Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/064a098f-0b4d-4d61-8343-4a50f114e383.roa
File:                     064a098f-0b4d-4d61-8343-4a50f114e383.roa (raw, json)
Hash identifier:          +9Lpjbsgc4yrvMATDLHjXvPXmYSOvxgnbUylkvfQSR0=
Subject key identifier:   0D:A8:DC:78:D0:B5:C5:96:F8:DC:4E:43:14:51:D2:63:CF:E6:B1:05
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       025024CA0C4634648F8A283C939A3DDAE78F3427
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/064a098f-0b4d-4d61-8343-4a50f114e383.roa
Signing time:             Fri 31 Oct 2025 00:00:17 +0000
ROA not before:           Fri 31 Oct 2025 00:00:17 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        5.174.144.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:50:24:ca:0c:46:34:64:8f:8a:28:3c:93:9a:3d:da:e7:8f:34:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 31 00:00:17 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=61f8545619760d4f83a951d38fa65411ca8157ddb2fc435ad59cf0c31373dd88, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:60:58:03:f7:c8:11:fb:bb:1f:5a:3b:df:72:
                    a1:e5:58:2b:c9:1d:d3:c4:17:08:6c:89:ba:7b:44:
                    78:b7:27:10:8d:e6:2f:21:cf:8d:c7:f4:fc:43:37:
                    95:91:a7:ee:e0:31:61:4a:10:49:f3:1f:c9:61:e2:
                    2c:26:4f:65:94:6d:2d:48:2d:7d:e8:65:74:2f:36:
                    40:bb:de:2a:2a:ed:a1:0c:7d:86:65:14:4f:be:91:
                    4a:81:ce:43:a8:0c:32:76:28:bd:f2:ed:f1:f0:b2:
                    fd:9c:c4:0b:5c:3b:d6:27:df:2b:7b:6a:43:32:2b:
                    13:cb:d4:7e:82:69:f4:0f:90:45:39:72:53:81:60:
                    97:d2:3d:97:de:fb:4f:84:9a:17:d0:09:f0:95:2a:
                    c0:97:02:b1:9b:0f:2e:b0:07:a2:50:92:80:c5:dc:
                    7a:bf:81:cd:d3:e7:1e:67:00:31:de:92:8e:00:f3:
                    c4:d5:ec:34:ca:ba:64:60:74:dd:4e:7c:51:85:3a:
                    e5:2b:79:e3:8b:cc:1f:18:f7:59:7a:39:f2:8f:a8:
                    94:da:9c:75:5c:0f:76:26:bc:62:84:3f:c7:a8:a4:
                    c7:87:80:62:e1:b4:4d:bc:59:79:2f:5a:eb:88:7e:
                    da:d9:b2:32:2b:78:b2:84:ca:89:fb:10:14:bb:b4:
                    4c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A8:DC:78:D0:B5:C5:96:F8:DC:4E:43:14:51:D2:63:CF:E6:B1:05
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/064a098f-0b4d-4d61-8343-4a50f114e383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.174.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         64:6d:53:38:59:de:ce:e7:ca:25:41:38:78:36:41:d2:90:ef:
         ea:0d:8e:a6:e5:cd:d3:c3:0c:dc:10:18:4e:89:01:8c:39:1f:
         43:15:d8:1e:78:1d:3e:81:48:37:bb:4b:eb:30:a4:cb:07:fb:
         72:c8:c7:37:be:b2:67:81:ca:9f:6e:13:e3:b7:58:b2:1e:da:
         fb:ed:5c:11:08:5f:ea:8b:62:75:ff:2a:30:1d:c9:74:12:3f:
         00:f9:6b:9b:f1:2c:cf:c0:73:fb:74:3e:0f:4c:63:21:61:54:
         61:14:38:15:13:d6:34:6c:d3:bd:ea:55:7f:97:f6:a4:7a:5b:
         1b:6b:34:ea:cc:72:2f:40:71:8c:00:63:7f:3d:e0:6e:43:4c:
         c3:4b:dc:72:d2:20:7c:97:2f:43:ce:f3:40:db:c3:3d:34:c1:
         76:ff:2c:eb:8d:f2:99:38:f1:1a:df:34:06:26:45:61:ff:e9:
         d3:ed:38:f8:a9:f0:55:3b:af:e4:b7:67:79:42:79:f1:c1:dc:
         e7:2c:41:ab:2a:7c:a6:1b:94:af:0a:f3:a4:cc:6b:41:71:cc:
         80:eb:55:41:04:d8:e1:0a:c3:8f:e3:47:8c:05:00:48:79:f1:
         e5:69:0f:91:54:c0:ab:13:41:6c:81:d5:51:d5:de:7a:e5:f3:
         31:00:90:8c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUAlAkygxGNGSPiig8k5o92uePNCcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDMxMDAwMDE3WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A2MWY4NTQ1NjE5NzYwZDRmODNhOTUxZDM4ZmE2NTQxMWNh
ODE1N2RkYjJmYzQzNWFkNTljZjBjMzEzNzNkZDg4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCoYFgD98gR+7sfWjvfcqHlWCvJHdPEFwhsibp7RHi3JxCN
5i8hz43H9PxDN5WRp+7gMWFKEEnzH8lh4iwmT2WUbS1ILX3oZXQvNkC73ioq7aEM
fYZlFE++kUqBzkOoDDJ2KL3y7fHwsv2cxAtcO9Yn3yt7akMyKxPL1H6CafQPkEU5
clOBYJfSPZfe+0+EmhfQCfCVKsCXArGbDy6wB6JQkoDF3Hq/gc3T5x5nADHeko4A
88TV7DTKumRgdN1OfFGFOuUreeOLzB8Y91l6OfKPqJTanHVcD3YmvGKEP8eopMeH
gGLhtE28WXkvWuuIftrZsjIreLKEyon7EBS7tEx3AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUDajceNC1xZb43E5DFFHSY8/msQUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA2NGEwOThmLTBiNGQtNGQ2MS04MzQzLTRhNTBmMTE0ZTM4My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQFrpAwDQYJKoZIhvcNAQELBQADggEBAGRtUzhZ3s7nyiVBOHg2QdKQ7+oN
jqblzdPDDNwQGE6JAYw5H0MV2B54HT6BSDe7S+swpMsH+3LIxze+smeByp9uE+O3
WLIe2vvtXBEIX+qLYnX/KjAdyXQSPwD5a5vxLM/Ac/t0Pg9MYyFhVGEUOBUT1jRs
073qVX+X9qR6WxtrNOrMci9AcYwAY3894G5DTMNL3HLSIHyXL0PO80Dbwz00wXb/
LOuN8pk48RrfNAYmRWH/6dPtOPip8FU7r+S3Z3lCefHB3OcsQasqfKYblK8K86TM
a0FxzIDrVUEE2OEKw4/jR4wFAEh58eVpD5FUwKsTQWyB1VHV3nrl8zEAkIw=
-----END CERTIFICATE-----