Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a4c448f-408f-4002-b06a-b0099e5c6ae9.roa
File:                     6a4c448f-408f-4002-b06a-b0099e5c6ae9.roa (raw, json)
Hash identifier:          7I7AlrBE+9Z11EN3qzkL/RP5IcG+UGS4V7ksqxEBc04=
Subject key identifier:   7B:EC:74:44:4A:9F:59:D2:3B:76:0E:E3:B2:23:ED:E3:A5:91:56:7C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       24F3AFA57E44C6FA72CC0EAB3AB7A8DD053D9C4F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a4c448f-408f-4002-b06a-b0099e5c6ae9.roa
Signing time:             Mon 22 Sep 2025 15:20:39 +0000
ROA not before:           Mon 22 Sep 2025 15:20:39 +0000
ROA not after:            Mon 27 Oct 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        107.21.92.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f3:af:a5:7e:44:c6:fa:72:cc:0e:ab:3a:b7:a8:dd:05:3d:9c:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 22 15:20:39 2025 GMT
            Not After : Oct 27 23:59:59 2025 GMT
        Subject: serialNumber=88b71028b4511d47c5ca113a151402940bd927f1028b18a19e34d314bdc07391, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5a:f2:60:03:f0:6d:8f:ef:93:24:ce:fe:1f:
                    5f:f9:27:1c:d4:04:11:83:86:45:aa:68:87:c8:e9:
                    6a:a8:71:24:d2:a4:c1:69:87:a6:7d:20:86:7f:95:
                    07:a3:e0:13:b9:d1:5c:0b:3f:86:ab:f5:e7:38:78:
                    e1:46:d5:2d:c2:d2:4f:57:d8:4c:f2:f2:52:b0:c4:
                    5e:f9:fd:e5:d6:21:31:03:45:c9:3c:68:b1:b8:59:
                    ef:0e:57:59:ad:10:5f:e8:c7:bf:0c:99:ce:3b:47:
                    8d:42:95:8b:5f:0f:4d:e3:9d:17:77:9c:70:b7:23:
                    5a:2f:15:72:4d:3a:b6:34:90:cb:e9:aa:47:28:8d:
                    91:35:06:15:8d:83:67:bf:b3:44:a0:2e:68:5e:d1:
                    eb:6d:54:c1:ee:f0:92:bc:ca:49:83:0b:34:7a:48:
                    9b:4e:d4:72:03:18:3c:02:ec:a0:cc:16:4e:5d:88:
                    ef:c5:d2:10:8c:3b:77:e9:05:f2:4a:18:01:52:c9:
                    4c:a5:ae:03:d3:20:40:6e:a7:de:59:24:28:8d:54:
                    ab:56:2c:e1:b1:ac:3a:4b:85:1d:27:4a:85:6b:b4:
                    08:81:f7:f4:cd:a0:45:9a:14:3b:02:ff:7d:ef:d8:
                    00:f8:bf:bf:85:1c:b3:42:b9:d6:3d:54:11:77:86:
                    78:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EC:74:44:4A:9F:59:D2:3B:76:0E:E3:B2:23:ED:E3:A5:91:56:7C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a4c448f-408f-4002-b06a-b0099e5c6ae9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.21.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:b3:52:db:ff:3b:4b:ff:23:10:78:90:69:d6:f4:5d:aa:b2:
         76:58:ed:5e:10:fc:c2:ed:6a:6c:54:ef:71:2e:81:e5:20:89:
         85:ad:0f:6f:c5:bb:f8:ba:17:f2:0e:1f:1e:75:2f:a0:34:fc:
         14:ff:de:de:41:df:15:08:72:2c:26:18:3b:36:da:48:2f:30:
         ff:c3:9e:40:49:a0:69:49:00:82:be:18:cf:46:d3:19:da:58:
         3f:6b:a9:78:ec:4b:89:6b:69:e0:95:d8:0b:ba:b2:63:16:21:
         c8:39:19:48:2a:e9:d6:c0:73:9f:eb:71:da:74:0a:e3:7b:df:
         1c:79:75:30:b0:56:c2:78:a8:6a:5d:52:96:dc:c0:00:d8:c7:
         ee:b3:96:5e:bf:30:c1:39:77:04:44:79:ce:37:9a:7b:22:ee:
         36:81:ec:0b:d9:43:9d:18:ec:cc:8a:a6:1c:83:7d:12:e7:cc:
         4d:ca:85:c7:09:b4:6b:18:1b:c2:02:b3:60:6c:cb:94:03:8c:
         f5:cb:be:58:c0:20:51:ca:9a:53:50:b9:a3:5a:0a:1c:37:92:
         f6:ae:99:8e:a1:cb:d0:84:7d:09:96:48:94:aa:ec:c2:06:c4:
         b5:7c:2f:c3:fa:c1:9b:bc:c4:04:df:64:c0:f5:2e:58:bf:b4:
         f1:bb:fc:4c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJPOvpX5ExvpyzA6rOreo3QU9nE8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTIyMTUyMDM5WhcNMjUxMDI3MjM1OTU5
WjB6MUkwRwYDVQQFE0A4OGI3MTAyOGI0NTExZDQ3YzVjYTExM2ExNTE0MDI5NDBi
ZDkyN2YxMDI4YjE4YTE5ZTM0ZDMxNGJkYzA3MzkxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC/WvJgA/Btj++TJM7+H1/5JxzUBBGDhkWqaIfI6WqocSTS
pMFph6Z9IIZ/lQej4BO50VwLP4ar9ec4eOFG1S3C0k9X2Ezy8lKwxF75/eXWITED
Rck8aLG4We8OV1mtEF/ox78Mmc47R41ClYtfD03jnRd3nHC3I1ovFXJNOrY0kMvp
qkcojZE1BhWNg2e/s0SgLmhe0ettVMHu8JK8ykmDCzR6SJtO1HIDGDwC7KDMFk5d
iO/F0hCMO3fpBfJKGAFSyUylrgPTIEBup95ZJCiNVKtWLOGxrDpLhR0nSoVrtAiB
9/TNoEWaFDsC/33v2AD4v7+FHLNCudY9VBF3hnjjAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUe+x0REqfWdI7dg7jsiPt46WRVnwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZhNGM0NDhmLTQwOGYtNDAwMi1iMDZhLWIwMDk5ZTVjNmFlOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJrFVwwDQYJKoZIhvcNAQELBQADggEBABmzUtv/O0v/IxB4kGnW9F2qsnZY
7V4Q/MLtamxU73EugeUgiYWtD2/Fu/i6F/IOHx51L6A0/BT/3t5B3xUIciwmGDs2
2kgvMP/DnkBJoGlJAIK+GM9G0xnaWD9rqXjsS4lraeCV2Au6smMWIcg5GUgq6dbA
c5/rcdp0CuN73xx5dTCwVsJ4qGpdUpbcwADYx+6zll6/MME5dwREec43mnsi7jaB
7AvZQ50Y7MyKphyDfRLnzE3KhccJtGsYG8ICs2Bsy5QDjPXLvljAIFHKmlNQuaNa
Chw3kvaumY6hy9CEfQmWSJSq7MIGxLV8L8P6wZu8xATfZMD1Lli/tPG7/Ew=
-----END CERTIFICATE-----