Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ded2ddc1-498d-4dc6-8a20-32553ceafe2a.roa
File:                     ded2ddc1-498d-4dc6-8a20-32553ceafe2a.roa (raw, json)
Hash identifier:          6D1sSp92lyGBHRR+l21Q6wTRZ5K40LNxicgbTlhlp4o=
Subject key identifier:   F1:FC:7D:52:69:C6:5D:77:01:53:EA:C9:85:0D:5D:FA:8E:91:26:CD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0AE57B665EFFA04412144FBF4157C89121273096
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ded2ddc1-498d-4dc6-8a20-32553ceafe2a.roa
Signing time:             Wed 12 Nov 2025 00:21:49 +0000
ROA not before:           Wed 12 Nov 2025 00:21:49 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.228.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e5:7b:66:5e:ff:a0:44:12:14:4f:bf:41:57:c8:91:21:27:30:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 00:21:49 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=06fccfda8bdda8616d8b8787996ee4020284272260395277e4b7c53aecbba948, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a3:b5:c3:d3:4b:7b:88:1d:80:47:28:28:f1:
                    c3:03:29:59:ae:20:1b:78:ec:a9:3a:a0:88:21:72:
                    7c:2a:64:3c:f1:05:6f:f9:72:16:38:f2:36:82:4c:
                    7a:64:2e:69:09:ba:33:bc:da:7c:77:89:60:aa:26:
                    7f:19:37:28:97:7f:21:da:00:6d:0c:f6:83:13:86:
                    a9:53:f5:f2:60:10:79:08:88:46:49:34:6d:d5:14:
                    d0:43:e6:64:44:5d:94:8f:27:09:18:99:5a:b3:97:
                    64:e0:33:d1:3b:95:89:30:6f:63:7e:2e:d3:85:ad:
                    41:4f:1c:95:59:05:9f:2a:23:db:d0:c1:00:43:e9:
                    6d:72:27:02:50:02:4b:2f:e2:86:95:6f:99:9a:70:
                    16:99:3b:61:88:d7:bf:95:6f:3d:3d:78:6e:6e:db:
                    ad:24:ba:0e:fc:5c:74:62:f0:80:41:51:83:0a:08:
                    bb:61:66:2d:b5:a2:2f:32:a7:2a:1f:99:75:ca:38:
                    9c:d3:8f:64:07:7a:bf:33:80:12:8a:30:9a:ba:58:
                    6f:90:ae:41:77:6e:e0:72:91:c0:db:93:1b:64:69:
                    48:c4:de:8f:8d:e1:a2:e9:2d:ed:de:20:d0:36:eb:
                    08:3d:f8:f5:b2:91:6f:8a:aa:8b:33:d5:e7:46:a6:
                    59:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FC:7D:52:69:C6:5D:77:01:53:EA:C9:85:0D:5D:FA:8E:91:26:CD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ded2ddc1-498d-4dc6-8a20-32553ceafe2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.228.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         52:23:7b:b4:51:29:63:86:4b:d5:57:7c:aa:a3:05:ca:b6:63:
         2d:a5:cf:71:5d:e9:9f:40:e6:c4:45:d0:e3:fb:e1:fe:fe:d1:
         40:c8:64:57:50:9d:4e:59:6a:74:2d:3b:6e:55:2c:fc:54:0c:
         e9:d4:f1:2a:b7:eb:43:b8:1e:b6:9d:1a:7a:e8:3d:97:0a:1a:
         5a:2e:61:13:b4:c6:ff:b0:dd:e9:b8:7c:c7:cf:ab:12:16:04:
         61:96:77:f3:a0:ad:87:67:20:f8:0d:82:eb:43:be:36:f9:63:
         00:cc:2d:c1:cf:8a:d8:e6:46:c8:8f:0b:58:6a:4e:a9:df:9a:
         87:47:75:86:25:a8:5a:46:ac:02:3c:46:d1:30:0f:71:bf:4c:
         17:02:50:8b:58:a3:61:58:84:94:ba:ec:86:bd:ee:11:16:a3:
         00:ec:89:03:9c:8a:20:bc:48:2a:6c:41:39:9e:01:21:33:53:
         71:b3:9b:0d:44:96:6f:d5:c6:6b:d1:69:97:12:52:50:c6:49:
         27:45:09:55:9b:19:11:9d:79:df:0c:b7:f7:b3:0a:d2:20:c4:
         a3:44:20:4e:20:9c:b1:88:0e:33:f1:0b:c2:af:cb:74:ec:26:
         52:34:c0:81:a6:f9:8e:ec:e1:d5:69:f0:ef:6b:d3:3f:ec:ae:
         4a:5c:10:e7
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUCuV7Zl7/oEQSFE+/QVfIkSEnMJYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTEyMDAyMTQ5WhcNMjUxMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0AwNmZjY2ZkYThiZGRhODYxNmQ4Yjg3ODc5OTZlZTQwMjAy
ODQyNzIyNjAzOTUyNzdlNGI3YzUzYWVjYmJhOTQ4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCso7XD00t7iB2ARygo8cMDKVmuIBt47Kk6oIghcnwqZDzx
BW/5chY48jaCTHpkLmkJujO82nx3iWCqJn8ZNyiXfyHaAG0M9oMThqlT9fJgEHkI
iEZJNG3VFNBD5mREXZSPJwkYmVqzl2TgM9E7lYkwb2N+LtOFrUFPHJVZBZ8qI9vQ
wQBD6W1yJwJQAksv4oaVb5macBaZO2GI17+Vbz09eG5u260kug78XHRi8IBBUYMK
CLthZi21oi8ypyofmXXKOJzTj2QHer8zgBKKMJq6WG+QrkF3buBykcDbkxtkaUjE
3o+N4aLpLe3eINA26wg9+PWykW+Kqosz1edGplm1AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU8fx9UmnGXXcBU+rJhQ1d+o6RJs0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2RlZDJkZGMxLTQ5OGQtNGRjNi04YTIwLTMyNTUzY2VhZmUyYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA45DANBgkqhkiG9w0BAQsFAAOCAQEAUiN7tFEpY4ZL1Vd8qqMFyrZjLaXP
cV3pn0DmxEXQ4/vh/v7RQMhkV1CdTllqdC07blUs/FQM6dTxKrfrQ7getp0aeug9
lwoaWi5hE7TG/7Dd6bh8x8+rEhYEYZZ386Cth2cg+A2C60O+NvljAMwtwc+K2OZG
yI8LWGpOqd+ah0d1hiWoWkasAjxG0TAPcb9MFwJQi1ijYViElLrshr3uERajAOyJ
A5yKILxIKmxBOZ4BITNTcbObDUSWb9XGa9FplxJSUMZJJ0UJVZsZEZ153wy397MK
0iDEo0QgTiCcsYgOM/ELwq/LdOwmUjTAgab5juzh1Wnw72vTP+yuSlwQ5w==
-----END CERTIFICATE-----