Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3994db38-ba26-42e0-97e0-8a0c3d2c78d9.roa
File:                     3994db38-ba26-42e0-97e0-8a0c3d2c78d9.roa (raw, json)
Hash identifier:          aa83ghJGGqxRUWH47/pOzyfkwRvOFFb0LlqH6EKoXew=
Subject key identifier:   89:35:7A:A9:F1:FC:CC:00:B2:E8:C6:44:AB:23:F2:93:56:6D:5E:34
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7C4958B30D72B4A43BEE6EF2C2399E447CE67CBB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3994db38-ba26-42e0-97e0-8a0c3d2c78d9.roa
Signing time:             Sat 18 Oct 2025 01:00:45 +0000
ROA not before:           Sat 18 Oct 2025 01:00:45 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.16.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:49:58:b3:0d:72:b4:a4:3b:ee:6e:f2:c2:39:9e:44:7c:e6:7c:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 01:00:45 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=be2675395ed916758d1e492673d339e1e313b954589d72f1890b0638fb17f5d7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:57:17:ba:a1:86:95:fe:cb:20:51:9f:90:54:
                    28:ef:0a:e5:54:4f:79:fb:16:57:54:02:22:71:ae:
                    91:ea:9b:24:5a:c9:71:6a:47:63:39:2f:e1:0a:fb:
                    da:68:41:40:18:d1:c1:9f:44:f8:19:ef:af:a7:26:
                    7e:bc:3d:bb:26:bb:2a:0c:36:7e:45:a4:4f:a5:37:
                    20:5a:ef:c4:42:65:17:31:d9:74:69:68:d6:b4:42:
                    1b:04:1c:6b:6a:d8:6c:4d:88:7c:56:54:dc:a8:50:
                    4b:e3:fe:22:75:2d:b8:ae:26:7c:b4:82:a3:50:6e:
                    c9:08:c1:c0:ab:1b:8b:b7:cd:2b:9b:c8:93:be:0f:
                    e5:74:b3:84:87:79:bd:99:7a:b1:d5:90:dd:49:67:
                    54:9b:6c:a9:e7:82:6e:36:cf:00:25:75:9e:bb:5e:
                    c3:6a:1c:99:fa:09:7c:3d:bb:0a:53:6e:6c:5a:e8:
                    43:61:e2:de:27:da:9b:0b:a3:2f:e8:1b:82:57:07:
                    61:60:33:b6:9b:06:99:e3:ad:d9:d5:f4:ce:67:1f:
                    6c:82:a1:32:b3:90:f2:e4:93:fa:cc:3b:06:d4:4a:
                    9a:50:d1:ea:75:c3:68:50:2c:0b:11:04:54:3c:14:
                    13:45:f5:6a:f6:7e:0c:54:83:bb:de:f9:41:ad:9b:
                    24:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:35:7A:A9:F1:FC:CC:00:B2:E8:C6:44:AB:23:F2:93:56:6D:5E:34
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3994db38-ba26-42e0-97e0-8a0c3d2c78d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:3f:88:cd:0c:29:61:44:20:18:48:6e:a3:29:eb:2d:ac:33:
         3f:df:e7:1a:72:86:4e:ab:a8:e4:5e:cc:f9:92:af:ae:95:8c:
         87:de:d8:57:44:77:c4:23:76:56:d0:3c:9e:6e:66:a0:9f:16:
         40:17:d6:6d:1f:3c:4b:f4:6a:ef:e4:93:4d:77:7e:2f:c6:38:
         72:b1:b1:fc:6a:32:0a:d4:1e:3f:0c:b2:f0:23:1e:19:01:11:
         7d:aa:c5:c4:aa:54:ea:14:94:87:d8:d4:db:c7:a7:6e:a5:f5:
         06:db:ff:49:a1:d4:d1:74:77:06:58:d7:3d:55:7c:16:4f:9e:
         91:0f:a3:e0:1b:c5:48:f2:4a:99:0d:6a:a2:1e:48:d4:4e:98:
         bf:9f:e3:bc:df:9c:9a:e6:b8:bb:d8:bc:f9:8d:0e:aa:5c:c3:
         21:96:86:ff:a6:74:6b:3e:92:8d:4e:28:6e:6a:40:a2:7f:ae:
         4d:95:77:1e:44:3b:a5:36:df:7a:f9:a5:f3:83:d7:ba:ff:a2:
         9a:ef:f4:7f:b8:45:6f:7b:7d:90:1a:c5:6c:fc:94:4a:29:41:
         e5:c4:5d:e3:76:be:42:ca:e3:76:b4:6e:02:d2:ab:ae:c2:d6:
         e1:2c:7f:9a:26:06:21:e9:c3:52:d7:3e:a8:f2:99:b7:ef:5c:
         2f:c4:fe:1d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUfElYsw1ytKQ77m7ywjmeRHzmfLswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDEwMDQ1WhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BiZTI2NzUzOTVlZDkxNjc1OGQxZTQ5MjY3M2QzMzllMWUz
MTNiOTU0NTg5ZDcyZjE4OTBiMDYzOGZiMTdmNWQ3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCsVxe6oYaV/ssgUZ+QVCjvCuVUT3n7FldUAiJxrpHqmyRa
yXFqR2M5L+EK+9poQUAY0cGfRPgZ76+nJn68PbsmuyoMNn5FpE+lNyBa78RCZRcx
2XRpaNa0QhsEHGtq2GxNiHxWVNyoUEvj/iJ1LbiuJny0gqNQbskIwcCrG4u3zSub
yJO+D+V0s4SHeb2ZerHVkN1JZ1SbbKnngm42zwAldZ67XsNqHJn6CXw9uwpTbmxa
6ENh4t4n2psLoy/oG4JXB2FgM7abBpnjrdnV9M5nH2yCoTKzkPLkk/rMOwbUSppQ
0ep1w2hQLAsRBFQ8FBNF9Wr2fgxUg7ve+UGtmyRVAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUiTV6qfH8zACy6MZEqyPyk1ZtXjQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzM5OTRkYjM4LWJhMjYtNDJlMC05N2UwLThhMGMzZDJjNzhkOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJBCRAwDQYJKoZIhvcNAQELBQADggEBACg/iM0MKWFEIBhIbqMp6y2sMz/f
5xpyhk6rqORezPmSr66VjIfe2FdEd8QjdlbQPJ5uZqCfFkAX1m0fPEv0au/kk013
fi/GOHKxsfxqMgrUHj8MsvAjHhkBEX2qxcSqVOoUlIfY1NvHp26l9Qbb/0mh1NF0
dwZY1z1VfBZPnpEPo+AbxUjySpkNaqIeSNROmL+f47zfnJrmuLvYvPmNDqpcwyGW
hv+mdGs+ko1OKG5qQKJ/rk2Vdx5EO6U233r5pfOD17r/oprv9H+4RW97fZAaxWz8
lEopQeXEXeN2vkLK43a0bgLSq67C1uEsf5omBiHpw1LXPqjymbfvXC/E/h0=
-----END CERTIFICATE-----