Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a07397dc-3051-482a-957d-ed3a4c2859b6.roa
File:                     a07397dc-3051-482a-957d-ed3a4c2859b6.roa (raw, json)
Hash identifier:          2mF9Ysy36BMwEqXjk41Tc/6iTR+f80TUT+LiKWIFPDM=
Subject key identifier:   3E:5E:53:20:4D:1E:05:9E:0C:BB:96:41:7C:6F:9B:D3:50:99:69:74
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       317E3EDB95166B7251AAB51CBCF2FDED2AC6C0C7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a07397dc-3051-482a-957d-ed3a4c2859b6.roa
Signing time:             Wed 08 Oct 2025 00:23:01 +0000
ROA not before:           Wed 08 Oct 2025 00:23:01 +0000
ROA not after:            Wed 12 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        98.80.0.0/13 maxlen: 13
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:7e:3e:db:95:16:6b:72:51:aa:b5:1c:bc:f2:fd:ed:2a:c6:c0:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  8 00:23:01 2025 GMT
            Not After : Nov 12 23:59:59 2025 GMT
        Subject: serialNumber=72b6a77d31a45c82f1ece9118b8cda0f6fc21073bb4080c16a677e8744f7633d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:75:c2:66:97:09:4d:8d:66:ef:d8:9b:df:5d:
                    19:ea:75:0b:d2:97:1c:86:0a:99:ef:0e:ea:f7:5b:
                    54:36:06:1f:b7:94:de:c8:4b:b9:97:c8:1d:3f:7b:
                    0d:19:db:dc:9e:97:4e:73:a2:3e:c4:32:26:7b:85:
                    71:88:55:63:72:80:25:38:92:72:b4:54:52:85:21:
                    ae:5a:3f:71:ee:17:1f:17:a7:0e:d4:cb:27:fd:18:
                    16:79:fa:0e:10:dc:89:d6:19:d6:44:8f:78:03:39:
                    6e:b7:a6:bc:3a:09:34:a5:73:27:91:f9:39:12:26:
                    2a:b8:b4:bd:51:f9:6d:35:70:2e:95:85:ff:5d:cc:
                    0e:5a:35:ac:90:e7:9e:00:3f:2a:3e:d5:55:33:de:
                    66:ce:02:51:34:f7:80:2c:15:d1:5d:af:4a:c6:59:
                    48:c6:fd:96:1c:6e:93:76:81:b3:6e:3d:4f:6a:12:
                    4a:46:80:50:58:d1:60:16:96:bc:7d:6a:12:98:e9:
                    0a:6e:cf:02:c0:d1:a5:8a:1a:97:5e:ca:ed:d0:ec:
                    4d:0e:ac:59:d5:cf:bd:16:47:27:74:ba:e4:76:05:
                    ea:27:d6:b4:28:68:ab:4d:8a:31:ca:9d:a7:f7:57:
                    0e:1c:92:50:c2:35:08:26:e7:45:2b:78:e6:65:a3:
                    dc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:5E:53:20:4D:1E:05:9E:0C:BB:96:41:7C:6F:9B:D3:50:99:69:74
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a07397dc-3051-482a-957d-ed3a4c2859b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.80.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         3e:b5:b6:1f:95:1d:f3:35:58:52:20:19:35:40:48:cb:17:72:
         b4:45:c4:7c:d4:2e:23:43:51:53:d6:e2:02:2d:5c:ec:d1:2a:
         cc:f6:e0:97:d8:2c:4b:a0:4e:9b:cc:61:b3:12:fa:b1:f4:7c:
         9b:fb:0c:c6:21:7d:d8:f3:ff:68:9e:57:11:1c:e4:3b:fc:df:
         9d:ea:0c:78:43:f3:b1:29:c2:3e:f8:90:91:4a:1e:3f:83:a2:
         ff:a1:aa:b0:ee:6c:5a:f4:c3:e5:ce:d1:42:48:54:a7:fa:b3:
         88:d5:14:b1:bf:81:92:82:92:ee:79:a1:e3:5e:07:59:28:c4:
         a1:67:81:d6:ea:4c:2f:7b:6b:f7:8b:8e:3a:17:d1:da:c6:c0:
         e0:84:2c:ea:5e:63:a4:cf:e5:7e:e7:de:74:44:21:8d:99:d0:
         84:fc:a5:db:f8:7b:ca:50:7e:35:68:0f:e4:bd:89:7d:d0:83:
         ea:18:47:40:04:2b:fa:57:0e:75:5d:d2:6a:cb:ce:df:45:05:
         d5:7e:c4:31:e1:0a:39:1b:35:c1:1c:e5:b9:59:27:69:d4:1e:
         90:ca:e8:55:4f:a7:67:7a:38:4a:64:2f:3f:9f:36:46:83:9f:
         33:ff:f8:2c:1f:9b:26:75:ce:e3:e0:86:76:1e:f8:9e:e4:94:
         1b:50:3f:7c
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUMX4+25UWa3JRqrUcvPL97SrGwMcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDA4MDAyMzAxWhcNMjUxMTEyMjM1OTU5
WjB6MUkwRwYDVQQFE0A3MmI2YTc3ZDMxYTQ1YzgyZjFlY2U5MTE4YjhjZGEwZjZm
YzIxMDczYmI0MDgwYzE2YTY3N2U4NzQ0Zjc2MzNkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC0dcJmlwlNjWbv2JvfXRnqdQvSlxyGCpnvDur3W1Q2Bh+3
lN7IS7mXyB0/ew0Z29yel05zoj7EMiZ7hXGIVWNygCU4knK0VFKFIa5aP3HuFx8X
pw7Uyyf9GBZ5+g4Q3InWGdZEj3gDOW63prw6CTSlcyeR+TkSJiq4tL1R+W01cC6V
hf9dzA5aNayQ554APyo+1VUz3mbOAlE094AsFdFdr0rGWUjG/ZYcbpN2gbNuPU9q
EkpGgFBY0WAWlrx9ahKY6QpuzwLA0aWKGpdeyu3Q7E0OrFnVz70WRyd0uuR2Beon
1rQoaKtNijHKnaf3Vw4cklDCNQgm50UreOZlo9ztAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUPl5TIE0eBZ4Mu5ZBfG+b01CZaXQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2EwNzM5N2RjLTMwNTEtNDgyYS05NTdkLWVkM2E0YzI4NTliNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwNiUDANBgkqhkiG9w0BAQsFAAOCAQEAPrW2H5Ud8zVYUiAZNUBIyxdytEXE
fNQuI0NRU9biAi1c7NEqzPbgl9gsS6BOm8xhsxL6sfR8m/sMxiF92PP/aJ5XERzk
O/zfneoMeEPzsSnCPviQkUoeP4Oi/6GqsO5sWvTD5c7RQkhUp/qziNUUsb+BkoKS
7nmh414HWSjEoWeB1upML3tr94uOOhfR2sbA4IQs6l5jpM/lfufedEQhjZnQhPyl
2/h7ylB+NWgP5L2JfdCD6hhHQAQr+lcOdV3SasvO30UF1X7EMeEKORs1wRzluVkn
adQekMroVU+nZ3o4SmQvP582RoOfM//4LB+bJnXO4+CGdh74nuSUG1A/fA==
-----END CERTIFICATE-----