Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/210b8422-48d5-4f34-b821-4a72f419973a.roa
File:                     210b8422-48d5-4f34-b821-4a72f419973a.roa (raw, json)
Hash identifier:          VZ/Eno2EZno4Wy1oLd0a0MPQ9nqSsKfmxT8oQTpMEmk=
Subject key identifier:   2F:EE:57:B4:CC:61:B8:3F:63:37:3E:0F:B5:04:55:90:57:D4:82:66
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1D68BD1085E22C4A9B4D6F13A4AABF9AF07886FD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/210b8422-48d5-4f34-b821-4a72f419973a.roa
Signing time:             Thu 13 Nov 2025 00:50:06 +0000
ROA not before:           Thu 13 Nov 2025 00:50:06 +0000
ROA not after:            Thu 18 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.39.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:68:bd:10:85:e2:2c:4a:9b:4d:6f:13:a4:aa:bf:9a:f0:78:86:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 13 00:50:06 2025 GMT
            Not After : Dec 18 23:59:59 2025 GMT
        Subject: serialNumber=5675284b60a1c249113c85a3027bef2c05526c04000456a67accfa7d5962b7fd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dc:b0:0e:6f:06:dd:6f:66:6c:cc:eb:9a:51:
                    1e:e8:3e:1a:60:43:db:c1:c3:80:3c:57:ee:14:39:
                    2d:aa:ae:45:52:0c:34:48:4e:e3:79:32:29:a8:46:
                    97:5c:10:e9:90:e4:24:8f:b0:14:11:35:89:7e:8c:
                    0e:28:86:70:ce:14:c8:1c:b9:5d:b3:7c:61:92:33:
                    7e:e2:2b:6d:ce:b5:5f:98:7b:82:78:e2:f3:d7:2f:
                    f0:b4:26:b8:88:cb:9b:be:ed:50:f2:a0:e5:d2:08:
                    36:39:5c:61:b7:ec:8f:32:16:a0:94:ae:22:d1:34:
                    6f:ba:3c:08:43:b2:64:35:b4:61:1e:3d:95:e4:63:
                    9f:60:d0:46:3d:8f:41:f5:c3:67:c6:27:9f:e3:f7:
                    99:87:75:09:fd:09:15:8f:5b:8e:46:92:fb:3a:96:
                    ff:e0:ba:80:67:4d:4f:c2:5c:6d:a5:7e:57:5b:cc:
                    9d:13:69:24:97:c6:3f:03:3d:2a:27:3b:f9:90:45:
                    0a:ae:b4:5a:28:90:63:72:64:eb:b6:fd:53:2b:bb:
                    63:f9:96:a3:bd:5e:16:e4:03:69:a7:3d:2e:63:b4:
                    2f:a6:70:1f:af:ec:4d:1c:b1:2e:86:f7:39:0c:c3:
                    4f:89:28:8a:50:d1:4a:3b:3d:77:89:d6:b4:8e:a2:
                    19:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:EE:57:B4:CC:61:B8:3F:63:37:3E:0F:B5:04:55:90:57:D4:82:66
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/210b8422-48d5-4f34-b821-4a72f419973a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.39.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0b:65:65:a8:3c:3e:64:d2:f8:4e:b8:64:69:71:23:70:f6:9b:
         ed:16:09:4e:14:ba:d6:bb:fe:42:ef:20:d7:8d:e5:3f:c4:bf:
         a1:72:57:fc:3a:d4:38:b8:cd:b7:0c:b1:5e:0c:61:75:67:60:
         b4:6b:a7:df:ac:3d:c2:7d:b0:36:26:fa:ae:e9:62:1b:f9:1b:
         fb:d4:9b:0b:a2:db:d6:5b:ae:ce:22:d4:bd:ee:1f:82:20:c9:
         66:9b:54:c2:ce:d9:9f:51:62:cd:20:c2:72:ef:77:26:bf:fd:
         51:36:d5:82:e9:4c:21:01:5b:7e:75:43:e0:0e:1c:46:d5:fd:
         b9:1b:01:d6:a7:cf:e6:ff:d8:f0:43:f8:4e:cf:71:b2:57:95:
         d5:6b:c0:82:bf:aa:38:3e:2d:7c:25:eb:b0:50:ac:6f:8c:94:
         ec:b2:57:0a:b9:a5:27:94:64:14:72:d3:ab:b2:2f:f4:c9:f2:
         c2:e3:97:00:5d:fd:87:eb:8d:76:44:6f:b6:bf:d7:67:4d:0e:
         cd:9b:77:a7:e1:e8:b1:b1:96:ea:32:65:ca:f2:e6:c5:c8:44:
         e9:e6:64:98:42:f4:04:12:ba:c2:44:99:f6:02:3b:05:d3:14:
         9c:56:e7:26:52:4f:9d:d9:c7:0b:3e:fd:ec:56:5c:47:9f:ea:
         54:66:aa:b8
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUHWi9EIXiLEqbTW8TpKq/mvB4hv0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTEzMDA1MDA2WhcNMjUxMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A1Njc1Mjg0YjYwYTFjMjQ5MTEzYzg1YTMwMjdiZWYyYzA1
NTI2YzA0MDAwNDU2YTY3YWNjZmE3ZDU5NjJiN2ZkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC13LAObwbdb2ZszOuaUR7oPhpgQ9vBw4A8V+4UOS2qrkVS
DDRITuN5MimoRpdcEOmQ5CSPsBQRNYl+jA4ohnDOFMgcuV2zfGGSM37iK23OtV+Y
e4J44vPXL/C0JriIy5u+7VDyoOXSCDY5XGG37I8yFqCUriLRNG+6PAhDsmQ1tGEe
PZXkY59g0EY9j0H1w2fGJ5/j95mHdQn9CRWPW45Gkvs6lv/guoBnTU/CXG2lfldb
zJ0TaSSXxj8DPSonO/mQRQqutFookGNyZOu2/VMru2P5lqO9XhbkA2mnPS5jtC+m
cB+v7E0csS6G9zkMw0+JKIpQ0Uo7PXeJ1rSOohntAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUL+5XtMxhuD9jNz4PtQRVkFfUgmYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzIxMGI4NDIyLTQ4ZDUtNGYzNC1iODIxLTRhNzJmNDE5OTczYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4JzANBgkqhkiG9w0BAQsFAAOCAQEAC2VlqDw+ZNL4TrhkaXEjcPab7RYJ
ThS61rv+Qu8g143lP8S/oXJX/DrUOLjNtwyxXgxhdWdgtGun36w9wn2wNib6ruli
G/kb+9SbC6Lb1luuziLUve4fgiDJZptUws7Zn1FizSDCcu93Jr/9UTbVgulMIQFb
fnVD4A4cRtX9uRsB1qfP5v/Y8EP4Ts9xsleV1WvAgr+qOD4tfCXrsFCsb4yU7LJX
CrmlJ5RkFHLTq7Iv9MnywuOXAF39h+uNdkRvtr/XZ00OzZt3p+HosbGW6jJlyvLm
xchE6eZkmEL0BBK6wkSZ9gI7BdMUnFbnJlJPndnHCz797FZcR5/qVGaquA==
-----END CERTIFICATE-----