Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6df0939-7cc3-4196-b4ea-d41d4fb4431a.roa
File:                     f6df0939-7cc3-4196-b4ea-d41d4fb4431a.roa (raw, json)
Hash identifier:          Gxhi/5zdPTGbG6sh/8E1nPIjSOzgPtxHjbjKkMalD/I=
Subject key identifier:   C0:07:C6:FF:B2:CA:F9:B6:B3:18:84:80:C9:94:4F:7D:8E:27:16:FF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4E5AC6AC492F4B0AB7BDA0BC01E07A878E5BBB9D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6df0939-7cc3-4196-b4ea-d41d4fb4431a.roa
Signing time:             Sat 18 Oct 2025 02:20:04 +0000
ROA not before:           Sat 18 Oct 2025 02:20:04 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        216.182.232.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:5a:c6:ac:49:2f:4b:0a:b7:bd:a0:bc:01:e0:7a:87:8e:5b:bb:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 02:20:04 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=21888bf7c2789fd858e951850e99bbf50420b98ad5db7eaddce5c6c13f015117, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2f:ca:ca:29:ac:aa:72:b5:ad:ba:7f:33:60:
                    6d:3e:9f:90:88:bc:dc:83:bf:2c:48:9f:79:5e:f8:
                    02:08:b6:36:99:a5:1b:03:97:aa:c4:e4:8c:f7:c7:
                    6f:2e:8a:ca:cc:2d:81:21:fa:ab:9d:d3:7e:e2:89:
                    b7:fa:9f:11:40:9c:1f:a5:09:9f:52:07:6a:e7:6b:
                    5f:5e:09:13:44:9a:ee:5b:a6:d1:94:ed:1f:1b:e9:
                    2c:ff:01:ce:fc:29:30:bd:7d:21:07:05:17:50:4a:
                    1d:a4:68:d2:bf:d3:cd:44:a2:fa:b9:fe:bf:78:1c:
                    b1:21:8f:3d:bc:44:ad:e5:38:09:d1:79:ed:8b:c5:
                    08:25:0a:1d:e8:e0:e0:b1:fc:ef:1c:52:d4:30:6b:
                    3d:0c:32:dc:72:c7:e8:ff:06:89:4f:44:bc:c6:ce:
                    74:1a:4f:92:2d:d8:09:53:57:74:be:a7:42:d8:af:
                    4f:5b:d8:2e:6e:68:9a:3f:61:a0:52:b1:d4:af:db:
                    14:5d:ff:f9:31:3f:00:ac:2b:ae:c1:ea:d6:b7:3a:
                    be:e4:a0:a1:39:2a:db:6e:bb:bb:5f:84:4f:24:11:
                    33:42:10:ae:dd:50:66:b9:45:17:db:c2:35:b6:2a:
                    0a:18:cc:e5:49:85:c2:e7:5e:07:f0:69:7b:5d:e2:
                    8d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:07:C6:FF:B2:CA:F9:B6:B3:18:84:80:C9:94:4F:7D:8E:27:16:FF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6df0939-7cc3-4196-b4ea-d41d4fb4431a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.182.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:90:7a:56:e5:c5:61:35:89:10:71:b4:59:aa:64:ce:97:06:
         49:b4:1b:65:c3:7d:3e:81:73:08:7f:c1:b4:67:6b:82:9b:54:
         71:78:62:3a:9c:2d:23:c2:fc:61:46:c3:c7:ee:08:4c:88:13:
         ef:d2:4b:4a:58:cc:01:d8:fe:5b:ff:f3:53:00:4d:d8:f5:13:
         69:f9:b6:2d:6f:04:b2:59:18:1a:3a:42:a0:69:e2:1b:45:57:
         03:af:68:6c:27:2e:f4:c0:74:29:e9:f7:04:03:31:7b:95:e9:
         9b:5c:f5:03:5b:f7:b9:80:82:a9:f6:88:b7:1f:ff:bb:ab:fa:
         74:fa:4c:8e:dc:27:13:87:44:74:21:3f:b7:ef:bf:cc:c9:dc:
         68:f5:92:12:75:1a:40:92:7f:19:5f:71:15:92:3e:52:b1:ac:
         a2:18:d4:0c:e6:1f:ca:3e:d5:1c:f6:f4:5c:e1:c4:7b:96:c3:
         9f:0b:77:1d:e9:f2:38:41:bb:1a:48:b5:97:db:59:73:61:e3:
         46:60:8c:01:0b:03:e6:4a:13:b5:6e:54:0b:20:63:3a:9d:3f:
         46:82:1c:06:91:15:20:cc:60:8e:10:19:74:45:78:f9:27:94:
         4c:cf:76:cb:7e:c6:9b:cb:27:76:bd:78:e0:5f:fc:c9:47:df:
         db:b3:46:e8
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUTlrGrEkvSwq3vaC8AeB6h45bu50wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDIyMDA0WhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0AyMTg4OGJmN2MyNzg5ZmQ4NThlOTUxODUwZTk5YmJmNTA0
MjBiOThhZDVkYjdlYWRkY2U1YzZjMTNmMDE1MTE3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCoL8rKKayqcrWtun8zYG0+n5CIvNyDvyxIn3le+AIItjaZ
pRsDl6rE5Iz3x28uisrMLYEh+qud037iibf6nxFAnB+lCZ9SB2rna19eCRNEmu5b
ptGU7R8b6Sz/Ac78KTC9fSEHBRdQSh2kaNK/081Eovq5/r94HLEhjz28RK3lOAnR
ee2LxQglCh3o4OCx/O8cUtQwaz0MMtxyx+j/BolPRLzGznQaT5It2AlTV3S+p0LY
r09b2C5uaJo/YaBSsdSv2xRd//kxPwCsK67B6ta3Or7koKE5Kttuu7tfhE8kETNC
EK7dUGa5RRfbwjW2KgoYzOVJhcLnXgfwaXtd4o13AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUwAfG/7LK+bazGISAyZRPfY4nFv8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y2ZGYwOTM5LTdjYzMtNDE5Ni1iNGVhLWQ0MWQ0ZmI0NDMxYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALYtugwDQYJKoZIhvcNAQELBQADggEBADeQelblxWE1iRBxtFmqZM6XBkm0
G2XDfT6Bcwh/wbRna4KbVHF4YjqcLSPC/GFGw8fuCEyIE+/SS0pYzAHY/lv/81MA
Tdj1E2n5ti1vBLJZGBo6QqBp4htFVwOvaGwnLvTAdCnp9wQDMXuV6Ztc9QNb97mA
gqn2iLcf/7ur+nT6TI7cJxOHRHQhP7fvv8zJ3Gj1khJ1GkCSfxlfcRWSPlKxrKIY
1AzmH8o+1Rz29FzhxHuWw58Ldx3p8jhBuxpItZfbWXNh40ZgjAELA+ZKE7VuVAsg
YzqdP0aCHAaRFSDMYI4QGXRFePknlEzPdst+xpvLJ3a9eOBf/MlH39uzRug=
-----END CERTIFICATE-----