Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83c934e0-e04c-4a64-94a4-cd0e5a2b3c90.roa
File:                     83c934e0-e04c-4a64-94a4-cd0e5a2b3c90.roa (raw, json)
Hash identifier:          O29jBd/70DoFNSNsSpeBI169ml+KwvZbN4O/Spf9G0E=
Subject key identifier:   29:6C:2F:00:63:E4:24:F7:00:0F:3C:0C:C5:39:7A:0D:2F:91:BD:32
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1C99A8FC87D689D8B5EEAABBDE525EC0042A3E8F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83c934e0-e04c-4a64-94a4-cd0e5a2b3c90.roa
Signing time:             Thu 13 Nov 2025 00:30:17 +0000
ROA not before:           Thu 13 Nov 2025 00:30:17 +0000
ROA not after:            Thu 18 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        75.101.128.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:99:a8:fc:87:d6:89:d8:b5:ee:aa:bb:de:52:5e:c0:04:2a:3e:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 13 00:30:17 2025 GMT
            Not After : Dec 18 23:59:59 2025 GMT
        Subject: serialNumber=edea51b4b6e836b8d96bb161e578a04385295ec477a6bfcbb0cf6836a9397719, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:54:61:b5:79:fd:14:e4:38:ed:22:e8:86:90:
                    30:1f:76:a0:a3:25:bf:85:ee:03:07:85:cf:ee:fb:
                    1d:3f:19:63:a7:7c:8d:0f:44:9e:e6:e8:d4:3e:c7:
                    06:bc:d3:72:fa:7d:08:9c:a9:b7:92:98:20:99:5c:
                    b3:14:0b:b2:63:e5:9e:6c:dc:b9:db:a8:5e:b1:a1:
                    72:a9:18:77:92:8d:92:3b:a3:07:01:df:2c:fa:61:
                    66:ca:b1:34:ea:0c:4a:8d:ee:ad:85:03:af:96:4f:
                    b9:d6:bc:ed:bf:d3:cb:1e:8b:70:5a:fe:82:7e:e0:
                    4e:dc:62:10:1d:5a:66:e3:fa:db:86:2c:a4:69:4f:
                    48:cc:0d:8b:51:53:93:93:1f:32:7d:d1:96:a1:78:
                    9b:59:f7:8f:ef:89:1a:76:4f:63:58:8f:f5:91:ff:
                    16:d6:1b:3f:37:69:ac:d1:d9:91:cf:f2:16:c1:7a:
                    60:9e:ca:8b:c2:5a:c8:a9:35:88:eb:69:59:9d:34:
                    d4:cf:c7:75:e6:ca:f8:12:be:38:12:67:bb:21:e7:
                    fe:a1:ac:94:dc:83:7d:6c:c9:ce:7a:1d:35:b9:4d:
                    a1:aa:0f:ea:ed:51:90:df:f9:5a:2b:fc:35:22:17:
                    4e:27:2b:e0:4d:57:ca:c6:19:c2:35:1f:db:5d:a1:
                    f9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:6C:2F:00:63:E4:24:F7:00:0F:3C:0C:C5:39:7A:0D:2F:91:BD:32
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83c934e0-e04c-4a64-94a4-cd0e5a2b3c90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.101.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9e:a7:cd:c3:22:d6:b1:e6:10:ca:ff:c7:67:e0:a1:87:ff:00:
         22:88:18:01:eb:cc:7c:15:b0:27:6e:27:31:08:5d:16:b3:28:
         81:97:1f:20:91:f4:e6:32:5e:d5:8f:6e:91:da:fa:5d:46:5a:
         a8:32:f7:58:49:4f:cf:99:e9:7b:0d:d5:de:ee:9f:2b:14:0e:
         13:4d:22:13:f5:0f:86:91:9c:81:21:96:12:a0:4a:d0:d0:1a:
         cf:0a:54:25:38:bc:5f:76:d4:0f:14:3f:81:f5:e5:b3:4b:7b:
         6d:d1:2e:cb:29:ad:5d:1c:68:71:69:03:b1:9a:ff:57:c1:fd:
         e1:98:a4:ca:a3:4c:ba:65:25:94:d9:78:01:f4:85:a9:21:b2:
         3f:ed:bc:0c:55:ba:58:c0:41:21:c2:74:27:1d:90:47:51:af:
         6b:9f:03:3b:8a:98:66:d5:80:b5:e9:b6:5b:56:6e:e1:e0:c8:
         25:1f:1d:6f:4f:fd:fb:b3:a9:0e:8e:c8:dd:1c:14:45:35:04:
         cb:e3:82:95:d5:6d:8c:d0:2d:53:d2:96:fb:cd:63:40:75:1e:
         14:7f:c6:64:99:8c:19:b4:d1:c5:41:b8:aa:d4:b7:aa:5b:52:
         bd:8c:08:24:bc:04:96:c7:e9:53:be:94:5d:79:28:c0:be:a8:
         53:52:39:dc
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUHJmo/IfWidi17qq73lJewAQqPo8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTEzMDAzMDE3WhcNMjUxMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BlZGVhNTFiNGI2ZTgzNmI4ZDk2YmIxNjFlNTc4YTA0Mzg1
Mjk1ZWM0NzdhNmJmY2JiMGNmNjgzNmE5Mzk3NzE5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCLVGG1ef0U5DjtIuiGkDAfdqCjJb+F7gMHhc/u+x0/GWOn
fI0PRJ7m6NQ+xwa803L6fQicqbeSmCCZXLMUC7Jj5Z5s3LnbqF6xoXKpGHeSjZI7
owcB3yz6YWbKsTTqDEqN7q2FA6+WT7nWvO2/08sei3Ba/oJ+4E7cYhAdWmbj+tuG
LKRpT0jMDYtRU5OTHzJ90ZaheJtZ94/viRp2T2NYj/WR/xbWGz83aazR2ZHP8hbB
emCeyovCWsipNYjraVmdNNTPx3XmyvgSvjgSZ7sh5/6hrJTcg31syc56HTW5TaGq
D+rtUZDf+Vor/DUiF04nK+BNV8rGGcI1H9tdofk7AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUKWwvAGPkJPcADzwMxTl6DS+RvTIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzgzYzkzNGUwLWUwNGMtNGE2NC05NGE0LWNkMGU1YTJiM2M5MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAVLZYAwDQYJKoZIhvcNAQELBQADggEBAJ6nzcMi1rHmEMr/x2fgoYf/ACKI
GAHrzHwVsCduJzEIXRazKIGXHyCR9OYyXtWPbpHa+l1GWqgy91hJT8+Z6XsN1d7u
nysUDhNNIhP1D4aRnIEhlhKgStDQGs8KVCU4vF921A8UP4H15bNLe23RLssprV0c
aHFpA7Ga/1fB/eGYpMqjTLplJZTZeAH0hakhsj/tvAxVuljAQSHCdCcdkEdRr2uf
AzuKmGbVgLXptltWbuHgyCUfHW9P/fuzqQ6OyN0cFEU1BMvjgpXVbYzQLVPSlvvN
Y0B1HhR/xmSZjBm00cVBuKrUt6pbUr2MCCS8BJbH6VO+lF15KMC+qFNSOdw=
-----END CERTIFICATE-----