Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d13bb70-aac8-4b1f-a3b4-b8020682a4d3.roa
File:                     7d13bb70-aac8-4b1f-a3b4-b8020682a4d3.roa (raw, json)
Hash identifier:          +pOV+tiDtddhkTIQTmMdgcaLdR1z0HyOFtg4EIYXjeE=
Subject key identifier:   31:94:27:14:75:D4:00:16:57:0B:93:AC:1D:2B:46:D0:44:54:81:09
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7DFF0B871A018CAAE138051F51F91EEC926FA91A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d13bb70-aac8-4b1f-a3b4-b8020682a4d3.roa
Signing time:             Fri 26 Sep 2025 00:12:36 +0000
ROA not before:           Fri 26 Sep 2025 00:12:36 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.129.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ff:0b:87:1a:01:8c:aa:e1:38:05:1f:51:f9:1e:ec:92:6f:a9:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 26 00:12:36 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=064e8f71cf17e0dbc7bf70155e24b6cd33ffcdd8087ed4255df63acf7109f3bc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1f:ed:a5:76:b3:19:65:b0:e9:5f:8a:7a:01:
                    37:c8:9e:ff:40:52:b8:c1:ab:55:b2:33:60:62:3c:
                    b9:47:50:10:8c:2c:c4:82:56:74:2a:50:ad:51:3f:
                    e7:ec:1b:30:b4:b7:8d:1d:4a:72:6f:ad:58:68:fb:
                    e2:22:33:a2:1b:a6:08:7c:cc:9a:03:17:72:a9:ba:
                    07:69:c7:07:3b:a6:b6:9d:8f:71:10:3f:50:08:a4:
                    9d:84:d5:da:20:2f:90:e2:26:20:38:d9:09:f6:e1:
                    d4:a5:89:83:ea:29:08:39:05:4c:67:cd:28:60:a9:
                    2b:fb:b9:16:31:b3:08:7a:4c:ba:76:8c:05:c2:80:
                    41:c5:08:5a:db:b6:00:80:04:6b:5a:c3:6b:9f:bf:
                    08:f5:ae:fe:c3:29:78:d4:b5:39:89:88:64:e5:ec:
                    33:dc:b4:b8:44:83:a2:3a:6c:d1:63:16:65:cd:99:
                    8c:04:c4:d6:93:25:c0:86:34:9d:82:e8:4f:cb:97:
                    51:90:24:7a:d9:29:83:29:13:74:78:6c:ca:8f:14:
                    a7:60:d9:c1:d4:bf:de:0c:9d:77:49:f4:fb:ba:41:
                    68:4b:31:84:73:d0:cc:0c:4b:93:25:24:75:f3:17:
                    f7:c6:21:60:60:24:31:f0:80:14:a9:a4:45:e4:da:
                    40:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:94:27:14:75:D4:00:16:57:0B:93:AC:1D:2B:46:D0:44:54:81:09
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d13bb70-aac8-4b1f-a3b4-b8020682a4d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.129.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         71:45:cc:70:a1:6a:bc:71:5f:aa:61:28:a6:4b:27:99:d1:ee:
         55:df:fb:eb:74:f3:f4:6f:49:a0:e4:b9:65:01:86:99:3e:7a:
         38:ca:40:2e:9a:cf:3d:2d:fc:9b:8d:b5:52:5e:fb:ab:eb:b2:
         04:8d:23:92:ad:bd:a1:23:17:17:e2:04:dd:02:62:ea:5d:e9:
         64:cd:c5:f3:24:81:e0:1c:55:fa:91:58:74:05:bb:40:04:0b:
         c1:62:51:8e:e5:bb:2e:83:02:36:50:6f:9c:2e:2f:36:96:af:
         d8:85:84:22:8e:5a:21:3c:a6:39:19:52:92:38:f0:8e:2f:e3:
         41:ac:e0:89:2b:0d:50:de:cf:62:09:3c:72:74:33:41:67:9c:
         7b:52:e3:13:a5:c5:ea:e1:aa:b9:99:40:04:ed:1e:83:f8:8e:
         01:0b:af:b9:20:e0:3d:f1:bb:ee:3f:c5:d4:b1:d9:5d:41:58:
         e1:03:72:15:a1:32:70:9c:2b:14:b1:94:3b:8e:27:fe:8b:42:
         6b:6f:ce:5f:da:06:00:da:c5:ed:54:fa:13:95:c6:43:88:90:
         96:ba:2d:f3:5b:89:c9:b1:44:31:7e:c7:32:59:f8:aa:36:f9:
         ea:f9:59:2f:3c:14:d6:c7:c2:0d:fb:b4:27:10:5c:32:ba:37:
         df:4f:91:ab
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUff8LhxoBjKrhOAUfUfke7JJvqRowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTI2MDAxMjM2WhcNMjUxMDMxMjM1OTU5
WjB6MUkwRwYDVQQFE0AwNjRlOGY3MWNmMTdlMGRiYzdiZjcwMTU1ZTI0YjZjZDMz
ZmZjZGQ4MDg3ZWQ0MjU1ZGY2M2FjZjcxMDlmM2JjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC/H+2ldrMZZbDpX4p6ATfInv9AUrjBq1WyM2BiPLlHUBCM
LMSCVnQqUK1RP+fsGzC0t40dSnJvrVho++IiM6Ibpgh8zJoDF3Kpugdpxwc7prad
j3EQP1AIpJ2E1dogL5DiJiA42Qn24dSliYPqKQg5BUxnzShgqSv7uRYxswh6TLp2
jAXCgEHFCFrbtgCABGtaw2ufvwj1rv7DKXjUtTmJiGTl7DPctLhEg6I6bNFjFmXN
mYwExNaTJcCGNJ2C6E/Ll1GQJHrZKYMpE3R4bMqPFKdg2cHUv94MnXdJ9Pu6QWhL
MYRz0MwMS5MlJHXzF/fGIWBgJDHwgBSppEXk2kDzAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUMZQnFHXUABZXC5OsHStG0ERUgQkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdkMTNiYjcwLWFhYzgtNGIxZi1hM2I0LWI4MDIwNjgyYTRkMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQgTANBgkqhkiG9w0BAQsFAAOCAQEAcUXMcKFqvHFfqmEopksnmdHuVd/7
63Tz9G9JoOS5ZQGGmT56OMpALprPPS38m421Ul77q+uyBI0jkq29oSMXF+IE3QJi
6l3pZM3F8ySB4BxV+pFYdAW7QAQLwWJRjuW7LoMCNlBvnC4vNpav2IWEIo5aITym
ORlSkjjwji/jQazgiSsNUN7PYgk8cnQzQWece1LjE6XF6uGquZlABO0eg/iOAQuv
uSDgPfG77j/F1LHZXUFY4QNyFaEycJwrFLGUO44n/otCa2/OX9oGANrF7VT6E5XG
Q4iQlrot81uJybFEMX7HMln4qjb56vlZLzwU1sfCDfu0JxBcMro330+Rqw==
-----END CERTIFICATE-----