Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f822f75-fc14-46c1-a803-e47f23928368.roa
File:                     4f822f75-fc14-46c1-a803-e47f23928368.roa (raw, json)
Hash identifier:          aJKEcjOwgL67j6adU2xo1VUwcrCkub7ZCRXtOwrxxyQ=
Subject key identifier:   81:89:F5:EA:8B:D6:F8:57:84:F0:88:D2:7B:19:44:4F:9E:62:0D:5B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       411D07A5A9122050ED9377D6F41EE693A3711A13
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f822f75-fc14-46c1-a803-e47f23928368.roa
Signing time:             Tue 21 Oct 2025 00:20:04 +0000
ROA not before:           Tue 21 Oct 2025 00:20:04 +0000
ROA not after:            Tue 25 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        202.174.131.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:1d:07:a5:a9:12:20:50:ed:93:77:d6:f4:1e:e6:93:a3:71:1a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 21 00:20:04 2025 GMT
            Not After : Nov 25 23:59:59 2025 GMT
        Subject: serialNumber=a4657bc2c9f88498037ce039cd5630b5c195ae87c229f4a717affce57f201d3d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5e:7c:b9:bb:c2:cf:cd:c8:bf:5b:0b:57:13:
                    91:91:11:1d:7b:0c:fb:ae:7b:9f:86:80:55:5a:3e:
                    5d:81:00:f9:65:71:05:5c:6b:55:e3:4b:16:1d:ed:
                    be:cd:cb:30:84:ab:ca:d8:9d:85:90:83:a9:f6:7c:
                    9b:b2:0f:14:8a:a7:f8:4c:d7:87:f0:90:c2:a4:4c:
                    ac:1c:ca:97:8f:ed:72:e2:a0:30:29:76:68:6e:d6:
                    f9:61:62:40:11:8d:54:bc:8e:a1:0b:81:af:d0:28:
                    5c:71:41:08:33:1a:59:ee:db:7b:cd:2f:53:a4:42:
                    c9:72:94:e2:c8:21:74:4c:5f:88:50:82:af:f5:e5:
                    53:07:b7:8a:15:d6:ed:db:32:2f:2b:38:32:31:67:
                    af:4a:45:9f:6a:0f:0b:06:18:b1:20:11:14:3d:b7:
                    3f:7f:06:7d:98:63:7f:87:00:a2:7d:36:e7:10:bf:
                    d5:b5:13:6b:b6:19:72:65:22:f6:16:be:48:6c:61:
                    01:d5:48:2d:3d:3f:01:a9:28:77:9a:cd:07:56:dd:
                    7a:17:aa:6f:32:8f:c4:b8:71:0d:ec:55:94:ae:ea:
                    28:8f:f0:1b:4c:85:50:c0:63:e7:93:10:b9:a8:01:
                    e3:38:4c:2d:fc:3f:6a:6a:08:ff:d5:a3:77:d5:ea:
                    9d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:89:F5:EA:8B:D6:F8:57:84:F0:88:D2:7B:19:44:4F:9E:62:0D:5B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f822f75-fc14-46c1-a803-e47f23928368.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.174.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:ac:42:da:6b:a5:7e:c2:38:1c:85:b9:8c:79:b3:75:b9:7d:
         f2:c9:b5:12:3a:c3:b4:d9:55:25:78:fc:17:98:2e:8b:77:6f:
         ff:2f:85:47:72:e8:da:53:d0:cf:22:d2:5a:7e:bb:1a:fc:75:
         7e:ae:04:73:24:2a:a7:bb:b8:4f:1d:63:08:ea:cc:1e:b0:6d:
         77:3d:99:7f:18:7a:0a:2d:d6:c1:42:f3:35:ea:e5:46:7f:28:
         a7:87:05:e9:fa:55:9d:70:21:f5:09:fd:94:7b:ef:b1:e1:fc:
         fb:ce:95:9f:86:df:60:25:9b:3d:ae:73:d9:e6:fa:53:02:4d:
         e1:87:5c:15:66:61:7b:98:50:27:d5:ce:05:42:fa:2b:99:8d:
         8a:86:a7:6e:b5:f2:ec:a1:a4:af:84:5a:2b:62:c9:c5:26:40:
         35:a2:3e:4d:75:28:f3:d7:8a:52:39:e6:b2:c8:dc:31:17:0d:
         42:9d:ae:c4:eb:70:98:70:2c:09:bb:29:36:2f:8c:25:50:e5:
         bb:e7:a2:03:8b:70:4c:3d:14:46:2f:9c:94:2a:44:95:72:98:
         be:b6:f9:6b:bf:fa:fb:bc:23:47:55:d0:ab:3e:cb:76:c3:c0:
         87:b4:66:a1:b2:0c:33:69:d3:09:21:5f:70:76:16:69:63:81:
         83:69:aa:29
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQR0HpakSIFDtk3fW9B7mk6NxGhMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIxMDAyMDA0WhcNMjUxMTI1MjM1OTU5
WjB6MUkwRwYDVQQFE0BhNDY1N2JjMmM5Zjg4NDk4MDM3Y2UwMzljZDU2MzBiNWMx
OTVhZTg3YzIyOWY0YTcxN2FmZmNlNTdmMjAxZDNkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9Xny5u8LPzci/WwtXE5GRER17DPuue5+GgFVaPl2BAPll
cQVca1XjSxYd7b7NyzCEq8rYnYWQg6n2fJuyDxSKp/hM14fwkMKkTKwcypeP7XLi
oDApdmhu1vlhYkARjVS8jqELga/QKFxxQQgzGlnu23vNL1OkQslylOLIIXRMX4hQ
gq/15VMHt4oV1u3bMi8rODIxZ69KRZ9qDwsGGLEgERQ9tz9/Bn2YY3+HAKJ9NucQ
v9W1E2u2GXJlIvYWvkhsYQHVSC09PwGpKHeazQdW3XoXqm8yj8S4cQ3sVZSu6iiP
8BtMhVDAY+eTELmoAeM4TC38P2pqCP/Vo3fV6p03AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUgYn16ovW+FeE8IjSexlET55iDVswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzRmODIyZjc1LWZjMTQtNDZjMS1hODAzLWU0N2YyMzkyODM2OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADKroMwDQYJKoZIhvcNAQELBQADggEBAFOsQtprpX7COByFuYx5s3W5ffLJ
tRI6w7TZVSV4/BeYLot3b/8vhUdy6NpT0M8i0lp+uxr8dX6uBHMkKqe7uE8dYwjq
zB6wbXc9mX8Yegot1sFC8zXq5UZ/KKeHBen6VZ1wIfUJ/ZR777Hh/PvOlZ+G32Al
mz2uc9nm+lMCTeGHXBVmYXuYUCfVzgVC+iuZjYqGp2618uyhpK+EWitiycUmQDWi
Pk11KPPXilI55rLI3DEXDUKdrsTrcJhwLAm7KTYvjCVQ5bvnogOLcEw9FEYvnJQq
RJVymL62+Wu/+vu8I0dV0Ks+y3bDwIe0ZqGyDDNp0wkhX3B2FmljgYNpqik=
-----END CERTIFICATE-----