Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/375a6ca2-770f-45e1-a8af-10c7303818a0.roa
File:                     375a6ca2-770f-45e1-a8af-10c7303818a0.roa (raw, json)
Hash identifier:          tx86YU6iZZutiRJZQwaUbjCvlIA86WcxW8ursnCsIiE=
Subject key identifier:   66:32:57:0D:F8:14:70:78:C5:65:88:41:28:C0:0D:AF:88:6C:8D:03
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       48E165D551FAF3FA3C9A8391A22D7F4E80D6AE91
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/375a6ca2-770f-45e1-a8af-10c7303818a0.roa
Signing time:             Tue 28 Oct 2025 00:10:05 +0000
ROA not before:           Tue 28 Oct 2025 00:10:05 +0000
ROA not after:            Tue 02 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        163.119.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:e1:65:d5:51:fa:f3:fa:3c:9a:83:91:a2:2d:7f:4e:80:d6:ae:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 28 00:10:05 2025 GMT
            Not After : Dec  2 23:59:59 2025 GMT
        Subject: serialNumber=361f436ae893466b3d33a7abfb9d91a5645a90bd9e37f5afc95f190b0082f8c1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:53:bb:9b:3e:66:82:a7:e8:94:1f:0c:9f:4e:
                    3f:80:9e:2f:11:d7:cb:11:19:55:e2:b2:e5:43:5a:
                    88:d3:2a:b3:9e:9f:d5:bf:b2:6e:58:61:0b:12:6b:
                    d3:f8:f9:3e:81:5a:75:4d:02:47:d8:da:35:25:85:
                    cf:b0:46:e2:8c:7c:c7:32:90:79:ff:35:ae:a4:ff:
                    29:e8:58:1d:18:2f:44:e7:a3:15:78:f3:8d:0b:dc:
                    7d:77:68:23:6c:39:c6:6b:c3:e1:d7:14:72:c7:a5:
                    c2:8b:e5:34:31:f0:65:ab:9a:92:a7:e8:bc:b1:3a:
                    f7:f3:6d:ea:78:3b:4a:c0:2f:f7:d2:b8:77:d5:06:
                    6e:7f:68:28:5a:c3:34:c2:b9:e5:e8:4e:ec:5a:b1:
                    59:df:d5:82:41:4c:e5:8e:d0:27:22:2c:70:7c:96:
                    cf:f8:df:bb:0f:23:49:af:e7:f0:e6:7d:23:be:fd:
                    a2:31:01:74:46:0f:ec:8a:6b:e8:a7:0d:51:bd:c8:
                    65:86:32:e9:8d:02:f6:e6:da:a1:e8:75:94:e2:97:
                    02:af:50:91:56:70:1d:fd:72:cf:f2:0e:94:92:98:
                    21:11:aa:5f:6d:e6:57:f6:56:e1:53:a1:91:43:6a:
                    9a:a6:6a:2b:14:9b:b9:1d:da:48:f4:6d:33:8c:e8:
                    d5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:32:57:0D:F8:14:70:78:C5:65:88:41:28:C0:0D:AF:88:6C:8D:03
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/375a6ca2-770f-45e1-a8af-10c7303818a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.119.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         94:f1:c8:b9:8d:b6:f5:eb:ac:25:41:72:db:74:3e:64:77:24:
         b7:e3:0c:5a:5e:60:04:3a:e2:f5:fc:4b:1a:3e:da:25:54:6a:
         00:71:0a:95:5c:a1:e1:64:e9:cb:40:58:5c:7b:9d:81:de:9a:
         c9:30:a9:a8:9e:af:32:36:a4:d6:4e:21:00:b4:4e:6e:65:4f:
         87:dc:70:90:92:1d:a5:92:2c:fb:36:7d:fd:ca:c5:bf:90:29:
         21:f7:f3:0c:eb:3c:3c:04:5c:19:ca:ab:b2:88:5c:16:84:75:
         18:3f:2c:0f:1f:4c:c4:b1:e1:2b:64:ff:f6:40:59:fa:21:e7:
         99:4a:2d:ba:c0:a2:70:d0:71:ea:4b:32:f4:61:d6:99:d6:1c:
         64:77:16:76:fc:23:48:f4:f7:f0:f0:73:9a:69:6f:75:28:ee:
         c5:8f:5a:ee:fb:8b:f8:ed:41:be:fd:f2:22:20:b0:54:43:9a:
         cc:c6:5e:e2:b3:6e:1a:17:7d:97:0f:34:6c:bc:02:93:1a:1e:
         30:30:79:62:f1:84:66:85:eb:b7:15:fb:80:33:c6:1d:51:21:
         df:40:1e:45:90:b4:a6:44:a2:6b:d8:28:c2:9e:e3:0e:58:4b:
         c5:26:5b:be:56:bd:3c:61:a4:8f:99:d9:6a:d0:b8:27:36:4a:
         53:61:de:5c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUSOFl1VH68/o8moORoi1/ToDWrpEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDI4MDAxMDA1WhcNMjUxMjAyMjM1OTU5
WjB6MUkwRwYDVQQFE0AzNjFmNDM2YWU4OTM0NjZiM2QzM2E3YWJmYjlkOTFhNTY0
NWE5MGJkOWUzN2Y1YWZjOTVmMTkwYjAwODJmOGMxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDIU7ubPmaCp+iUHwyfTj+Ani8R18sRGVXisuVDWojTKrOe
n9W/sm5YYQsSa9P4+T6BWnVNAkfY2jUlhc+wRuKMfMcykHn/Na6k/ynoWB0YL0Tn
oxV4840L3H13aCNsOcZrw+HXFHLHpcKL5TQx8GWrmpKn6LyxOvfzbep4O0rAL/fS
uHfVBm5/aChawzTCueXoTuxasVnf1YJBTOWO0CciLHB8ls/437sPI0mv5/DmfSO+
/aIxAXRGD+yKa+inDVG9yGWGMumNAvbm2qHodZTilwKvUJFWcB39cs/yDpSSmCER
ql9t5lf2VuFToZFDapqmaisUm7kd2kj0bTOM6NW5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUZjJXDfgUcHjFZYhBKMANr4hsjQMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzM3NWE2Y2EyLTc3MGYtNDVlMS1hOGFmLTEwYzczMDM4MThhMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAejd4AwDQYJKoZIhvcNAQELBQADggEBAJTxyLmNtvXrrCVBctt0PmR3JLfj
DFpeYAQ64vX8Sxo+2iVUagBxCpVcoeFk6ctAWFx7nYHemskwqaierzI2pNZOIQC0
Tm5lT4fccJCSHaWSLPs2ff3Kxb+QKSH38wzrPDwEXBnKq7KIXBaEdRg/LA8fTMSx
4Stk//ZAWfoh55lKLbrAonDQcepLMvRh1pnWHGR3Fnb8I0j09/Dwc5ppb3Uo7sWP
Wu77i/jtQb798iIgsFRDmszGXuKzbhoXfZcPNGy8ApMaHjAweWLxhGaF67cV+4Az
xh1RId9AHkWQtKZEomvYKMKe4w5YS8UmW75WvTxhpI+Z2WrQuCc2SlNh3lw=
-----END CERTIFICATE-----