Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d14a4d7f-8307-426c-b2d3-2db8820f25d1.roa
File:                     d14a4d7f-8307-426c-b2d3-2db8820f25d1.roa (raw, json)
Hash identifier:          UMboun5pdtwIiCM5PCe0jgvSjZTJomXuZdc/Ex2W+aU=
Subject key identifier:   76:76:1E:7C:C0:5F:FD:80:35:16:B1:B9:79:77:39:E5:3D:87:62:3B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7FE8F2CB15C27AA1F3C3558004D468B493684489
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d14a4d7f-8307-426c-b2d3-2db8820f25d1.roa
Signing time:             Tue 11 Nov 2025 00:30:10 +0000
ROA not before:           Tue 11 Nov 2025 00:30:10 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        162.120.56.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e8:f2:cb:15:c2:7a:a1:f3:c3:55:80:04:d4:68:b4:93:68:44:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 00:30:10 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=9f53955ef3a233332c7f8c48e48893fdbcfd3562b8e33b86bee74c2b24a13256, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fd:10:08:ef:95:87:13:83:15:d9:1a:ab:ae:
                    c9:88:f7:33:5d:39:ec:a2:24:eb:d2:d2:6d:65:e1:
                    e7:ca:cd:c1:7d:06:b1:56:02:b2:6a:fa:fa:f9:d8:
                    b7:31:f0:52:bc:14:50:e9:90:ea:a3:c5:31:ab:68:
                    10:78:8b:71:d9:92:a9:9c:b3:f8:22:d0:d7:cf:30:
                    03:51:17:a9:aa:aa:27:ab:43:be:bf:8c:8d:4b:47:
                    5d:7d:e0:ef:b3:f0:29:db:a8:a6:ff:94:04:e4:73:
                    86:35:cf:14:bf:6b:63:02:07:75:5c:bc:5a:27:02:
                    41:90:46:ce:9b:33:34:b9:61:8a:ba:13:0a:90:01:
                    ed:9f:1d:9d:be:62:65:99:32:6a:f1:c1:d0:82:31:
                    44:e9:43:5a:11:a1:72:7d:ea:f1:ad:7a:32:f4:66:
                    5d:44:64:47:de:5a:a6:1a:63:a4:2e:ea:1a:64:0b:
                    35:65:0f:1a:62:2e:d4:c5:65:67:cd:ed:31:6f:17:
                    72:b3:ba:78:f9:76:d1:19:b6:f7:d9:79:b7:2e:77:
                    0f:23:aa:1f:3c:eb:a1:3a:7d:d6:32:82:54:7f:c8:
                    da:e1:9c:ef:e7:2e:b1:45:51:8d:d4:74:84:d5:3d:
                    ad:c9:1e:c8:09:1c:76:2c:3c:48:aa:44:7a:40:72:
                    e0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:76:1E:7C:C0:5F:FD:80:35:16:B1:B9:79:77:39:E5:3D:87:62:3B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d14a4d7f-8307-426c-b2d3-2db8820f25d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.120.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b8:81:ea:32:c7:36:95:da:44:bb:05:2f:07:b1:7b:7b:78:19:
         dd:5f:e2:ff:83:15:11:46:b1:12:c9:4e:e5:35:64:8e:7a:d5:
         91:07:14:47:24:cf:38:99:9f:4b:b9:ad:b6:21:d0:0e:7b:40:
         94:18:c9:15:ea:17:ba:2d:c5:60:11:9e:b2:da:cb:20:51:34:
         eb:e6:f5:8a:8d:d6:9d:5a:ed:66:34:16:92:5b:1c:57:d6:74:
         45:a6:6a:39:60:e1:91:d6:c6:06:c8:c2:d6:81:7b:e1:33:ef:
         57:58:64:b4:09:eb:7b:70:b5:94:39:fb:16:ca:cf:58:b2:2f:
         12:ee:d4:29:47:3b:96:2a:db:d4:e2:57:e7:0b:90:0f:6f:2e:
         8b:81:35:15:d3:0c:62:5b:88:d7:97:23:bf:20:89:e4:21:a2:
         92:3d:2f:fd:cc:77:21:e3:66:3d:81:6c:f5:21:5b:43:28:d0:
         d6:7c:58:dd:b7:79:4d:1d:14:ab:54:cb:35:97:9d:5a:9e:13:
         8a:85:7b:78:33:d5:eb:fb:30:29:1e:44:71:15:dc:ce:c6:0d:
         a5:42:af:d7:12:c6:41:24:4c:93:7a:58:54:0b:88:9b:aa:ab:
         1c:3a:3f:64:d4:e1:ed:1d:3a:90:e4:f8:f3:18:f0:6a:fd:ec:
         3e:9c:d6:d3
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUf+jyyxXCeqHzw1WABNRotJNoRIkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTExMDAzMDEwWhcNMjUxMjE2MjM1OTU5
WjB6MUkwRwYDVQQFE0A5ZjUzOTU1ZWYzYTIzMzMzMmM3ZjhjNDhlNDg4OTNmZGJj
ZmQzNTYyYjhlMzNiODZiZWU3NGMyYjI0YTEzMjU2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDX/RAI75WHE4MV2RqrrsmI9zNdOeyiJOvS0m1l4efKzcF9
BrFWArJq+vr52Lcx8FK8FFDpkOqjxTGraBB4i3HZkqmcs/gi0NfPMANRF6mqqier
Q76/jI1LR1194O+z8CnbqKb/lATkc4Y1zxS/a2MCB3VcvFonAkGQRs6bMzS5YYq6
EwqQAe2fHZ2+YmWZMmrxwdCCMUTpQ1oRoXJ96vGtejL0Zl1EZEfeWqYaY6Qu6hpk
CzVlDxpiLtTFZWfN7TFvF3Kzunj5dtEZtvfZebcudw8jqh8866E6fdYyglR/yNrh
nO/nLrFFUY3UdITVPa3JHsgJHHYsPEiqRHpAcuArAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUdnYefMBf/YA1FrG5eXc55T2HYjswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2QxNGE0ZDdmLTgzMDctNDI2Yy1iMmQzLTJkYjg4MjBmMjVkMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAOieDgwDQYJKoZIhvcNAQELBQADggEBALiB6jLHNpXaRLsFLwexe3t4Gd1f
4v+DFRFGsRLJTuU1ZI561ZEHFEckzziZn0u5rbYh0A57QJQYyRXqF7otxWARnrLa
yyBRNOvm9YqN1p1a7WY0FpJbHFfWdEWmajlg4ZHWxgbIwtaBe+Ez71dYZLQJ63tw
tZQ5+xbKz1iyLxLu1ClHO5Yq29TiV+cLkA9vLouBNRXTDGJbiNeXI78gieQhopI9
L/3MdyHjZj2BbPUhW0Mo0NZ8WN23eU0dFKtUyzWXnVqeE4qFe3gz1ev7MCkeRHEV
3M7GDaVCr9cSxkEkTJN6WFQLiJuqqxw6P2TU4e0dOpDk+PMY8Gr97D6c1tM=
-----END CERTIFICATE-----