Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc183db2-372f-46b2-82d0-ca0d08a6e249.roa
File:                     cc183db2-372f-46b2-82d0-ca0d08a6e249.roa (raw, json)
Hash identifier:          ITfNvK+m/uMml1mMDg4890F71IJXtE7nBYwPJJ+cV2c=
Subject key identifier:   6C:CE:15:B1:3A:8B:A5:B5:14:F7:48:B4:CF:0C:20:73:0A:CF:02:17
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6755E5CB7B0815DFD40D30A16B0CB2FE172D82BE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc183db2-372f-46b2-82d0-ca0d08a6e249.roa
Signing time:             Tue 14 Oct 2025 17:39:58 +0000
ROA not before:           Tue 14 Oct 2025 17:39:58 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        70.132.20.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:55:e5:cb:7b:08:15:df:d4:0d:30:a1:6b:0c:b2:fe:17:2d:82:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 17:39:58 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=f3624e7c8dcad3abf9a359ffd788857f2f47c44482ea130b41c5e174079e5f3e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0d:00:92:56:57:ee:a0:0d:6d:5d:d5:d8:fe:
                    85:5b:c5:c6:bb:db:90:41:a0:ee:47:3b:f8:cb:e6:
                    85:af:62:2d:a9:78:de:de:71:6c:fc:1d:75:95:79:
                    5a:66:92:51:98:ab:10:0f:ce:bf:b8:c8:a0:73:4a:
                    ab:e4:10:b3:33:89:da:1f:de:50:43:97:8c:3e:80:
                    c1:e1:b3:4e:6f:09:d4:0c:15:9c:47:a6:fc:00:f9:
                    51:6f:5f:7e:3c:50:83:73:59:4f:3b:63:28:b8:6f:
                    a7:0a:cd:df:47:f2:fb:2d:cf:1d:54:d1:e5:5f:89:
                    96:3b:ee:e6:6c:2a:c6:90:0a:5d:8e:da:2b:dc:0a:
                    01:af:49:03:e1:11:5e:70:ea:5f:ee:02:46:06:b8:
                    c5:48:28:a0:1a:ec:c7:c8:c8:56:18:84:17:10:69:
                    13:29:47:3c:57:7b:13:8e:ae:b4:e0:db:65:60:b6:
                    31:aa:36:df:fb:29:e7:b2:5b:1f:a3:4a:12:54:83:
                    b9:15:74:c2:e4:a1:a9:14:6e:27:bd:45:00:08:22:
                    a7:60:53:96:66:bc:4d:8e:a3:a7:a5:0b:20:a9:15:
                    ca:ab:3c:92:97:d9:37:14:b8:af:69:a8:67:a5:1c:
                    c0:08:5c:08:8e:65:d0:ce:58:9c:9b:7c:5b:49:e2:
                    b5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:CE:15:B1:3A:8B:A5:B5:14:F7:48:B4:CF:0C:20:73:0A:CF:02:17
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc183db2-372f-46b2-82d0-ca0d08a6e249.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.132.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:c3:d0:23:c4:21:ea:70:da:09:e1:93:0e:f7:0d:5e:63:80:
         d1:59:1e:a5:9b:b3:60:f5:d3:be:57:02:92:3b:7e:bc:2f:87:
         ed:19:f3:77:47:7e:46:87:c7:31:27:ae:46:f0:4c:c2:48:4b:
         93:d7:bf:de:95:e5:6d:6f:9a:9c:67:f5:c0:a3:a5:db:ed:d4:
         a3:ee:16:99:2d:9f:b1:46:57:51:c3:7d:74:f0:d3:13:5c:bd:
         5b:88:4b:12:a8:3c:bf:86:b5:bf:30:26:5a:aa:c1:30:e4:19:
         1c:4f:ee:6d:20:b9:b9:c6:cb:94:b3:9a:8a:ea:56:14:ba:ff:
         7d:50:07:01:5f:39:94:62:fb:aa:13:2c:8b:5e:c1:dc:76:50:
         6f:62:1a:cf:f7:d9:2c:9e:9a:b0:2d:4c:54:1f:54:9d:58:a9:
         38:14:ef:32:a7:85:97:1b:c7:83:c8:04:96:a1:bf:ab:cc:da:
         92:51:5f:1a:5d:41:d3:4d:87:ad:2e:c6:5a:43:4f:b9:28:5d:
         16:33:60:5c:af:5b:14:5b:6f:f5:47:c7:b0:7a:e2:06:01:a0:
         62:02:93:58:ba:85:89:c9:c3:78:6d:02:5c:6d:31:20:00:e6:
         6e:fb:72:1d:9d:73:6f:01:bb:46:23:5e:e1:f9:33:32:92:04:
         64:78:ce:68
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZ1Xly3sIFd/UDTChawyy/hctgr4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MTczOTU4WhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BmMzYyNGU3YzhkY2FkM2FiZjlhMzU5ZmZkNzg4ODU3ZjJm
NDdjNDQ0ODJlYTEzMGI0MWM1ZTE3NDA3OWU1ZjNlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCaDQCSVlfuoA1tXdXY/oVbxca725BBoO5HO/jL5oWvYi2p
eN7ecWz8HXWVeVpmklGYqxAPzr+4yKBzSqvkELMzidof3lBDl4w+gMHhs05vCdQM
FZxHpvwA+VFvX348UINzWU87Yyi4b6cKzd9H8vstzx1U0eVfiZY77uZsKsaQCl2O
2ivcCgGvSQPhEV5w6l/uAkYGuMVIKKAa7MfIyFYYhBcQaRMpRzxXexOOrrTg22Vg
tjGqNt/7KeeyWx+jShJUg7kVdMLkoakUbie9RQAIIqdgU5ZmvE2Oo6elCyCpFcqr
PJKX2TcUuK9pqGelHMAIXAiOZdDOWJybfFtJ4rUtAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUbM4VsTqLpbUU90i0zwwgcwrPAhcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2NjMTgzZGIyLTM3MmYtNDZiMi04MmQwLWNhMGQwOGE2ZTI0OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJGhBQwDQYJKoZIhvcNAQELBQADggEBALTD0CPEIepw2gnhkw73DV5jgNFZ
HqWbs2D1075XApI7frwvh+0Z83dHfkaHxzEnrkbwTMJIS5PXv96V5W1vmpxn9cCj
pdvt1KPuFpktn7FGV1HDfXTw0xNcvVuISxKoPL+Gtb8wJlqqwTDkGRxP7m0gubnG
y5SzmorqVhS6/31QBwFfOZRi+6oTLItewdx2UG9iGs/32SyemrAtTFQfVJ1YqTgU
7zKnhZcbx4PIBJahv6vM2pJRXxpdQdNNh60uxlpDT7koXRYzYFyvWxRbb/VHx7B6
4gYBoGICk1i6hYnJw3htAlxtMSAA5m77ch2dc28Bu0YjXuH5MzKSBGR4zmg=
-----END CERTIFICATE-----