Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19c56357-2b65-4688-b2df-9f085ab31aa2.roa
File:                     19c56357-2b65-4688-b2df-9f085ab31aa2.roa (raw, json)
Hash identifier:          Lf2OU3qGiaJ6e6E4nzi82RxqT8GoTwIfyU5DEsh8BUc=
Subject key identifier:   52:94:C6:34:DB:F9:AD:EF:04:6B:26:F4:FD:23:48:12:58:77:2F:8A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3BDC7625CCC9D3C60D0E127907444CBBF66C7E0A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19c56357-2b65-4688-b2df-9f085ab31aa2.roa
Signing time:             Sun 26 Oct 2025 00:11:28 +0000
ROA not before:           Sun 26 Oct 2025 00:11:28 +0000
ROA not after:            Sun 30 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        56.242.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:dc:76:25:cc:c9:d3:c6:0d:0e:12:79:07:44:4c:bb:f6:6c:7e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 26 00:11:28 2025 GMT
            Not After : Nov 30 23:59:59 2025 GMT
        Subject: serialNumber=b50b5e32eb91ecde1de6dcb3bd6ad4f75bb2c1d887bf390010ec80bd4ecb539e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:51:e3:fe:1f:00:09:96:5d:50:9a:0e:4c:93:
                    d7:a9:72:5b:e4:fb:46:1a:09:bc:bf:eb:74:68:2e:
                    82:7e:61:3d:fb:cc:3d:b6:ae:e5:dc:6e:3f:93:61:
                    72:b4:f1:02:5b:15:a5:53:1a:1b:85:4a:9e:2a:83:
                    2e:ef:10:5d:c3:2c:41:1a:55:d6:ff:61:a7:09:c2:
                    bb:b1:39:5b:f3:1c:4a:02:95:28:a9:1c:26:3a:a2:
                    61:51:cc:b2:da:63:a7:48:65:94:06:61:12:94:99:
                    8a:15:70:17:56:ca:66:a5:a4:b2:48:72:78:5b:0b:
                    1b:0a:b7:0e:a9:69:68:27:2f:64:76:bd:15:53:46:
                    ce:04:23:85:51:77:fd:5e:1d:9a:96:e6:f1:3c:f2:
                    af:49:b9:34:76:88:2f:28:5d:38:70:2e:bd:54:44:
                    05:b0:46:2e:0f:c2:31:8c:63:41:f8:8a:97:9d:53:
                    5f:4b:1d:ab:1d:ba:88:a4:06:c2:23:eb:a5:0f:e9:
                    9c:8d:a9:36:29:dc:ab:63:6c:f3:50:f1:20:95:25:
                    61:c6:e5:89:4d:34:08:3b:f6:64:52:8b:d9:6d:ac:
                    f5:6f:bb:3c:bb:fe:d9:5f:8f:c5:ec:d9:91:c7:8f:
                    00:c7:3b:29:09:8a:68:f1:58:bf:4a:37:35:d1:33:
                    65:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:94:C6:34:DB:F9:AD:EF:04:6B:26:F4:FD:23:48:12:58:77:2F:8A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19c56357-2b65-4688-b2df-9f085ab31aa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.242.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         cb:e4:23:40:c6:9d:f6:29:96:f4:a3:bd:1c:2b:dc:55:de:5b:
         8f:9f:f1:e6:5c:1c:5a:d8:dc:03:95:4a:94:c3:4a:b4:41:da:
         12:e8:4e:1d:e7:d1:cd:77:29:73:cd:52:8f:de:02:2e:7f:1c:
         1d:f2:e6:7b:85:9e:24:26:af:8f:3b:d4:e4:81:ae:21:a7:e7:
         79:59:4c:25:22:97:75:03:51:15:84:ff:01:48:ef:f8:6d:80:
         ef:54:e6:9b:ef:7b:ac:6d:cb:fd:25:5f:d8:a6:ea:38:81:7b:
         2c:96:11:dc:2c:88:72:3d:61:29:59:23:94:82:32:df:bd:43:
         e4:7e:77:01:9f:c6:82:30:84:12:1c:e3:06:f5:63:68:41:ba:
         7a:c3:06:3d:93:fb:9f:2a:00:57:fa:d9:3e:02:8c:58:5d:5a:
         f0:90:42:5f:51:fb:86:d0:77:b4:9f:e8:2b:59:10:b2:58:c6:
         b6:aa:a4:8e:0c:3a:da:90:2a:65:2c:6a:40:e8:b1:75:27:e1:
         74:ea:a2:30:5b:23:9e:62:f7:3e:8a:45:33:ff:5d:90:4c:3c:
         04:2b:f3:07:3f:b4:92:dd:8c:2b:e6:10:02:ce:f6:9c:20:d9:
         a1:e1:1d:80:a4:4c:d6:5a:09:70:bf:42:a9:de:e3:29:21:1e:
         fd:49:84:52
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUO9x2JczJ08YNDhJ5B0RMu/ZsfgowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDI2MDAxMTI4WhcNMjUxMTMwMjM1OTU5
WjB6MUkwRwYDVQQFE0BiNTBiNWUzMmViOTFlY2RlMWRlNmRjYjNiZDZhZDRmNzVi
YjJjMWQ4ODdiZjM5MDAxMGVjODBiZDRlY2I1MzllMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCnUeP+HwAJll1Qmg5Mk9epclvk+0YaCby/63RoLoJ+YT37
zD22ruXcbj+TYXK08QJbFaVTGhuFSp4qgy7vEF3DLEEaVdb/YacJwruxOVvzHEoC
lSipHCY6omFRzLLaY6dIZZQGYRKUmYoVcBdWymalpLJIcnhbCxsKtw6paWgnL2R2
vRVTRs4EI4VRd/1eHZqW5vE88q9JuTR2iC8oXThwLr1URAWwRi4PwjGMY0H4iped
U19LHasduoikBsIj66UP6ZyNqTYp3KtjbPNQ8SCVJWHG5YlNNAg79mRSi9ltrPVv
uzy7/tlfj8Xs2ZHHjwDHOykJimjxWL9KNzXRM2W/AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUUpTGNNv5re8Eayb0/SNIElh3L4owHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE5YzU2MzU3LTJiNjUtNDY4OC1iMmRmLTlmMDg1YWIzMWFhMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA48jANBgkqhkiG9w0BAQsFAAOCAQEAy+QjQMad9imW9KO9HCvcVd5bj5/x
5lwcWtjcA5VKlMNKtEHaEuhOHefRzXcpc81Sj94CLn8cHfLme4WeJCavjzvU5IGu
IafneVlMJSKXdQNRFYT/AUjv+G2A71Tmm+97rG3L/SVf2KbqOIF7LJYR3CyIcj1h
KVkjlIIy371D5H53AZ/GgjCEEhzjBvVjaEG6esMGPZP7nyoAV/rZPgKMWF1a8JBC
X1H7htB3tJ/oK1kQsljGtqqkjgw62pAqZSxqQOixdSfhdOqiMFsjnmL3PopFM/9d
kEw8BCvzBz+0kt2MK+YQAs72nCDZoeEdgKRM1loJcL9Cqd7jKSEe/UmEUg==
-----END CERTIFICATE-----