Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6928a406-38e7-41d6-a4c4-6665e62bdcea.roa
File:                     6928a406-38e7-41d6-a4c4-6665e62bdcea.roa (raw, json)
Hash identifier:          WyFAa09PQl+z6amlqOKdfl7QiDv5ZkI/825nhCKo5N4=
Subject key identifier:   6B:B7:3F:72:87:49:6A:C3:D7:E4:07:86:C4:08:EF:BE:3B:A5:ED:78
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       40A970869179F86AA4A4CBCD02A7A8020CE009ED
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6928a406-38e7-41d6-a4c4-6665e62bdcea.roa
Signing time:             Fri 31 Oct 2025 00:40:05 +0000
ROA not before:           Fri 31 Oct 2025 00:40:05 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.144.32.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a9:70:86:91:79:f8:6a:a4:a4:cb:cd:02:a7:a8:02:0c:e0:09:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 31 00:40:05 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=c25237f123fc0dc12fa27ee70382cf865de7f73e8eddc01cd3654a968e75ba73, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:91:bb:14:84:fa:28:7b:e8:ba:28:c8:8a:51:
                    af:b8:f0:6c:6c:aa:99:2c:09:a1:8e:f5:35:87:7f:
                    d4:66:4f:be:92:8d:56:6e:60:b9:26:ee:2b:c5:d9:
                    ee:e7:0b:8c:67:bf:84:2f:f9:8e:4c:52:ff:93:b6:
                    bd:9b:af:a3:5d:bb:21:1c:d3:59:fb:74:7d:61:90:
                    c8:86:46:96:74:30:ce:37:a8:3f:7d:61:a5:6b:46:
                    96:1c:f8:19:74:6f:8c:f4:74:1e:fe:60:37:f4:ce:
                    b2:92:55:63:f1:b5:5f:2e:b6:6a:28:b5:b9:52:3e:
                    03:af:dc:c3:7d:9b:36:82:06:c1:a8:32:5d:3a:98:
                    0d:22:ea:b9:16:32:19:57:e5:20:00:c9:71:96:84:
                    fc:1f:ab:20:cc:84:c1:d8:81:20:c8:cb:4c:36:c0:
                    1e:a1:c1:0a:dc:70:b7:b6:a1:6c:8c:5e:19:52:2b:
                    41:59:47:b3:ac:a9:2b:79:f5:9e:fc:15:98:72:0e:
                    73:e6:da:51:e8:1f:ab:95:f0:1d:1d:f5:2e:0c:7d:
                    3b:12:c0:b4:52:94:95:86:98:1c:6b:ca:88:74:71:
                    5a:60:dc:20:18:d4:bf:21:7b:fc:81:5f:63:d2:27:
                    b7:10:6c:eb:22:53:d3:3b:7a:c9:40:d0:5c:5b:ca:
                    7d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B7:3F:72:87:49:6A:C3:D7:E4:07:86:C4:08:EF:BE:3B:A5:ED:78
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6928a406-38e7-41d6-a4c4-6665e62bdcea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.144.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         10:65:ae:bb:e1:ef:34:6c:c1:4e:f6:fb:95:b9:6f:41:0c:5a:
         8e:21:94:88:07:7f:47:93:2f:73:a9:ea:2f:ff:cf:fe:43:14:
         90:fe:ba:0a:4c:05:7e:5b:09:a3:76:12:da:34:32:b5:aa:df:
         88:87:ad:69:0c:e9:05:04:c9:71:98:91:7d:dd:e6:40:95:61:
         e6:60:70:85:a0:53:a1:fe:df:93:a2:ea:f9:09:8d:89:2d:ac:
         20:d4:a1:bc:75:26:dd:ca:b3:ab:03:36:f9:18:7e:c4:0d:69:
         ab:e3:d0:fc:16:eb:75:75:19:cd:8f:57:8b:99:12:77:ce:0f:
         59:39:bc:72:7e:bd:80:f1:6c:1c:ca:76:8f:f5:57:ee:ea:d2:
         b0:7e:18:e0:c2:33:71:08:2f:ab:c2:36:a8:60:aa:17:77:b2:
         57:48:a4:4f:17:dc:c8:a5:3b:37:60:e9:cc:b8:69:f4:66:f6:
         12:70:4d:4e:f3:a2:7b:78:04:ec:cd:9d:b6:6e:9e:42:83:f8:
         2f:b9:52:10:12:77:31:bf:54:88:af:e3:fc:34:fc:49:50:9c:
         06:27:29:e1:ba:a1:bf:fd:cc:13:6c:07:ed:b6:b1:4b:77:53:
         2a:28:11:2e:dc:14:aa:13:ef:ef:3e:78:e2:bd:04:1d:eb:7b:
         bb:60:e6:d0
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQKlwhpF5+GqkpMvNAqeoAgzgCe0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDMxMDA0MDA1WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BjMjUyMzdmMTIzZmMwZGMxMmZhMjdlZTcwMzgyY2Y4NjVk
ZTdmNzNlOGVkZGMwMWNkMzY1NGE5NjhlNzViYTczMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCGkbsUhPooe+i6KMiKUa+48GxsqpksCaGO9TWHf9RmT76S
jVZuYLkm7ivF2e7nC4xnv4Qv+Y5MUv+Ttr2br6NduyEc01n7dH1hkMiGRpZ0MM43
qD99YaVrRpYc+Bl0b4z0dB7+YDf0zrKSVWPxtV8utmootblSPgOv3MN9mzaCBsGo
Ml06mA0i6rkWMhlX5SAAyXGWhPwfqyDMhMHYgSDIy0w2wB6hwQrccLe2oWyMXhlS
K0FZR7OsqSt59Z78FZhyDnPm2lHoH6uV8B0d9S4MfTsSwLRSlJWGmBxryoh0cVpg
3CAY1L8he/yBX2PSJ7cQbOsiU9M7eslA0Fxbyn0zAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUa7c/codJasPX5AeGxAjvvjul7XgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzY5MjhhNDA2LTM4ZTctNDFkNi1hNGM0LTY2NjVlNjJiZGNlYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQNkCAwDQYJKoZIhvcNAQELBQADggEBABBlrrvh7zRswU72+5W5b0EMWo4h
lIgHf0eTL3Op6i//z/5DFJD+ugpMBX5bCaN2Eto0MrWq34iHrWkM6QUEyXGYkX3d
5kCVYeZgcIWgU6H+35Oi6vkJjYktrCDUobx1Jt3Ks6sDNvkYfsQNaavj0PwW63V1
Gc2PV4uZEnfOD1k5vHJ+vYDxbBzKdo/1V+7q0rB+GODCM3EIL6vCNqhgqhd3sldI
pE8X3MilOzdg6cy4afRm9hJwTU7zont4BOzNnbZunkKD+C+5UhASdzG/VIiv4/w0
/ElQnAYnKeG6ob/9zBNsB+22sUt3UyooES7cFKoT7+8+eOK9BB3re7tg5tA=
-----END CERTIFICATE-----