Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b31ea54a-9fa1-4e14-a1b3-4b9bd0815871.roa
File:                     b31ea54a-9fa1-4e14-a1b3-4b9bd0815871.roa (raw, json)
Hash identifier:          96sHvGqlc2QeOF+ODJEXo5Yw8ug+7mXJNVsm6Pwo5pI=
Subject key identifier:   A2:89:E6:6D:39:46:49:D1:C9:12:A6:B8:DC:63:78:4B:83:1D:F8:DB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       568B120CA98E66D1C0395E7B5D3B89B59F640A45
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b31ea54a-9fa1-4e14-a1b3-4b9bd0815871.roa
Signing time:             Wed 08 Oct 2025 00:12:51 +0000
ROA not before:           Wed 08 Oct 2025 00:12:51 +0000
ROA not after:            Wed 12 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        56.247.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:8b:12:0c:a9:8e:66:d1:c0:39:5e:7b:5d:3b:89:b5:9f:64:0a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  8 00:12:51 2025 GMT
            Not After : Nov 12 23:59:59 2025 GMT
        Subject: serialNumber=e1b8b9049fc27719ba46cb279c5fa467ae0106af387c150892114ada21a3cee6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f2:0e:ca:ad:94:ce:b2:d3:4b:26:b6:2f:42:
                    29:24:8c:11:28:0b:64:0b:a0:7a:b5:f3:cf:48:95:
                    f4:18:7c:99:c9:4e:83:b0:dc:fc:30:17:af:0e:df:
                    fd:88:ea:b1:12:0f:9f:03:fa:98:d7:d0:02:8e:ed:
                    be:b4:0c:95:1d:38:ca:d8:c1:32:5d:4a:74:8d:2c:
                    b5:d7:b6:b1:17:cc:3a:6c:b1:f7:3c:39:85:99:61:
                    ac:ce:ca:8b:ba:85:e6:63:b4:11:95:39:dd:e2:54:
                    61:c7:2a:9f:01:29:0e:15:d5:5a:dd:17:56:af:fb:
                    db:af:be:78:e6:3a:98:81:2c:8a:39:dc:79:79:52:
                    85:d3:42:a2:a8:46:73:88:d8:69:67:40:1f:61:3d:
                    44:fb:87:43:1c:0c:7a:24:0e:41:a2:24:94:e9:c1:
                    f1:2a:e1:fb:6b:a9:19:ce:bd:42:9c:27:3a:da:b3:
                    8e:d8:20:c7:82:61:f1:fa:14:41:b3:dd:59:76:ff:
                    2d:96:d6:5d:b7:b4:24:2c:e0:88:eb:0c:61:be:ef:
                    c4:1e:2c:5e:79:a5:54:ae:b7:85:98:1a:5d:db:31:
                    d9:ce:d4:48:07:ed:83:91:a1:d8:74:89:a9:68:31:
                    4b:33:c3:e9:e0:ca:43:89:f8:0a:93:db:ca:96:74:
                    84:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:89:E6:6D:39:46:49:D1:C9:12:A6:B8:DC:63:78:4B:83:1D:F8:DB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b31ea54a-9fa1-4e14-a1b3-4b9bd0815871.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.247.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bc:f0:eb:ed:ac:c9:af:9a:83:d1:b3:92:ee:86:2b:3b:28:1c:
         37:76:b4:05:28:4d:7a:cb:51:b5:60:3c:6e:55:db:37:b7:66:
         37:b3:22:40:48:64:19:d3:b8:08:2a:37:1e:17:53:5b:0c:40:
         7c:41:78:ac:c9:61:0e:41:ed:52:45:72:4d:72:12:0f:1d:dd:
         89:a6:69:06:88:14:8f:00:57:03:46:a6:ac:59:52:50:79:10:
         8a:17:8b:7f:5e:f5:b6:2b:33:45:3b:d8:22:91:2a:cd:c3:6a:
         73:31:0a:a0:23:35:98:81:ad:96:d9:4c:16:6f:0c:e7:9d:5a:
         b6:66:8d:4d:7d:f5:fb:22:a5:73:8f:1d:12:9f:84:ec:41:a2:
         12:6a:30:82:a0:83:b8:25:71:5c:9d:fc:db:37:22:f6:58:97:
         4d:53:f9:c9:19:59:48:3c:87:00:db:ca:ac:a1:47:95:3f:22:
         fa:e4:13:09:f4:ad:de:ac:ec:e7:cf:bc:9a:18:78:85:0d:91:
         c0:29:47:04:a2:8c:fe:9b:d6:11:86:98:ff:8d:96:98:cb:5e:
         36:1e:31:a2:5d:31:38:2d:bd:91:cb:41:ae:99:89:7d:67:14:
         c2:26:0d:25:fa:b5:ff:a2:01:89:3c:70:81:3b:c1:ec:0f:15:
         86:c2:d6:00
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUVosSDKmOZtHAOV57XTuJtZ9kCkUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDA4MDAxMjUxWhcNMjUxMTEyMjM1OTU5
WjB6MUkwRwYDVQQFE0BlMWI4YjkwNDlmYzI3NzE5YmE0NmNiMjc5YzVmYTQ2N2Fl
MDEwNmFmMzg3YzE1MDg5MjExNGFkYTIxYTNjZWU2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDI8g7KrZTOstNLJrYvQikkjBEoC2QLoHq1889IlfQYfJnJ
ToOw3PwwF68O3/2I6rESD58D+pjX0AKO7b60DJUdOMrYwTJdSnSNLLXXtrEXzDps
sfc8OYWZYazOyou6heZjtBGVOd3iVGHHKp8BKQ4V1VrdF1av+9uvvnjmOpiBLIo5
3Hl5UoXTQqKoRnOI2GlnQB9hPUT7h0McDHokDkGiJJTpwfEq4ftrqRnOvUKcJzra
s47YIMeCYfH6FEGz3Vl2/y2W1l23tCQs4IjrDGG+78QeLF55pVSut4WYGl3bMdnO
1EgH7YORodh0ialoMUszw+ngykOJ+AqT28qWdIQpAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUoonmbTlGSdHJEqa43GN4S4Md+NswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2IzMWVhNTRhLTlmYTEtNGUxNC1hMWIzLTRiOWJkMDgxNTg3MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA49zANBgkqhkiG9w0BAQsFAAOCAQEAvPDr7azJr5qD0bOS7oYrOygcN3a0
BShNestRtWA8blXbN7dmN7MiQEhkGdO4CCo3HhdTWwxAfEF4rMlhDkHtUkVyTXIS
Dx3diaZpBogUjwBXA0amrFlSUHkQiheLf171tiszRTvYIpEqzcNqczEKoCM1mIGt
ltlMFm8M551atmaNTX31+yKlc48dEp+E7EGiEmowgqCDuCVxXJ382zci9liXTVP5
yRlZSDyHANvKrKFHlT8i+uQTCfSt3qzs58+8mhh4hQ2RwClHBKKM/pvWEYaY/42W
mMteNh4xol0xOC29kctBrpmJfWcUwiYNJfq1/6IBiTxwgTvB7A8VhsLWAA==
-----END CERTIFICATE-----