Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a09bb26-57fe-4b7c-adc6-c2bc1fa20c25.roa
File:                     1a09bb26-57fe-4b7c-adc6-c2bc1fa20c25.roa (raw, json)
Hash identifier:          5Hj6qAd7XRwqtnlw1EPdnkrK3oS7jzGetDgz8Xe2IZ0=
Subject key identifier:   F5:3B:10:E6:FB:DA:F9:CA:36:7A:36:EA:89:A5:86:AC:EC:71:1B:98
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0B35516A3C89F1AAC3683F0FD184B9775585EFB7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a09bb26-57fe-4b7c-adc6-c2bc1fa20c25.roa
Signing time:             Tue 14 Oct 2025 17:42:03 +0000
ROA not before:           Tue 14 Oct 2025 17:42:03 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        70.132.0.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:35:51:6a:3c:89:f1:aa:c3:68:3f:0f:d1:84:b9:77:55:85:ef:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 17:42:03 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=b881690d8033ba3a6e80d19950394cd0b6b0cc9f96e641cae7d75d041d0aabab, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:46:d0:e6:ba:f4:e2:ef:aa:de:48:26:48:62:
                    76:70:0a:a5:4b:aa:8c:fd:fc:d9:ae:33:74:80:71:
                    b9:8d:21:8e:83:1f:56:14:6f:a9:38:87:3b:89:50:
                    b5:e9:6d:d4:08:8b:08:cb:4c:9e:07:d4:e2:25:87:
                    d6:7e:b9:82:c1:54:da:f9:18:dc:94:0c:2b:f6:d0:
                    fc:ad:de:ee:91:9b:ca:42:a3:ef:96:ab:26:e5:11:
                    6c:7e:f2:53:18:31:e0:53:e9:fc:35:88:b4:12:e9:
                    aa:7e:a7:15:bf:e6:82:b0:9f:ab:c0:ed:14:4b:9b:
                    09:9e:a8:08:b2:2c:d1:23:71:5a:03:f4:e7:9a:5d:
                    21:e0:b7:02:b4:9a:a8:79:10:57:b4:0b:f0:eb:ea:
                    d3:32:5b:39:70:44:e1:b3:cc:ca:54:72:ce:aa:5f:
                    78:86:75:cf:fb:90:dc:a2:e6:06:96:54:8e:e1:fc:
                    e5:b5:ea:3c:63:97:dc:e6:a1:ca:eb:31:12:4b:b4:
                    7a:95:a5:b2:88:17:8d:cd:00:4b:ff:ee:b4:ba:c4:
                    32:ad:39:12:da:13:47:04:92:e3:fa:54:c8:45:84:
                    fd:c2:cb:de:df:02:04:7a:d5:cf:5a:be:29:de:2a:
                    dc:52:24:75:0d:47:9c:75:5d:4a:e8:93:0f:c3:71:
                    b5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:3B:10:E6:FB:DA:F9:CA:36:7A:36:EA:89:A5:86:AC:EC:71:1B:98
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a09bb26-57fe-4b7c-adc6-c2bc1fa20c25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.132.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         46:ca:46:78:59:03:83:ba:a6:2d:df:f6:56:1a:5d:91:7c:10:
         45:62:0f:17:93:74:cc:02:bd:4f:5b:b0:36:c5:6b:41:1c:e7:
         6a:80:62:51:72:5f:b3:e5:2e:e8:a9:82:a5:4e:b0:37:0b:76:
         d1:1c:e1:79:d5:95:74:be:d6:87:5c:ed:7e:e3:e4:f5:9a:3c:
         a5:1c:01:03:a9:84:e1:e3:58:63:57:86:c2:55:dd:8b:d6:59:
         91:cc:50:37:a6:ad:1b:d9:ce:6f:2a:2d:4e:b9:d4:2a:7f:c4:
         b9:9a:ac:25:43:39:61:5d:dd:c3:a5:7f:72:40:86:2b:cb:fd:
         2c:75:b1:6c:b0:b8:0c:1b:38:4b:5e:59:89:a2:df:23:13:f8:
         97:93:99:df:1d:fc:73:c3:1e:bb:ab:72:74:d9:44:fa:f0:fc:
         6e:a8:bd:89:94:ae:1f:9b:fc:72:6a:77:1d:64:32:8e:fb:ff:
         a9:66:6d:9a:e5:f3:ee:44:d9:8d:d2:9a:7f:0d:cd:45:ad:7a:
         77:6d:2e:ea:ee:5e:f7:00:10:f4:0a:e0:78:13:58:3a:c7:b9:
         43:a1:92:ac:a9:a9:1f:d6:61:13:cd:71:41:34:18:84:9a:53:
         dc:9f:20:d4:95:d0:40:db:d0:62:aa:fe:69:29:84:73:39:31:
         53:17:3f:30
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUCzVRajyJ8arDaD8P0YS5d1WF77cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MTc0MjAzWhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BiODgxNjkwZDgwMzNiYTNhNmU4MGQxOTk1MDM5NGNkMGI2
YjBjYzlmOTZlNjQxY2FlN2Q3NWQwNDFkMGFhYmFiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJRtDmuvTi76reSCZIYnZwCqVLqoz9/NmuM3SAcbmNIY6D
H1YUb6k4hzuJULXpbdQIiwjLTJ4H1OIlh9Z+uYLBVNr5GNyUDCv20Pyt3u6Rm8pC
o++WqyblEWx+8lMYMeBT6fw1iLQS6ap+pxW/5oKwn6vA7RRLmwmeqAiyLNEjcVoD
9OeaXSHgtwK0mqh5EFe0C/Dr6tMyWzlwROGzzMpUcs6qX3iGdc/7kNyi5gaWVI7h
/OW16jxjl9zmocrrMRJLtHqVpbKIF43NAEv/7rS6xDKtORLaE0cEkuP6VMhFhP3C
y97fAgR61c9avineKtxSJHUNR5x1XUrokw/DcbXFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU9TsQ5vva+co2ejbqiaWGrOxxG5gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzFhMDliYjI2LTU3ZmUtNGI3Yy1hZGM2LWMyYmMxZmEyMGMyNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAVGhAAwDQYJKoZIhvcNAQELBQADggEBAEbKRnhZA4O6pi3f9lYaXZF8EEVi
DxeTdMwCvU9bsDbFa0Ec52qAYlFyX7PlLuipgqVOsDcLdtEc4XnVlXS+1odc7X7j
5PWaPKUcAQOphOHjWGNXhsJV3YvWWZHMUDemrRvZzm8qLU651Cp/xLmarCVDOWFd
3cOlf3JAhivL/Sx1sWywuAwbOEteWYmi3yMT+JeTmd8d/HPDHrurcnTZRPrw/G6o
vYmUrh+b/HJqdx1kMo77/6lmbZrl8+5E2Y3Smn8NzUWtendtLuruXvcAEPQK4HgT
WDrHuUOhkqypqR/WYRPNcUE0GISaU9yfINSV0EDb0GKq/mkphHM5MVMXPzA=
-----END CERTIFICATE-----