Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a31ac031-5106-43cc-a15e-76beb28dbfbd.roa
File:                     a31ac031-5106-43cc-a15e-76beb28dbfbd.roa (raw, json)
Hash identifier:          +36fpjds9+GwuoVYWnQStL7zBTmRvI/AOG2lND1Q3ug=
Subject key identifier:   8B:BD:45:0C:01:D7:7A:28:B1:6E:35:87:7C:E0:A5:8C:6E:26:7E:7D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       683D7C610378B273DEAEA87B5D4BA1FE13DC746C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a31ac031-5106-43cc-a15e-76beb28dbfbd.roa
Signing time:             Sat 18 Oct 2025 00:31:06 +0000
ROA not before:           Sat 18 Oct 2025 00:31:06 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.55.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:3d:7c:61:03:78:b2:73:de:ae:a8:7b:5d:4b:a1:fe:13:dc:74:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 00:31:06 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=4645c39b616cffbb384fc864ac3157c163487d4223a7aad1e6abcbb2ad462c8c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:79:b1:13:25:f3:89:f8:61:43:8c:1a:65:59:
                    cc:33:97:28:35:d3:87:dc:d0:cb:70:ba:47:cc:d3:
                    e9:dc:3a:97:33:7b:0a:61:09:10:c2:67:02:a8:f9:
                    2a:c7:04:d3:d3:19:d8:d2:2d:34:4b:40:d7:90:7d:
                    ac:9f:f8:60:a3:1c:50:8b:b7:e9:30:83:bc:5e:18:
                    5b:04:d9:d0:d8:02:76:92:79:db:09:0b:c3:f8:48:
                    cb:f0:14:ab:30:77:39:60:6d:c2:28:ce:b6:ee:d1:
                    2c:b1:7c:af:b8:c7:3b:14:e1:20:1d:a8:6d:15:f0:
                    ab:71:56:1d:72:0f:5d:32:b2:ed:2a:c7:f0:d2:d0:
                    bb:99:15:8a:0d:01:c8:9e:31:90:2e:c5:2c:a7:fb:
                    31:eb:9e:15:ed:78:ab:b9:f7:fd:86:42:bb:9d:e3:
                    96:f8:43:3a:14:24:4a:d7:e9:dc:b1:58:a4:ac:97:
                    6d:ca:54:de:40:bc:f6:88:04:de:26:14:18:0b:ca:
                    ba:de:a5:66:d8:c6:aa:ea:46:2c:d0:5a:53:d8:a0:
                    6a:fb:3f:e4:ad:3b:c8:7f:3b:e0:d0:2e:80:fe:5f:
                    13:dc:fd:23:ac:e1:7c:8d:34:91:f5:d1:ae:37:d0:
                    55:f4:c7:db:7d:04:62:3a:42:c9:52:06:ed:75:b8:
                    21:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BD:45:0C:01:D7:7A:28:B1:6E:35:87:7C:E0:A5:8C:6E:26:7E:7D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a31ac031-5106-43cc-a15e-76beb28dbfbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:b4:bb:f7:ba:34:97:27:3f:cc:cf:ea:4b:74:66:91:ef:aa:
         92:16:5d:e3:56:61:67:a3:be:b5:d6:9d:b3:95:8f:88:a0:d2:
         e5:1d:2e:e6:7e:22:c4:86:87:a5:49:e9:2d:f9:aa:d6:88:c0:
         81:67:e3:31:38:99:12:7d:2b:a2:2b:3c:d3:c8:72:18:70:39:
         3c:ca:7b:f7:f9:5f:aa:f4:06:a7:ef:e3:79:7b:00:11:2b:d6:
         a6:0d:bd:5b:b4:1b:5c:d4:01:ce:2e:fe:ce:29:6c:8f:a7:bd:
         bf:42:ee:46:0a:9c:30:0f:ae:44:12:24:e3:d9:a6:aa:51:d1:
         ca:7b:9d:02:3b:fb:54:0c:a1:51:53:b2:72:fa:4e:78:b8:f9:
         65:d9:25:1b:9b:c9:c8:38:f6:20:71:71:80:5f:51:ad:1c:3c:
         73:41:72:b8:b8:0d:d1:76:93:7f:45:d4:e9:4e:a7:2c:35:6c:
         30:f4:59:06:16:f3:c1:5c:7e:13:93:d5:37:b4:89:6f:08:04:
         31:cd:ce:46:3c:19:ec:1a:5c:9d:3a:f7:85:bd:66:d6:7f:cb:
         20:56:55:52:4c:a9:6a:62:ba:45:02:3c:c5:7f:e7:b8:2e:82:
         0f:61:7d:45:9e:81:88:e1:94:4f:02:97:ef:a2:a4:8a:87:61:
         6a:d5:95:8b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUaD18YQN4snPerqh7XUuh/hPcdGwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDAzMTA2WhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A0NjQ1YzM5YjYxNmNmZmJiMzg0ZmM4NjRhYzMxNTdjMTYz
NDg3ZDQyMjNhN2FhZDFlNmFiY2JiMmFkNDYyYzhjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC0ebETJfOJ+GFDjBplWcwzlyg104fc0MtwukfM0+ncOpcz
ewphCRDCZwKo+SrHBNPTGdjSLTRLQNeQfayf+GCjHFCLt+kwg7xeGFsE2dDYAnaS
edsJC8P4SMvwFKswdzlgbcIozrbu0SyxfK+4xzsU4SAdqG0V8KtxVh1yD10ysu0q
x/DS0LuZFYoNAcieMZAuxSyn+zHrnhXteKu59/2GQrud45b4QzoUJErX6dyxWKSs
l23KVN5AvPaIBN4mFBgLyrrepWbYxqrqRizQWlPYoGr7P+StO8h/O+DQLoD+XxPc
/SOs4XyNNJH10a430FX0x9t9BGI6QslSBu11uCGhAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUi71FDAHXeiixbjWHfOCljG4mfn0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2EzMWFjMDMxLTUxMDYtNDNjYy1hMTVlLTc2YmViMjhkYmZiZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABBCTcwDQYJKoZIhvcNAQELBQADggEBADS0u/e6NJcnP8zP6kt0ZpHvqpIW
XeNWYWejvrXWnbOVj4ig0uUdLuZ+IsSGh6VJ6S35qtaIwIFn4zE4mRJ9K6IrPNPI
chhwOTzKe/f5X6r0Bqfv43l7ABEr1qYNvVu0G1zUAc4u/s4pbI+nvb9C7kYKnDAP
rkQSJOPZpqpR0cp7nQI7+1QMoVFTsnL6Tni4+WXZJRubycg49iBxcYBfUa0cPHNB
cri4DdF2k39F1OlOpyw1bDD0WQYW88FcfhOT1Te0iW8IBDHNzkY8GewaXJ0694W9
ZtZ/yyBWVVJMqWpiukUCPMV/57gugg9hfUWegYjhlE8Cl++ipIqHYWrVlYs=
-----END CERTIFICATE-----