e5:
         31:ef:22:4a:4b:02:a4:39:cc:b9:66:3b:d0:7e:22:fb:2e:98:
         52:a5:a6:70:f8:2d:08:af:98:e7:41:3d:bc:5a:bc:29:05:49:
         be:61:b2:f8:65:ec:be:27:f4:2a:30:c3:15:4b:20:a5:ed:4c:
         b3:35:25:f8:e2:39:04:e3:df:8b:d9:45:29:3b:d5:aa:cb:47:
         2c:a4:7f:09:9f:d7:23:b1:a0:bf:47:b4:07:4a:98:37:e5:63:
         55:97:0f:9a:4a:18:29:52:7a:4f:e8:98:d9:1e:72:0b:51:df:
         f5:e0:f7:08
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUTLI84vkXcCfD2GDH16IQCjP2yQowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTI5MTUxMTQzWhcNMjUxMTAzMjM1OTU5
WjB6MUkwRwYDVQQFE0BiMGVmZDkxMGU3NzQxOGIyZGNkMzJiMGYxNGFiMTExNDIw
NzMwMGZjNTM2MWU4MWM3MzYyZmVjNDk5MzUxODk2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDFpLAQxnm9ynNTmD6ttiXWYbJbq2UmnHRwmz8ZvAUW5r8Z
JDi9OyWBwuiwLKMt68Jk0M/Thi3vj3mSrTYz19Nz9z+z7ufBobaLGCLGGZlbyRs8
jOpmYUNogdppZdyO/NBNxRaHNrItEAf4g8PpqwQujzQJ6DBb8tm80TqDDGJ1LFL6
auyQiBCX0xhGhYYDuoGEXq4yLZRN3ExfkTYOoJyIxpSQhrPu99a/FpR7adloOhr7
9LTZi7MVCvZxzGQlNrlads+HTKmEd6eG+OxqpkI+fVHGURw6lahHOeDQXzELPodA
nTToWe8SjDDFV4FSWmSGA5hAq4hNWzuS5xiDh+jxAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUAaH+LcAB9DpEwEPy6WsKcFS4KQgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2YyZjY2NGNmLThlMWEtNDVhNi04ZDNiLTk5ZDliN2E0MGU0MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFiWA4wDQYJKoZIhvcNAQELBQADggEBACH+JdKSzHYUpNk+GjiDh5W7/bYl
qk7bc8J3P/zOVzUFI8IZE/TqiItU9qwSXu+EYfjPX0BOdMyCNaTiGvEQdhVBkcZC
s2AQKZ8Se17zfh4wXlWqHJxsYR8A4mmf+LnCw/hY2uwSut5j8MiVP8VvfmBkXM7Z
MYyEMWqErGyvmKTl5SN52tt1ZCKlQYypmhyG5THvIkpLAqQ5zLlmO9B+IvsumFKl
pnD4LQivmOdBPbxavCkFSb5hsvhl7L4n9CowwxVLIKXtTLM1JfjiOQTj34vZRSk7
1arLRyykfwmf1yOxoL9HtAdKmDflY1WXD5pKGClSek/omNkecgtR3/Xg9wg=
-----END CERTIFICATE-----