Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c0520ff-eed4-48ce-be7c-ec1c56f2cf31.roa
File:                     4c0520ff-eed4-48ce-be7c-ec1c56f2cf31.roa (raw, json)
Hash identifier:          qNl6gfHRW0Lfe3KN2ZJoHqWmzX4hS1rEj/Rdfy4qmrw=
Subject key identifier:   07:8E:86:CD:A1:17:74:05:AE:26:59:EF:C6:F0:7F:86:03:58:23:49
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0DCBD7D1F0D036418B058EB9B6D7D0B7567A5326
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c0520ff-eed4-48ce-be7c-ec1c56f2cf31.roa
Signing time:             Tue 21 Oct 2025 00:50:05 +0000
ROA not before:           Tue 21 Oct 2025 00:50:05 +0000
ROA not after:            Tue 25 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        202.5.172.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:cb:d7:d1:f0:d0:36:41:8b:05:8e:b9:b6:d7:d0:b7:56:7a:53:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 21 00:50:05 2025 GMT
            Not After : Nov 25 23:59:59 2025 GMT
        Subject: serialNumber=e4eff60a3bea58d1bee14335588672f15a66d4fbdf488eaefad169721392a1f0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b0:1d:88:f0:bf:6c:d4:71:f1:ae:2c:d2:59:
                    69:c3:19:46:bb:2e:5f:42:ca:07:a8:7a:b5:b8:2a:
                    30:e4:96:00:2d:6a:8a:0b:89:13:cb:e3:2b:d7:48:
                    2f:24:f6:7a:f2:cd:4b:f4:ac:94:2a:d5:dc:11:c6:
                    79:90:b7:65:b5:5a:8a:46:02:20:8e:8b:57:bc:05:
                    c7:b1:01:a5:76:b2:74:3c:55:8a:0c:33:ab:c9:e4:
                    33:04:fa:6a:4d:39:06:30:2d:d0:58:f3:21:6e:97:
                    05:2a:d4:d1:f5:4b:a8:93:29:9a:f4:29:d5:cb:e6:
                    ba:5d:e1:2f:f2:f2:58:3e:26:aa:c8:0b:e2:4e:de:
                    0a:98:68:f5:c1:7b:29:e8:2f:87:18:f2:85:e2:3f:
                    c5:65:e6:7d:5d:5e:71:7a:77:00:97:21:5e:42:82:
                    82:ea:20:5b:8a:0e:bc:b1:47:b9:2f:fb:98:3a:42:
                    1d:bc:fa:f4:71:93:12:77:5d:29:58:8d:97:28:d1:
                    b3:61:38:1a:2e:6c:96:d2:cd:27:cd:a5:c5:dd:ac:
                    7f:48:7a:66:20:1b:5c:d7:07:9e:c5:77:ae:a0:a1:
                    ad:37:33:f3:30:5b:25:a3:b3:57:18:cc:d2:0f:44:
                    e5:f4:66:20:42:45:b6:16:71:32:10:15:68:94:87:
                    49:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:8E:86:CD:A1:17:74:05:AE:26:59:EF:C6:F0:7F:86:03:58:23:49
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c0520ff-eed4-48ce-be7c-ec1c56f2cf31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.5.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:b8:c1:0a:09:66:9d:55:8e:37:8b:37:90:b5:b2:5c:07:8e:
         1d:66:f5:42:ff:3e:e5:55:1b:1a:7a:36:eb:1a:f4:05:d5:ac:
         d1:87:0b:96:5f:17:a3:f4:f2:c8:3c:9b:01:e5:f4:af:54:67:
         80:0e:9b:ac:de:70:69:b3:1a:72:7a:f7:42:a9:c3:56:ae:9c:
         27:b1:0f:b2:27:66:e1:b6:1d:86:dd:f4:47:d6:b0:6e:7e:25:
         0d:3d:49:6f:0c:89:75:46:f5:0c:93:b6:c2:4b:e2:9d:a5:8e:
         55:5d:c7:b8:29:c3:99:df:a9:2f:d2:50:d6:a8:61:1f:fc:94:
         90:48:0c:b0:f7:b8:a8:ce:40:de:01:0d:ad:27:e1:62:79:05:
         2c:af:b8:ad:60:61:ca:fe:50:e2:3a:b7:1e:ef:9a:d1:c4:85:
         67:d8:c3:cb:b1:46:f7:86:1e:de:32:94:3b:ea:0d:c5:19:45:
         0d:87:f2:d4:e4:cf:d0:32:37:83:dc:b9:95:c6:33:2a:a1:90:
         0c:79:8b:3e:e4:67:09:c0:3a:a4:4c:17:a2:90:46:c3:98:98:
         66:59:e2:0b:c0:ee:89:13:a4:3d:d5:ba:85:6a:d8:18:61:ae:
         1d:d2:04:aa:42:45:14:5b:55:d1:37:09:f4:2b:42:5d:33:9a:
         5a:3e:0b:19
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUDcvX0fDQNkGLBY65ttfQt1Z6UyYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIxMDA1MDA1WhcNMjUxMTI1MjM1OTU5
WjB6MUkwRwYDVQQFE0BlNGVmZjYwYTNiZWE1OGQxYmVlMTQzMzU1ODg2NzJmMTVh
NjZkNGZiZGY0ODhlYWVmYWQxNjk3MjEzOTJhMWYwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDFsB2I8L9s1HHxrizSWWnDGUa7Ll9CygeoerW4KjDklgAt
aooLiRPL4yvXSC8k9nryzUv0rJQq1dwRxnmQt2W1WopGAiCOi1e8BcexAaV2snQ8
VYoMM6vJ5DME+mpNOQYwLdBY8yFulwUq1NH1S6iTKZr0KdXL5rpd4S/y8lg+JqrI
C+JO3gqYaPXBeynoL4cY8oXiP8Vl5n1dXnF6dwCXIV5CgoLqIFuKDryxR7kv+5g6
Qh28+vRxkxJ3XSlYjZco0bNhOBoubJbSzSfNpcXdrH9IemYgG1zXB57Fd66goa03
M/MwWyWjs1cYzNIPROX0ZiBCRbYWcTIQFWiUh0m5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUB46GzaEXdAWuJlnvxvB/hgNYI0kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzRjMDUyMGZmLWVlZDQtNDhjZS1iZTdjLWVjMWM1NmYyY2YzMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALKBawwDQYJKoZIhvcNAQELBQADggEBAGC4wQoJZp1VjjeLN5C1slwHjh1m
9UL/PuVVGxp6Nusa9AXVrNGHC5ZfF6P08sg8mwHl9K9UZ4AOm6zecGmzGnJ690Kp
w1aunCexD7InZuG2HYbd9EfWsG5+JQ09SW8MiXVG9QyTtsJL4p2ljlVdx7gpw5nf
qS/SUNaoYR/8lJBIDLD3uKjOQN4BDa0n4WJ5BSyvuK1gYcr+UOI6tx7vmtHEhWfY
w8uxRveGHt4ylDvqDcUZRQ2H8tTkz9AyN4PcuZXGMyqhkAx5iz7kZwnAOqRMF6KQ
RsOYmGZZ4gvA7okTpD3VuoVq2Bhhrh3SBKpCRRRbVdE3CfQrQl0zmlo+Cxk=
-----END CERTIFICATE-----