Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/334bc486-65fe-46fa-a302-04508210ecdb.roa
File:                     334bc486-65fe-46fa-a302-04508210ecdb.roa (raw, json)
Hash identifier:          Ik0HBpAgpwbDzVOac3bf9lu+Mfuwin3g5OHF5ghb25k=
Subject key identifier:   70:E0:9A:DD:7E:F5:7A:53:08:EF:39:8C:5F:5E:D2:49:B9:77:9E:50
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       79F7A1321ACBCA6AF0267838B677561C473C8B77
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/334bc486-65fe-46fa-a302-04508210ecdb.roa
Signing time:             Tue 11 Nov 2025 02:00:52 +0000
ROA not before:           Tue 11 Nov 2025 02:00:52 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        159.157.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:f7:a1:32:1a:cb:ca:6a:f0:26:78:38:b6:77:56:1c:47:3c:8b:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 02:00:52 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=6ed0b327098a9cecccb81cb48397f4ebae3e2083e5f72da62a7b3aee2efca6fa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:91:42:2a:be:9a:15:04:93:78:8a:2f:95:4d:
                    ce:eb:7a:18:b5:32:40:18:9b:80:61:46:52:50:1b:
                    6f:a2:ca:bd:60:a5:1a:86:6b:d7:bd:96:f3:d1:2f:
                    96:dc:7d:e0:5e:a5:ee:00:88:ed:72:16:c9:47:0b:
                    c6:89:67:a8:f4:27:43:eb:76:92:db:33:82:62:4a:
                    28:49:00:1b:53:5c:32:af:c6:e4:28:1f:0f:64:15:
                    71:64:32:93:b4:9c:3c:64:1e:6f:8b:61:db:49:e6:
                    1d:78:74:0e:da:24:f2:25:32:52:7c:fa:22:f9:74:
                    2a:93:56:d9:ad:23:fb:a9:c5:8f:b4:b2:ee:e6:bc:
                    a9:69:ef:4c:8a:3e:a1:76:cd:18:9b:00:19:9a:5f:
                    8f:24:0f:2e:37:4a:26:ee:40:fe:0e:7b:72:e1:6e:
                    22:2d:ea:61:6d:32:1f:9e:be:60:32:b5:29:ee:33:
                    bb:80:ce:ab:97:e8:d5:14:d1:2c:55:8d:e3:0a:82:
                    7d:91:1e:ff:ad:8f:1e:bc:7b:4d:c3:e0:7a:06:08:
                    47:05:9b:cc:34:79:70:17:27:d5:94:4e:6c:e0:4a:
                    0c:2d:ca:73:d2:69:cc:8e:73:f9:b4:34:aa:8a:dc:
                    2a:09:bb:25:46:34:fe:72:65:2b:6f:71:f2:84:19:
                    1f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E0:9A:DD:7E:F5:7A:53:08:EF:39:8C:5F:5E:D2:49:B9:77:9E:50
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/334bc486-65fe-46fa-a302-04508210ecdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.157.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4b:9b:1f:47:ef:9c:f2:99:42:e9:26:e1:1d:0e:9a:93:5e:fe:
         01:f1:58:16:7d:62:54:49:96:52:2a:be:b2:5c:ce:80:29:16:
         c9:2b:f8:c4:98:85:12:2f:9f:55:27:2e:f6:b7:9f:56:9c:2b:
         5a:ed:af:eb:1a:be:9a:fc:d3:29:7a:03:85:64:48:13:b4:0b:
         22:bf:c7:10:cb:62:43:db:dd:8c:77:9a:3f:16:53:a5:cd:80:
         92:a9:2d:d6:ec:7d:eb:69:44:ef:3e:42:ba:6d:03:67:e5:8a:
         69:99:d5:d9:ab:55:4f:c2:90:ff:b5:62:bb:85:51:b3:6e:94:
         da:e5:e2:6e:61:a9:16:9a:cb:d8:2f:02:57:dc:f8:59:6c:05:
         c7:a6:d0:ed:54:57:24:67:85:4a:7d:06:dc:4d:3f:19:e4:27:
         96:32:d3:6f:00:d4:08:8c:08:b4:36:c8:a5:bd:4a:27:12:60:
         13:08:37:8d:93:7a:70:da:c5:52:55:ad:6d:b1:33:70:e8:03:
         a3:f7:bc:76:15:ff:6e:d4:86:be:4d:c2:eb:69:b3:4f:4a:4a:
         14:24:3c:d5:13:f0:0b:6d:ae:4d:7f:84:00:ea:89:34:28:c3:
         4a:a7:88:cb:b4:f5:e3:8e:50:fc:a8:19:ed:aa:bd:38:0c:13:
         8a:b4:e4:55
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUefehMhrLymrwJng4tndWHEc8i3cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTExMDIwMDUyWhcNMjUxMjE2MjM1OTU5
WjB6MUkwRwYDVQQFE0A2ZWQwYjMyNzA5OGE5Y2VjY2NiODFjYjQ4Mzk3ZjRlYmFl
M2UyMDgzZTVmNzJkYTYyYTdiM2FlZTJlZmNhNmZhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCzkUIqvpoVBJN4ii+VTc7rehi1MkAYm4BhRlJQG2+iyr1g
pRqGa9e9lvPRL5bcfeBepe4AiO1yFslHC8aJZ6j0J0PrdpLbM4JiSihJABtTXDKv
xuQoHw9kFXFkMpO0nDxkHm+LYdtJ5h14dA7aJPIlMlJ8+iL5dCqTVtmtI/upxY+0
su7mvKlp70yKPqF2zRibABmaX48kDy43SibuQP4Oe3LhbiIt6mFtMh+evmAytSnu
M7uAzquX6NUU0SxVjeMKgn2RHv+tjx68e03D4HoGCEcFm8w0eXAXJ9WUTmzgSgwt
ynPSacyOc/m0NKqK3CoJuyVGNP5yZStvcfKEGR/ZAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUcOCa3X71elMI7zmMX17SSbl3nlAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzMzNGJjNDg2LTY1ZmUtNDZmYS1hMzAyLTA0NTA4MjEwZWNkYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCfnTANBgkqhkiG9w0BAQsFAAOCAQEAS5sfR++c8plC6SbhHQ6ak17+AfFY
Fn1iVEmWUiq+slzOgCkWySv4xJiFEi+fVScu9refVpwrWu2v6xq+mvzTKXoDhWRI
E7QLIr/HEMtiQ9vdjHeaPxZTpc2Akqkt1ux962lE7z5Cum0DZ+WKaZnV2atVT8KQ
/7Viu4VRs26U2uXibmGpFprL2C8CV9z4WWwFx6bQ7VRXJGeFSn0G3E0/GeQnljLT
bwDUCIwItDbIpb1KJxJgEwg3jZN6cNrFUlWtbbEzcOgDo/e8dhX/btSGvk3C62mz
T0pKFCQ81RPwC22uTX+EAOqJNCjDSqeIy7T1445Q/KgZ7aq9OAwTirTkVQ==
-----END CERTIFICATE-----