Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4bfc25c-3ac2-4165-8ec8-d48150733844.roa
File:                     c4bfc25c-3ac2-4165-8ec8-d48150733844.roa (raw, json)
Hash identifier:          PBc+HVa/ymLfM2eptzgtC9WfF48pSZB4TwjqkNVGJ8c=
Subject key identifier:   FD:E8:E9:AF:F9:C7:5B:D5:E3:AA:33:D4:E4:00:C0:74:A7:BB:B6:7C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3E815E52B91ACCE78F7466D021CDE180F74F48B5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4bfc25c-3ac2-4165-8ec8-d48150733844.roa
Signing time:             Sat 18 Oct 2025 02:00:06 +0000
ROA not before:           Sat 18 Oct 2025 02:00:06 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.8.235.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:81:5e:52:b9:1a:cc:e7:8f:74:66:d0:21:cd:e1:80:f7:4f:48:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 02:00:06 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=f4751e0d8fb5bcf78e5422e2a7c62eb4a34a53829ebc62bd683fd1d66f39c38b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:49:fd:79:9e:6a:db:16:5f:a8:7c:b0:fe:d1:
                    42:bb:37:1c:fa:0c:23:af:55:fb:6e:3a:19:e9:cf:
                    6e:5c:54:bd:bc:da:24:24:e1:cb:69:b7:db:eb:5a:
                    cb:83:cb:e6:8b:31:cd:50:69:c9:61:ab:bd:dc:cc:
                    bd:c9:7e:c0:01:82:18:93:c1:84:96:4b:8a:35:9f:
                    0e:32:01:1f:84:01:35:18:11:cd:07:c6:f0:dc:f5:
                    a5:05:c8:c4:1a:1a:1d:f9:25:22:33:e0:20:f8:ef:
                    ae:60:b1:51:a3:38:45:0b:bc:2f:21:bd:aa:dc:6a:
                    2d:01:1f:7f:a1:c8:b4:ff:49:44:31:06:55:48:b7:
                    40:50:dd:54:3d:98:16:1b:ef:74:c3:31:17:53:00:
                    d3:8c:59:04:6a:1e:f2:5d:c4:d8:b1:22:57:19:2b:
                    a5:76:48:d3:f4:84:56:ac:80:0b:06:4c:76:0a:e9:
                    65:ee:ac:d4:7f:ea:da:89:af:df:f3:c9:ff:e7:12:
                    69:bd:99:02:83:62:2f:92:dc:f1:6d:bb:4b:97:62:
                    17:d2:0a:ae:25:fb:59:33:c6:be:b6:fc:b7:e9:98:
                    61:ba:d0:cc:36:09:68:2e:dc:8c:16:35:f1:d1:3e:
                    c8:47:82:81:ce:ad:ba:14:62:53:46:cd:a2:f0:32:
                    e6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E8:E9:AF:F9:C7:5B:D5:E3:AA:33:D4:E4:00:C0:74:A7:BB:B6:7C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4bfc25c-3ac2-4165-8ec8-d48150733844.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.8.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:b2:b0:88:01:aa:8f:85:83:46:4e:de:eb:3b:27:99:41:67:
         d0:a6:57:71:96:41:21:3e:44:8d:b1:24:1c:6f:a8:24:ef:78:
         20:bd:aa:0e:b5:c8:cb:70:02:d3:1f:e1:7e:9e:08:a5:34:8b:
         45:e3:70:43:fd:aa:92:1a:bb:14:fe:70:52:20:94:49:d6:ee:
         b2:a4:14:d6:b3:0c:ee:eb:a4:e5:fa:b5:5f:f8:37:73:5b:a4:
         87:da:08:5b:d0:27:86:e4:94:04:af:7f:11:32:df:70:f0:62:
         ba:ce:6d:0c:9a:64:a0:2e:ce:e7:50:9f:ca:62:06:5d:08:6d:
         6c:f2:c8:ea:83:d5:b8:99:b5:af:0d:e0:39:ef:f5:42:e4:79:
         f9:b5:8c:28:59:92:7a:1f:66:61:9c:0f:02:c1:d9:14:21:c7:
         3e:48:5a:e5:28:99:2b:c7:26:bb:75:9b:2f:5e:fc:c4:e6:5f:
         c2:a4:30:20:88:12:9e:21:ad:06:b7:00:ba:90:86:bf:68:ff:
         af:6b:80:e0:a5:30:3f:bf:cd:b6:bc:c5:b5:95:18:87:de:e4:
         6d:9f:7e:cc:05:38:73:31:e7:62:f9:66:8a:2d:fa:e4:e3:75:
         4b:72:de:19:68:2b:88:a6:ca:29:00:b0:e8:70:18:dc:60:3c:
         14:da:17:fd
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPoFeUrkazOePdGbQIc3hgPdPSLUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDIwMDA2WhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BmNDc1MWUwZDhmYjViY2Y3OGU1NDIyZTJhN2M2MmViNGEz
NGE1MzgyOWViYzYyYmQ2ODNmZDFkNjZmMzljMzhiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCjSf15nmrbFl+ofLD+0UK7Nxz6DCOvVftuOhnpz25cVL28
2iQk4ctpt9vrWsuDy+aLMc1Qaclhq73czL3JfsABghiTwYSWS4o1nw4yAR+EATUY
Ec0HxvDc9aUFyMQaGh35JSIz4CD4765gsVGjOEULvC8hvarcai0BH3+hyLT/SUQx
BlVIt0BQ3VQ9mBYb73TDMRdTANOMWQRqHvJdxNixIlcZK6V2SNP0hFasgAsGTHYK
6WXurNR/6tqJr9/zyf/nEmm9mQKDYi+S3PFtu0uXYhfSCq4l+1kzxr62/LfpmGG6
0Mw2CWgu3IwWNfHRPshHgoHOrboUYlNGzaLwMuYvAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU/ejpr/nHW9XjqjPU5ADAdKe7tnwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2M0YmZjMjVjLTNhYzItNDE2NS04ZWM4LWQ0ODE1MDczMzg0NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABBCOswDQYJKoZIhvcNAQELBQADggEBADiysIgBqo+Fg0ZO3us7J5lBZ9Cm
V3GWQSE+RI2xJBxvqCTveCC9qg61yMtwAtMf4X6eCKU0i0XjcEP9qpIauxT+cFIg
lEnW7rKkFNazDO7rpOX6tV/4N3NbpIfaCFvQJ4bklASvfxEy33DwYrrObQyaZKAu
zudQn8piBl0IbWzyyOqD1biZta8N4Dnv9ULkefm1jChZknofZmGcDwLB2RQhxz5I
WuUomSvHJrt1my9e/MTmX8KkMCCIEp4hrQa3ALqQhr9o/69rgOClMD+/zba8xbWV
GIfe5G2ffswFOHMx52L5Zoot+uTjdUty3hloK4imyikAsOhwGNxgPBTaF/0=
-----END CERTIFICATE-----