Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4f4d7d9-f0d7-43a9-89bd-c170c8f2bccc.roa
File:                     f4f4d7d9-f0d7-43a9-89bd-c170c8f2bccc.roa (raw, json)
Hash identifier:          YtfyxupjN9NZDZYnuhHQeRPMwg/4e2Cn712YST7ze7E=
Subject key identifier:   94:C4:54:E9:1E:52:E8:8F:FF:3A:52:83:C6:BF:7D:0B:BE:88:A5:4A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1414EC18B8B38B9116D8B51C411C0B7C5D1BEE94
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4f4d7d9-f0d7-43a9-89bd-c170c8f2bccc.roa
Signing time:             Fri 17 Oct 2025 00:22:54 +0000
ROA not before:           Fri 17 Oct 2025 00:22:54 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        107.21.192.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:14:ec:18:b8:b3:8b:91:16:d8:b5:1c:41:1c:0b:7c:5d:1b:ee:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 00:22:54 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=649bd51d634f455c56b2aeceb26a5cf1e5369e305d030085b2684b23a164cf6d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0a:4d:06:ff:93:1b:95:39:05:bc:ca:67:47:
                    cb:e1:d8:31:f2:93:13:34:00:77:b6:ea:f9:dd:9b:
                    fa:63:42:ed:a2:22:89:4e:59:c1:51:49:fa:56:e6:
                    5d:9c:ff:fc:70:44:38:d4:1c:cf:5a:b4:49:43:aa:
                    b2:f5:a2:d4:bb:60:d8:22:41:24:e4:99:08:ac:ed:
                    da:d4:9f:32:68:1f:ce:59:25:4b:f1:02:9a:43:16:
                    41:90:0b:98:79:c8:67:ee:a3:48:06:e9:85:6e:12:
                    9e:3c:52:50:26:75:9e:00:9f:60:a2:34:73:c9:65:
                    ab:48:14:39:b8:3c:ae:30:73:c7:71:8a:c3:57:42:
                    af:6f:ec:be:44:5c:3b:d5:28:d9:b1:cc:df:18:e7:
                    3f:42:c3:49:fb:e1:0e:39:b9:dd:85:9c:05:a6:3f:
                    3d:8c:4b:22:44:77:75:e3:bf:01:f5:5b:5e:52:3e:
                    43:71:99:48:1e:09:99:70:34:af:36:9f:dd:7d:68:
                    bf:29:52:af:3c:0e:0c:74:92:39:8f:93:ea:15:a6:
                    00:3c:b7:b5:c3:db:3c:1d:b4:7f:84:a5:a7:1b:19:
                    4d:f2:ce:2d:2b:d9:d3:68:bd:a2:9a:ae:27:15:58:
                    7e:dc:51:81:d3:4e:20:74:db:51:70:1b:0c:a1:ad:
                    ed:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C4:54:E9:1E:52:E8:8F:FF:3A:52:83:C6:BF:7D:0B:BE:88:A5:4A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4f4d7d9-f0d7-43a9-89bd-c170c8f2bccc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.21.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3d:2f:02:86:29:c0:32:cb:a1:ce:a8:05:19:47:8e:f5:48:a1:
         ab:a9:01:9e:8e:05:f8:c5:25:44:87:13:89:bb:16:7f:01:d7:
         4d:f3:a1:d0:8c:2f:23:1c:cd:80:e6:7e:b7:f0:65:d8:7c:aa:
         58:f0:4c:45:85:ea:57:91:84:b2:e3:e7:af:f1:70:6c:75:c5:
         03:76:e2:8b:93:7c:ec:ca:e1:f2:38:ec:98:45:05:bb:76:b3:
         e8:90:0a:6b:63:ef:ab:78:21:de:fd:10:32:7a:13:7f:e2:0a:
         64:99:29:57:86:7a:51:48:64:89:7b:ac:21:42:2f:fe:9c:33:
         83:ae:06:58:fe:d5:b3:d3:d0:f4:b2:1a:6f:43:18:1e:ea:d5:
         eb:31:a0:cf:e2:7a:38:59:5e:a2:04:86:a0:1b:9f:86:6b:bd:
         9e:27:22:8a:79:3d:20:74:7d:92:2d:29:de:0b:66:83:3d:65:
         be:73:13:4a:ec:d4:d5:b8:3d:bf:ee:56:ba:35:92:54:5f:fc:
         bc:f2:4d:08:f5:1e:5c:ea:12:6d:f1:e7:61:56:53:c8:f0:3e:
         a3:79:a9:3d:bb:26:c2:9f:7f:93:d9:ac:85:fc:5f:5f:88:a0:
         35:57:fa:55:94:72:97:85:c7:61:e0:db:f2:50:d4:5e:f8:03:
         08:ed:48:08
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFBTsGLizi5EW2LUcQRwLfF0b7pQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE3MDAyMjU0WhcNMjUxMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A2NDliZDUxZDYzNGY0NTVjNTZiMmFlY2ViMjZhNWNmMWU1
MzY5ZTMwNWQwMzAwODViMjY4NGIyM2ExNjRjZjZkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDgCk0G/5MblTkFvMpnR8vh2DHykxM0AHe26vndm/pjQu2i
IolOWcFRSfpW5l2c//xwRDjUHM9atElDqrL1otS7YNgiQSTkmQis7drUnzJoH85Z
JUvxAppDFkGQC5h5yGfuo0gG6YVuEp48UlAmdZ4An2CiNHPJZatIFDm4PK4wc8dx
isNXQq9v7L5EXDvVKNmxzN8Y5z9Cw0n74Q45ud2FnAWmPz2MSyJEd3XjvwH1W15S
PkNxmUgeCZlwNK82n919aL8pUq88Dgx0kjmPk+oVpgA8t7XD2zwdtH+EpacbGU3y
zi0r2dNovaKaricVWH7cUYHTTiB021FwGwyhre0jAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUlMRU6R5S6I//OlKDxr99C76IpUowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y0ZjRkN2Q5LWYwZDctNDNhOS04OWJkLWMxNzBjOGYyYmNjYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBANrFcAwDQYJKoZIhvcNAQELBQADggEBAD0vAoYpwDLLoc6oBRlHjvVIoaup
AZ6OBfjFJUSHE4m7Fn8B103zodCMLyMczYDmfrfwZdh8qljwTEWF6leRhLLj56/x
cGx1xQN24ouTfOzK4fI47JhFBbt2s+iQCmtj76t4Id79EDJ6E3/iCmSZKVeGelFI
ZIl7rCFCL/6cM4OuBlj+1bPT0PSyGm9DGB7q1esxoM/iejhZXqIEhqAbn4ZrvZ4n
Iop5PSB0fZItKd4LZoM9Zb5zE0rs1NW4Pb/uVro1klRf/LzyTQj1HlzqEm3x52FW
U8jwPqN5qT27JsKff5PZrIX8X1+IoDVX+lWUcpeFx2Hg2/JQ1F74AwjtSAg=
-----END CERTIFICATE-----