Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be713b82-ae33-4ba7-81a1-ce725d0392dd.roa
File:                     be713b82-ae33-4ba7-81a1-ce725d0392dd.roa (raw, json)
Hash identifier:          ARMToR+47Jl5MMPMLSYF0z3eZYajJL6geQUH3WEOL/Q=
Subject key identifier:   1C:07:24:D8:5C:4C:E3:96:0A:62:FC:08:ED:BC:3E:D4:12:62:DD:27
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4FEC67C9C5AB0CA4BC8B5AF765FC62611D5B91C5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be713b82-ae33-4ba7-81a1-ce725d0392dd.roa
Signing time:             Tue 21 Oct 2025 00:40:13 +0000
ROA not before:           Tue 21 Oct 2025 00:40:13 +0000
ROA not after:            Tue 25 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        57.193.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ec:67:c9:c5:ab:0c:a4:bc:8b:5a:f7:65:fc:62:61:1d:5b:91:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 21 00:40:13 2025 GMT
            Not After : Nov 25 23:59:59 2025 GMT
        Subject: serialNumber=ae7df645dd3ec04330f1d76cef7c94960e98da528fcbe8cffbde29871a6bc6e9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f1:bd:e5:e2:40:71:d3:49:76:d4:6d:d5:ef:
                    aa:10:3c:7d:64:fe:61:e2:18:3d:24:28:5b:b6:eb:
                    b7:ea:64:4c:4c:1a:76:42:5a:32:68:5a:5a:f9:97:
                    67:4b:ac:60:dd:05:5f:9f:69:47:5a:81:19:8a:8b:
                    62:eb:ba:79:8d:ca:f9:8c:3f:f5:43:91:f0:23:7d:
                    cd:89:38:1f:e4:1a:bc:2b:ea:fd:94:7a:95:67:ac:
                    88:a6:57:7e:16:11:9e:fe:18:9e:83:80:9a:c3:82:
                    b1:0b:27:70:79:7b:02:64:51:c4:0a:b8:53:28:b4:
                    67:df:3c:3d:e8:6e:8d:51:13:b5:f6:6b:a8:48:c3:
                    63:82:db:17:ac:aa:7e:b7:8c:97:de:db:b7:3b:68:
                    27:9f:c9:fa:40:96:ae:dc:d4:5e:6e:9f:3d:02:0f:
                    d2:5e:c8:18:cd:dd:ac:33:e1:04:36:9b:c4:8b:60:
                    55:78:6e:70:7e:90:d2:43:e7:3b:7b:b7:5d:dd:9e:
                    32:f8:3e:68:92:59:af:28:e5:72:40:86:a8:d1:4a:
                    62:cc:ac:71:ef:63:1e:66:2a:ac:ee:db:bc:c8:7f:
                    2a:f7:14:e0:ca:bd:b7:b1:b0:58:84:c4:89:d0:11:
                    87:7d:8f:35:21:a2:8b:bd:ef:00:c8:90:4e:46:06:
                    9d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:07:24:D8:5C:4C:E3:96:0A:62:FC:08:ED:BC:3E:D4:12:62:DD:27
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be713b82-ae33-4ba7-81a1-ce725d0392dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.193.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         15:51:33:d7:b7:d6:36:43:52:85:5a:a2:ef:2e:70:2f:eb:df:
         3f:da:90:4f:3d:64:cc:a4:0e:ac:1b:e6:e6:42:68:bb:41:fd:
         f3:14:8a:35:1e:84:68:22:6a:e5:e8:9c:ab:ad:7a:b8:bd:57:
         bf:4f:b8:dc:d4:38:8d:a9:7e:f0:1d:6f:0b:09:8e:75:35:4f:
         72:67:82:c7:92:c2:f9:45:fc:4f:df:31:63:3d:f8:1a:24:aa:
         5c:93:93:3f:3a:f1:58:4e:d2:95:05:53:12:de:a8:c2:6a:78:
         a0:cf:ca:a6:07:67:15:0f:4e:fe:9d:b7:67:56:d1:4e:ff:68:
         42:4b:67:9b:b1:aa:4f:bc:ac:ec:9e:8a:ce:24:a7:73:72:8a:
         96:0a:7c:37:10:d8:83:72:ca:78:72:22:80:e6:3c:37:3c:65:
         ff:7a:fb:be:b4:92:e5:d3:5d:e9:af:00:e1:aa:e8:32:af:fa:
         21:7a:1c:96:97:f9:14:17:fe:2d:31:f4:df:63:5c:28:d4:29:
         d7:e6:1c:38:34:87:e0:f5:5a:e8:c8:6b:04:ea:fd:94:16:2b:
         a1:23:32:c9:45:0b:16:0d:ef:9f:03:b7:10:cc:aa:ff:dd:37:
         b6:e9:df:cd:5e:ad:fe:06:22:89:8a:10:9b:7a:de:87:43:05:
         99:a4:da:4e
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUT+xnycWrDKS8i1r3ZfxiYR1bkcUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIxMDA0MDEzWhcNMjUxMTI1MjM1OTU5
WjB6MUkwRwYDVQQFE0BhZTdkZjY0NWRkM2VjMDQzMzBmMWQ3NmNlZjdjOTQ5NjBl
OThkYTUyOGZjYmU4Y2ZmYmRlMjk4NzFhNmJjNmU5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCS8b3l4kBx00l21G3V76oQPH1k/mHiGD0kKFu267fqZExM
GnZCWjJoWlr5l2dLrGDdBV+faUdagRmKi2LrunmNyvmMP/VDkfAjfc2JOB/kGrwr
6v2UepVnrIimV34WEZ7+GJ6DgJrDgrELJ3B5ewJkUcQKuFMotGffPD3obo1RE7X2
a6hIw2OC2xesqn63jJfe27c7aCefyfpAlq7c1F5unz0CD9JeyBjN3awz4QQ2m8SL
YFV4bnB+kNJD5zt7t13dnjL4PmiSWa8o5XJAhqjRSmLMrHHvYx5mKqzu27zIfyr3
FODKvbexsFiExInQEYd9jzUhoou97wDIkE5GBp2XAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUHAck2FxM45YKYvwI7bw+1BJi3ScwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2JlNzEzYjgyLWFlMzMtNGJhNy04MWExLWNlNzI1ZDAzOTJkZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA5wTANBgkqhkiG9w0BAQsFAAOCAQEAFVEz17fWNkNShVqi7y5wL+vfP9qQ
Tz1kzKQOrBvm5kJou0H98xSKNR6EaCJq5eicq616uL1Xv0+43NQ4jal+8B1vCwmO
dTVPcmeCx5LC+UX8T98xYz34GiSqXJOTPzrxWE7SlQVTEt6owmp4oM/KpgdnFQ9O
/p23Z1bRTv9oQktnm7GqT7ys7J6KziSnc3KKlgp8NxDYg3LKeHIigOY8Nzxl/3r7
vrSS5dNd6a8A4aroMq/6IXoclpf5FBf+LTH032NcKNQp1+YcODSH4PVa6MhrBOr9
lBYroSMyyUULFg3vnwO3EMyq/903tunfzV6t/gYiiYoQm3reh0MFmaTaTg==
-----END CERTIFICATE-----