Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c1a2429-b39a-4548-aedd-8ef5294cb264.roa
File:                     3c1a2429-b39a-4548-aedd-8ef5294cb264.roa (raw, json)
Hash identifier:          z9FKkVFgDHuc72tW4CFV8gxw6lTV8mJ76oZMfRtkKDo=
Subject key identifier:   51:B3:C3:6A:0F:85:11:CE:40:14:91:06:1C:F3:A9:F5:C8:78:43:11
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2C20F4B4BC68DCBC0ED37EBD0297E782DACA1438
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c1a2429-b39a-4548-aedd-8ef5294cb264.roa
Signing time:             Sat 27 Sep 2025 00:40:40 +0000
ROA not before:           Sat 27 Sep 2025 00:40:40 +0000
ROA not after:            Sat 01 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        77.112.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:20:f4:b4:bc:68:dc:bc:0e:d3:7e:bd:02:97:e7:82:da:ca:14:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 27 00:40:40 2025 GMT
            Not After : Nov  1 23:59:59 2025 GMT
        Subject: serialNumber=96773d35a5d1f6a8884c7e52cf89360a38e304043a38c0d64bab1811bc73f6df, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b9:42:c0:bb:df:b6:b3:3f:fa:e7:26:5c:85:
                    95:46:21:52:be:b5:d0:ce:76:d8:bc:07:43:31:58:
                    40:5d:5b:1f:34:f3:10:f8:7f:e4:61:f7:3e:96:ec:
                    95:ad:cb:67:ef:6e:f2:40:29:73:e3:73:7f:01:c1:
                    40:23:b5:30:fd:57:15:87:c4:4f:bf:a5:30:c4:91:
                    ba:63:c2:a1:fe:1f:18:49:5f:bc:af:e2:35:07:bf:
                    b3:4f:8d:67:c8:2f:ee:71:5b:77:3e:0a:5c:a4:20:
                    7a:c2:b1:fd:94:52:6a:23:0d:63:dc:55:46:ee:40:
                    2f:36:38:79:c2:9d:4b:b3:69:a5:28:f4:6b:98:28:
                    f6:c2:6e:b6:7b:8c:3e:34:8c:9c:5e:0c:3d:39:84:
                    61:73:e4:32:4d:1d:95:96:8a:9f:15:22:a2:64:87:
                    ff:27:59:94:7c:75:98:82:30:07:96:f8:6e:09:5a:
                    5d:22:e3:49:b9:a6:a0:d5:c9:16:f6:d4:1a:f4:5f:
                    15:cd:23:9a:14:57:76:83:00:95:25:60:5b:3d:8c:
                    4a:f0:ff:56:8f:c1:c1:5a:80:c1:d1:89:cc:4a:ab:
                    d5:6b:4d:fa:d7:70:e7:56:27:96:65:3e:d9:68:7a:
                    07:1e:d5:1e:12:d6:00:a9:40:c8:e2:14:7c:42:ff:
                    85:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B3:C3:6A:0F:85:11:CE:40:14:91:06:1C:F3:A9:F5:C8:78:43:11
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c1a2429-b39a-4548-aedd-8ef5294cb264.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.112.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         43:f8:17:a1:d4:c4:46:f8:6e:0c:39:1d:7a:48:2a:2d:51:de:
         7f:4a:88:f2:63:32:9f:17:fd:11:da:b2:8c:60:57:04:6f:fe:
         a9:b6:17:dc:34:b0:1d:1c:3c:a4:d8:40:e1:96:b1:b3:f1:e0:
         0e:5a:c0:77:2d:f6:b2:4d:88:cf:23:f7:19:15:2b:23:48:e7:
         01:03:15:63:e9:fe:89:97:fb:fa:5a:16:cc:20:1b:bd:36:4b:
         b5:af:b7:ec:59:79:f8:18:d1:0e:54:57:96:5c:13:4e:cb:cb:
         fa:81:5c:35:bf:de:49:fd:a5:f1:a0:d1:1e:5d:7f:77:5b:82:
         7e:58:8f:2e:c1:6a:fd:20:69:ac:d3:26:a4:98:04:6e:18:cf:
         54:4e:f0:b9:f3:d6:8a:52:a8:af:4f:bb:01:ae:ca:ea:ed:d5:
         9a:77:1a:e5:08:82:71:69:d8:84:0e:f7:ee:7a:03:5c:e1:06:
         bf:27:03:ed:1e:b4:f5:e1:51:2a:3d:2a:46:fb:6a:8c:65:90:
         b0:e1:d3:e6:af:ea:14:e7:bd:95:1c:f0:f6:4c:39:7c:e7:f8:
         43:bd:20:68:3d:cd:63:c9:85:0c:86:95:4e:35:eb:13:80:a2:
         ca:07:18:63:26:b5:4b:59:f3:c7:50:ae:9b:ea:2c:f1:5c:27:
         25:ec:bf:f2
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIULCD0tLxo3LwO0369ApfngtrKFDgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTI3MDA0MDQwWhcNMjUxMTAxMjM1OTU5
WjB6MUkwRwYDVQQFE0A5Njc3M2QzNWE1ZDFmNmE4ODg0YzdlNTJjZjg5MzYwYTM4
ZTMwNDA0M2EzOGMwZDY0YmFiMTgxMWJjNzNmNmRmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCauULAu9+2sz/65yZchZVGIVK+tdDOdti8B0MxWEBdWx80
8xD4f+Rh9z6W7JWty2fvbvJAKXPjc38BwUAjtTD9VxWHxE+/pTDEkbpjwqH+HxhJ
X7yv4jUHv7NPjWfIL+5xW3c+ClykIHrCsf2UUmojDWPcVUbuQC82OHnCnUuzaaUo
9GuYKPbCbrZ7jD40jJxeDD05hGFz5DJNHZWWip8VIqJkh/8nWZR8dZiCMAeW+G4J
Wl0i40m5pqDVyRb21Br0XxXNI5oUV3aDAJUlYFs9jErw/1aPwcFagMHRicxKq9Vr
TfrXcOdWJ5ZlPtloegce1R4S1gCpQMjiFHxC/4UvAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUUbPDag+FEc5AFJEGHPOp9ch4QxEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzNjMWEyNDI5LWIzOWEtNDU0OC1hZWRkLThlZjUyOTRjYjI2NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwJNcDANBgkqhkiG9w0BAQsFAAOCAQEAQ/gXodTERvhuDDkdekgqLVHef0qI
8mMynxf9EdqyjGBXBG/+qbYX3DSwHRw8pNhA4Zaxs/HgDlrAdy32sk2IzyP3GRUr
I0jnAQMVY+n+iZf7+loWzCAbvTZLta+37Fl5+BjRDlRXllwTTsvL+oFcNb/eSf2l
8aDRHl1/d1uCfliPLsFq/SBprNMmpJgEbhjPVE7wufPWilKor0+7Aa7K6u3Vmnca
5QiCcWnYhA737noDXOEGvycD7R609eFRKj0qRvtqjGWQsOHT5q/qFOe9lRzw9kw5
fOf4Q70gaD3NY8mFDIaVTjXrE4CiygcYYya1S1nzx1Cum+os8VwnJey/8g==
-----END CERTIFICATE-----