Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f188b8ee-3a4b-4868-9d1b-037431b45053.roa
File:                     f188b8ee-3a4b-4868-9d1b-037431b45053.roa (raw, json)
Hash identifier:          Xm3PrSRvc6kd68pBxH2zY2+Y/ClDzfsIAXmi9FRkNNk=
Subject key identifier:   70:61:47:2A:FD:09:B9:F4:0F:75:1C:5C:B5:C6:82:49:3B:81:48:E1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       59E801EB3203133C6E8870AFF6BF0DB8DAF870F9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f188b8ee-3a4b-4868-9d1b-037431b45053.roa
Signing time:             Thu 13 Nov 2025 00:00:48 +0000
ROA not before:           Thu 13 Nov 2025 00:00:48 +0000
ROA not after:            Thu 18 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.16.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e8:01:eb:32:03:13:3c:6e:88:70:af:f6:bf:0d:b8:da:f8:70:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 13 00:00:48 2025 GMT
            Not After : Dec 18 23:59:59 2025 GMT
        Subject: serialNumber=7925ecc568ad211dd526e71a54668fe00298a8114d4771c566058e52cd401ee5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f7:5d:31:92:19:ef:c1:a0:ca:0e:f2:c8:ba:
                    d4:93:7a:3f:21:97:34:86:f5:c9:00:7a:d2:44:46:
                    08:28:0f:4d:ca:85:c9:1a:d2:da:c5:62:0b:3a:fb:
                    5e:c4:60:0f:fa:49:dd:97:d5:c8:5c:00:3e:62:fc:
                    c4:15:3b:f6:16:83:d6:d8:5c:da:20:86:5b:e0:52:
                    f2:ad:68:ab:79:0f:51:60:7d:36:0b:17:6a:c4:57:
                    29:65:86:ab:15:9d:c9:68:60:03:09:e7:5f:fd:6f:
                    cd:5a:44:c7:75:dc:78:9a:60:ff:2b:7e:9b:ae:ba:
                    5c:df:38:5a:d4:f3:bb:84:f2:e6:f1:b8:b2:e0:6b:
                    d6:ec:f4:63:7f:01:b5:e5:34:cb:67:3d:7e:de:61:
                    85:6c:25:2c:5a:f0:87:57:de:0d:f6:51:de:c5:8f:
                    f9:57:49:56:ee:79:7f:38:25:2b:eb:27:31:7b:3f:
                    36:0d:50:e5:8b:3e:95:7f:15:5d:96:65:ae:70:33:
                    c4:d6:23:0e:da:3d:b3:89:6a:0a:30:ff:b4:fd:21:
                    55:0e:2f:a5:75:06:93:52:f3:83:7d:c3:5a:18:d7:
                    58:e1:76:4a:d7:78:81:7f:df:af:74:57:db:e6:48:
                    63:1f:43:08:14:7e:9a:90:98:69:d9:fc:bd:70:32:
                    ac:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:61:47:2A:FD:09:B9:F4:0F:75:1C:5C:B5:C6:82:49:3B:81:48:E1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f188b8ee-3a4b-4868-9d1b-037431b45053.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.16.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b1:d1:d8:56:4c:cb:77:2d:e1:97:ee:09:db:ae:55:27:64:68:
         d2:f0:77:f1:a1:c0:be:9e:10:f8:8b:13:56:7b:43:2d:9c:82:
         0f:e5:7a:a1:40:a4:be:8d:a7:27:76:aa:43:99:07:a2:3f:e7:
         d3:44:33:9a:6f:08:66:cf:27:26:a0:45:43:8d:15:31:e0:c5:
         ea:c5:6c:5a:01:33:93:c0:0e:09:2d:a1:4f:d3:3d:6e:e3:eb:
         8f:eb:bb:bb:4b:1d:e9:f9:d6:af:b5:50:66:9b:02:38:4b:06:
         47:c2:b2:c0:96:c1:52:d0:e5:c0:9a:98:9e:bf:e9:f8:65:5d:
         ef:42:65:42:58:6a:e3:69:95:a2:93:e2:f6:a5:fb:bb:4e:d4:
         c7:19:82:ea:6f:31:26:31:25:7b:a2:4a:1e:6d:d8:4f:bd:56:
         3c:29:62:d0:97:05:7d:0c:6d:21:ac:b1:dd:63:e1:61:e3:74:
         d6:05:ce:0d:d5:da:3c:de:d8:78:52:14:57:60:f1:f3:ad:ef:
         24:aa:81:25:d2:dd:bd:08:50:46:02:0f:44:f0:f4:64:d9:01:
         6e:6f:b9:e0:10:7c:d3:8b:4f:61:ed:d3:21:dd:b7:59:38:a9:
         dd:bf:c7:f7:80:68:f1:eb:d3:4e:f2:66:fb:c5:2f:8a:ab:de:
         34:8c:1f:fe
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUWegB6zIDEzxuiHCv9r8NuNr4cPkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTEzMDAwMDQ4WhcNMjUxMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A3OTI1ZWNjNTY4YWQyMTFkZDUyNmU3MWE1NDY2OGZlMDAy
OThhODExNGQ0NzcxYzU2NjA1OGU1MmNkNDAxZWU1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCW910xkhnvwaDKDvLIutSTej8hlzSG9ckAetJERggoD03K
hcka0trFYgs6+17EYA/6Sd2X1chcAD5i/MQVO/YWg9bYXNoghlvgUvKtaKt5D1Fg
fTYLF2rEVyllhqsVncloYAMJ51/9b81aRMd13HiaYP8rfpuuulzfOFrU87uE8ubx
uLLga9bs9GN/AbXlNMtnPX7eYYVsJSxa8IdX3g32Ud7Fj/lXSVbueX84JSvrJzF7
PzYNUOWLPpV/FV2WZa5wM8TWIw7aPbOJagow/7T9IVUOL6V1BpNS84N9w1oY11jh
dkrXeIF/3690V9vmSGMfQwgUfpqQmGnZ/L1wMqw7AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUcGFHKv0JufQPdRxctcaCSTuBSOEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2YxODhiOGVlLTNhNGItNDg2OC05ZDFiLTAzNzQzMWI0NTA1My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4EDANBgkqhkiG9w0BAQsFAAOCAQEAsdHYVkzLdy3hl+4J265VJ2Ro0vB3
8aHAvp4Q+IsTVntDLZyCD+V6oUCkvo2nJ3aqQ5kHoj/n00Qzmm8IZs8nJqBFQ40V
MeDF6sVsWgEzk8AOCS2hT9M9buPrj+u7u0sd6fnWr7VQZpsCOEsGR8KywJbBUtDl
wJqYnr/p+GVd70JlQlhq42mVopPi9qX7u07UxxmC6m8xJjEle6JKHm3YT71WPCli
0JcFfQxtIayx3WPhYeN01gXODdXaPN7YeFIUV2Dx863vJKqBJdLdvQhQRgIPRPD0
ZNkBbm+54BB804tPYe3TId23WTip3b/H94Bo8evTTvJm+8UviqveNIwf/g==
-----END CERTIFICATE-----