Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10f998c4-d67e-468a-909b-dd14467dafd0.roa
File:                     10f998c4-d67e-468a-909b-dd14467dafd0.roa (raw, json)
Hash identifier:          pgvuZ+UnlY+H1Lqrq+0DqA/FC5bClWyPFKMrdW+KNmM=
Subject key identifier:   7C:EE:59:AC:13:8A:E4:70:80:FC:EF:CE:24:77:A5:24:7F:8B:14:D1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7EC42008015F0D4F1A7E6904F35A15676CAE72B4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10f998c4-d67e-468a-909b-dd14467dafd0.roa
Signing time:             Sat 18 Oct 2025 04:40:53 +0000
ROA not before:           Sat 18 Oct 2025 04:40:53 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.59.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c4:20:08:01:5f:0d:4f:1a:7e:69:04:f3:5a:15:67:6c:ae:72:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 04:40:53 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=b442e8203b5f74da2c94c9ef3003dbd7e7060fc24a0bae901f5d8a35f7d45213, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d1:33:38:96:0d:07:8b:00:1c:55:ee:5a:c4:
                    af:65:b1:07:bf:cc:bb:61:ab:db:5a:03:2b:3c:10:
                    bb:c7:99:ce:90:f4:bf:12:17:45:f3:22:27:24:de:
                    8c:c5:43:9e:53:32:e7:3f:61:59:68:fb:f0:cf:2b:
                    20:5a:99:00:d7:44:19:86:13:9d:75:47:a0:c5:5c:
                    f4:07:bf:a1:de:74:73:da:b5:92:9d:c7:32:af:7f:
                    45:db:a8:25:28:4c:49:be:0f:86:d1:52:c4:a8:a0:
                    41:6a:ba:70:fe:b6:e8:10:19:98:91:89:76:40:79:
                    26:ea:7d:b1:25:e1:15:46:1f:2a:35:0f:83:4e:e5:
                    15:f3:e7:97:47:0c:3a:06:45:01:e9:52:79:81:64:
                    fd:16:7b:ab:b5:b3:c0:df:d0:3d:fe:a3:da:c1:33:
                    79:80:c4:4f:50:18:3c:1b:15:3e:6b:e3:6e:14:5e:
                    79:4a:ee:7c:ad:74:2f:9a:56:7a:1b:53:00:94:04:
                    80:68:4b:87:cc:25:0e:5d:cd:68:25:76:9b:e6:54:
                    2a:7a:5e:da:7a:f7:36:dd:cd:37:ff:90:3f:bc:da:
                    54:04:e4:7e:11:20:1e:09:82:5f:03:5a:96:6d:dc:
                    87:44:2e:b0:81:aa:db:28:83:b1:75:c6:b0:79:9d:
                    20:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:EE:59:AC:13:8A:E4:70:80:FC:EF:CE:24:77:A5:24:7F:8B:14:D1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10f998c4-d67e-468a-909b-dd14467dafd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:1e:30:11:93:c1:19:f4:48:06:1b:a5:49:7e:fb:5b:29:f0:
         b3:e4:38:43:7d:8a:7c:22:eb:69:a2:18:a0:99:cd:eb:66:dd:
         5e:b7:e7:f6:8d:a9:db:5e:60:90:13:e3:39:76:20:13:98:d8:
         35:06:cf:d2:19:05:9b:76:8b:7c:e1:bf:2b:3f:87:4f:d3:b5:
         df:65:46:62:f5:f1:29:e7:7a:0f:d1:ee:7d:ab:f3:e6:2a:35:
         19:06:b1:2f:84:26:60:85:c1:01:24:a6:95:20:57:58:3c:4e:
         d5:00:28:72:61:86:45:9f:78:c9:1d:9b:53:01:a1:50:77:a9:
         31:9f:f4:c1:f1:5f:9a:2d:81:ce:b5:80:0a:bb:b8:5e:17:e3:
         e0:66:2d:09:2d:23:57:85:46:95:9d:72:4f:51:b9:e6:c5:44:
         bb:89:88:a6:00:41:c2:f3:93:c7:20:39:43:a8:1a:79:9d:6e:
         6c:19:d6:86:fe:f3:57:32:bc:5d:af:fa:b8:dd:69:d6:c7:8f:
         1e:e5:c3:33:45:1d:92:3c:73:91:14:b6:3c:3e:46:6c:42:c4:
         ec:30:5b:52:f5:aa:50:10:43:08:df:42:bb:05:d8:47:c9:c6:
         d8:34:4d:96:a7:0d:20:19:68:ec:38:7f:05:af:89:d6:5b:23:
         c6:8f:98:2c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUfsQgCAFfDU8afmkE81oVZ2yucrQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDQ0MDUzWhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BiNDQyZTgyMDNiNWY3NGRhMmM5NGM5ZWYzMDAzZGJkN2U3
MDYwZmMyNGEwYmFlOTAxZjVkOGEzNWY3ZDQ1MjEzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCk0TM4lg0HiwAcVe5axK9lsQe/zLthq9taAys8ELvHmc6Q
9L8SF0XzIick3ozFQ55TMuc/YVlo+/DPKyBamQDXRBmGE511R6DFXPQHv6HedHPa
tZKdxzKvf0XbqCUoTEm+D4bRUsSooEFqunD+tugQGZiRiXZAeSbqfbEl4RVGHyo1
D4NO5RXz55dHDDoGRQHpUnmBZP0We6u1s8Df0D3+o9rBM3mAxE9QGDwbFT5r424U
XnlK7nytdC+aVnobUwCUBIBoS4fMJQ5dzWgldpvmVCp6Xtp69zbdzTf/kD+82lQE
5H4RIB4Jgl8DWpZt3IdELrCBqtsog7F1xrB5nSBhAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUfO5ZrBOK5HCA/O/OJHelJH+LFNEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzEwZjk5OGM0LWQ2N2UtNDY4YS05MDliLWRkMTQ0NjdkYWZkMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABBCTswDQYJKoZIhvcNAQELBQADggEBACweMBGTwRn0SAYbpUl++1sp8LPk
OEN9inwi62miGKCZzetm3V635/aNqdteYJAT4zl2IBOY2DUGz9IZBZt2i3zhvys/
h0/Ttd9lRmL18Snneg/R7n2r8+YqNRkGsS+EJmCFwQEkppUgV1g8TtUAKHJhhkWf
eMkdm1MBoVB3qTGf9MHxX5otgc61gAq7uF4X4+BmLQktI1eFRpWdck9RuebFRLuJ
iKYAQcLzk8cgOUOoGnmdbmwZ1ob+81cyvF2v+rjdadbHjx7lwzNFHZI8c5EUtjw+
RmxCxOwwW1L1qlAQQwjfQrsF2EfJxtg0TZanDSAZaOw4fwWvidZbI8aPmCw=
-----END CERTIFICATE-----