Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83436f15-9744-44ae-bab9-2563f6c055aa.roa
File:                     83436f15-9744-44ae-bab9-2563f6c055aa.roa (raw, json)
Hash identifier:          QE9hMtg2qzFuLcSwD/J1tyb9fYMPAMQNJHTmOgCkzw0=
Subject key identifier:   78:1C:D1:81:60:0F:CA:17:47:80:34:17:79:F8:9B:0B:50:11:AC:35
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       788CDAA42353F438A2F19475B56115A66DB3610C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83436f15-9744-44ae-bab9-2563f6c055aa.roa
Signing time:             Wed 12 Nov 2025 00:21:20 +0000
ROA not before:           Wed 12 Nov 2025 00:21:20 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        204.123.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:8c:da:a4:23:53:f4:38:a2:f1:94:75:b5:61:15:a6:6d:b3:61:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 00:21:20 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=cdbd32d8b2cfdabbeeae542ec0477e6ab2bd05ecf943acdc41f5915d075e8185, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:55:f6:c0:ee:f8:9d:14:ab:1d:92:36:47:01:
                    44:83:12:cc:43:8d:f8:5e:b8:26:b1:81:a8:1c:3e:
                    bf:d4:19:7e:b9:98:a8:d4:be:cc:02:0c:ed:3a:46:
                    c3:04:67:e4:4b:f3:fc:24:c7:09:3e:01:c0:77:8f:
                    06:e4:8c:1a:40:04:ed:b8:3f:bf:10:e3:e6:bb:18:
                    19:46:14:e2:62:09:8a:78:43:7a:db:b4:ec:2b:a4:
                    c7:e6:11:72:cd:11:18:5d:ca:f7:de:18:2b:49:35:
                    ad:35:0f:30:85:8d:3a:03:a6:fb:ff:c2:48:47:c5:
                    d2:ba:ea:64:a9:d6:54:34:02:6d:4c:08:4c:f2:e4:
                    e3:76:31:e9:7c:7f:ec:64:87:35:e7:72:04:b4:91:
                    72:07:53:74:24:e3:4a:a9:b5:29:88:ad:31:3d:e8:
                    cd:f3:50:0c:13:13:81:49:f5:a3:d4:f9:29:2d:52:
                    aa:cb:06:9d:ca:c0:5a:da:4d:6a:e5:06:8e:b9:57:
                    de:d6:44:d6:11:92:b0:d5:98:20:5f:ee:32:c1:f8:
                    b2:b2:71:03:6a:01:e1:ad:10:4c:44:f7:b4:8d:d2:
                    94:75:16:d1:36:45:90:ac:62:41:a2:87:ca:39:89:
                    01:bf:37:47:36:34:86:99:89:9d:83:c3:60:a4:e1:
                    85:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1C:D1:81:60:0F:CA:17:47:80:34:17:79:F8:9B:0B:50:11:AC:35
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83436f15-9744-44ae-bab9-2563f6c055aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.123.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a6:59:27:36:a3:79:6f:70:c0:f8:1b:98:54:e5:b2:83:49:08:
         dc:be:54:e8:09:85:f4:54:95:c0:bf:0d:af:1c:33:db:a3:df:
         33:91:ca:c5:d8:f1:c3:02:84:71:3e:cc:84:4f:38:bc:ba:d3:
         d8:5c:92:31:23:e6:f7:85:21:c3:02:85:42:e5:4c:f1:83:8f:
         d9:fe:7d:3e:58:6a:ce:07:10:72:90:7b:21:c2:fb:2d:81:f4:
         e1:d6:88:6d:9a:50:0a:c9:ef:e3:d6:63:30:26:7d:a4:8f:4d:
         62:e4:25:b2:d6:c5:50:fb:96:12:53:f6:cb:33:ec:60:5e:68:
         0f:0a:32:13:a4:f8:05:d6:ca:5e:37:08:af:c8:eb:94:fa:86:
         02:09:c2:43:19:2f:5f:4e:f7:8f:43:2c:ff:10:d3:a4:09:83:
         93:d1:c3:54:8c:05:bc:f1:1e:f8:3f:72:29:7c:d6:3c:c8:d7:
         f4:00:c2:2a:7b:47:ce:c9:49:ab:38:fd:ef:fd:e1:c6:46:38:
         c0:d0:3a:9e:e2:2e:44:ce:57:ca:1c:9f:76:6e:32:52:d4:25:
         28:6a:db:7f:de:dd:bf:21:b8:b0:75:eb:11:e4:42:00:16:5b:
         3d:c8:1e:49:5f:02:69:fb:75:51:85:70:ea:98:95:85:7a:89:
         b2:17:ce:51
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUeIzapCNT9Dii8ZR1tWEVpm2zYQwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTEyMDAyMTIwWhcNMjUxMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0BjZGJkMzJkOGIyY2ZkYWJiZWVhZTU0MmVjMDQ3N2U2YWIy
YmQwNWVjZjk0M2FjZGM0MWY1OTE1ZDA3NWU4MTg1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDXVfbA7vidFKsdkjZHAUSDEsxDjfheuCaxgagcPr/UGX65
mKjUvswCDO06RsMEZ+RL8/wkxwk+AcB3jwbkjBpABO24P78Q4+a7GBlGFOJiCYp4
Q3rbtOwrpMfmEXLNERhdyvfeGCtJNa01DzCFjToDpvv/wkhHxdK66mSp1lQ0Am1M
CEzy5ON2Mel8f+xkhzXncgS0kXIHU3Qk40qptSmIrTE96M3zUAwTE4FJ9aPU+Skt
UqrLBp3KwFraTWrlBo65V97WRNYRkrDVmCBf7jLB+LKycQNqAeGtEExE97SN0pR1
FtE2RZCsYkGih8o5iQG/N0c2NIaZiZ2Dw2Ck4YWpAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUeBzRgWAPyhdHgDQXefibC1ARrDUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzgzNDM2ZjE1LTk3NDQtNDRhZS1iYWI5LTI1NjNmNmMwNTVhYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDMezANBgkqhkiG9w0BAQsFAAOCAQEAplknNqN5b3DA+BuYVOWyg0kI3L5U
6AmF9FSVwL8Nrxwz26PfM5HKxdjxwwKEcT7MhE84vLrT2FySMSPm94UhwwKFQuVM
8YOP2f59PlhqzgcQcpB7IcL7LYH04daIbZpQCsnv49ZjMCZ9pI9NYuQlstbFUPuW
ElP2yzPsYF5oDwoyE6T4BdbKXjcIr8jrlPqGAgnCQxkvX073j0Ms/xDTpAmDk9HD
VIwFvPEe+D9yKXzWPMjX9ADCKntHzslJqzj97/3hxkY4wNA6nuIuRM5Xyhyfdm4y
UtQlKGrbf97dvyG4sHXrEeRCABZbPcgeSV8Caft1UYVw6piVhXqJshfOUQ==
-----END CERTIFICATE-----