Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e4df06b-3548-461b-a74c-4446484dc350.roa
File:                     6e4df06b-3548-461b-a74c-4446484dc350.roa (raw, json)
Hash identifier:          oYNieRKcRCk2Ec0JJPXICM50PpxDdE+7UyPV7bhhf60=
Subject key identifier:   88:A6:AD:9B:B9:31:DA:8D:66:23:60:1D:95:7C:4B:D6:98:42:4D:E6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       35497551AE39CEDBA8F44A091ACA9D247ED991ED
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e4df06b-3548-461b-a74c-4446484dc350.roa
Signing time:             Tue 28 Oct 2025 00:51:27 +0000
ROA not before:           Tue 28 Oct 2025 00:51:27 +0000
ROA not after:            Tue 02 Dec 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        16.65.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:49:75:51:ae:39:ce:db:a8:f4:4a:09:1a:ca:9d:24:7e:d9:91:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 28 00:51:27 2025 GMT
            Not After : Dec  2 23:59:59 2025 GMT
        Subject: serialNumber=7ebbf63e02e5d658a98327b11eca351c55e4c8c8f5cd91e80ee90effac697fb4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c1:72:74:b4:d8:da:5a:30:d5:2c:72:da:f3:
                    e8:c7:e4:f5:cf:fa:56:7e:f2:0a:00:d5:b6:12:2a:
                    9e:54:7d:2f:da:f0:dd:91:b7:9e:4a:b3:e7:83:cf:
                    0e:93:06:29:fd:6b:98:6a:44:3f:97:4d:94:a7:9a:
                    1b:6b:5b:05:3c:5d:29:fc:1f:b4:a5:55:a5:e6:b3:
                    38:b1:c6:f9:3c:b1:cf:22:e9:8e:cd:65:43:7d:92:
                    d4:a6:35:bd:6c:42:e7:91:be:1f:ac:d7:62:ff:ab:
                    28:a1:68:e0:8d:0d:55:db:f4:af:98:d3:32:37:e4:
                    71:c0:a2:04:1c:08:f6:f1:2e:ef:fd:d4:b2:62:a9:
                    7a:07:a0:9b:fa:d3:1c:15:35:1a:33:4b:ad:a0:e9:
                    88:8e:06:17:4e:4d:fd:73:d6:77:d7:44:00:7b:d1:
                    a9:9f:f2:d4:c0:5e:22:51:85:5c:05:91:6a:aa:af:
                    c4:a6:52:91:fa:30:ad:ce:b1:20:ce:ec:d6:85:52:
                    1a:6b:62:dc:f8:74:36:42:b4:ed:cd:f7:06:d2:f4:
                    1d:11:6c:93:da:b5:86:ee:33:cd:1a:ec:8a:51:84:
                    40:17:8f:dd:f1:2c:5f:ef:fc:ae:9e:4b:bd:1b:3c:
                    7d:d2:8f:b4:8f:57:2d:63:d0:60:3a:53:c9:33:5e:
                    77:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A6:AD:9B:B9:31:DA:8D:66:23:60:1D:95:7C:4B:D6:98:42:4D:E6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e4df06b-3548-461b-a74c-4446484dc350.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.65.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4f:5d:5d:72:1d:51:40:75:b7:ba:c6:0d:34:a3:48:e1:7e:a9:
         b5:19:6a:c4:ef:b1:3d:33:95:51:24:e9:15:49:a6:f4:94:43:
         c2:d8:38:41:4a:53:82:a2:51:c4:1c:63:8f:a0:78:93:2f:af:
         8b:72:da:0d:89:23:7a:7a:b9:45:0c:e5:5a:aa:e8:f7:3c:5e:
         68:df:cc:7d:54:52:03:6b:f2:de:be:b1:a6:53:fe:64:61:4c:
         d7:6e:ac:0a:d0:49:54:1b:f8:4c:9e:9b:b9:3c:76:01:77:aa:
         46:9b:89:35:30:0c:da:c5:41:3c:a8:e2:22:56:99:b2:ef:8b:
         e7:33:f7:49:08:1f:d1:8e:ae:a0:73:0f:8e:16:48:f6:23:71:
         7a:79:1e:45:da:8c:57:3b:c3:dd:02:4f:e2:dd:89:2c:03:b1:
         21:00:84:31:43:08:ad:ea:c5:21:3f:f4:8d:76:79:ed:4a:93:
         fa:c3:fa:c0:36:b9:87:c5:0e:aa:01:84:4f:17:83:24:cf:11:
         a3:ce:df:46:7c:a4:d4:e4:29:e3:25:f5:27:fd:b5:8e:a7:43:
         a5:53:fc:59:bc:60:20:47:37:75:73:d5:f1:f1:62:63:90:0a:
         09:ff:6a:e3:28:6e:49:d1:5d:91:da:20:44:19:09:24:39:87:
         11:cb:4d:ee
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUNUl1Ua45ztuo9EoJGsqdJH7Zke0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDI4MDA1MTI3WhcNMjUxMjAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A3ZWJiZjYzZTAyZTVkNjU4YTk4MzI3YjExZWNhMzUxYzU1
ZTRjOGM4ZjVjZDkxZTgwZWU5MGVmZmFjNjk3ZmI0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwwXJ0tNjaWjDVLHLa8+jH5PXP+lZ+8goA1bYSKp5UfS/a
8N2Rt55Ks+eDzw6TBin9a5hqRD+XTZSnmhtrWwU8XSn8H7SlVaXmszixxvk8sc8i
6Y7NZUN9ktSmNb1sQueRvh+s12L/qyihaOCNDVXb9K+Y0zI35HHAogQcCPbxLu/9
1LJiqXoHoJv60xwVNRozS62g6YiOBhdOTf1z1nfXRAB70amf8tTAXiJRhVwFkWqq
r8SmUpH6MK3OsSDO7NaFUhprYtz4dDZCtO3N9wbS9B0RbJPatYbuM80a7IpRhEAX
j93xLF/v/K6eS70bPH3Sj7SPVy1j0GA6U8kzXnc1AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUiKatm7kx2o1mI2AdlXxL1phCTeYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZlNGRmMDZiLTM1NDgtNDYxYi1hNzRjLTQ0NDY0ODRkYzM1MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQQTANBgkqhkiG9w0BAQsFAAOCAQEAT11dch1RQHW3usYNNKNI4X6ptRlq
xO+xPTOVUSTpFUmm9JRDwtg4QUpTgqJRxBxjj6B4ky+vi3LaDYkjenq5RQzlWqro
9zxeaN/MfVRSA2vy3r6xplP+ZGFM126sCtBJVBv4TJ6buTx2AXeqRpuJNTAM2sVB
PKjiIlaZsu+L5zP3SQgf0Y6uoHMPjhZI9iNxenkeRdqMVzvD3QJP4t2JLAOxIQCE
MUMIrerFIT/0jXZ57UqT+sP6wDa5h8UOqgGETxeDJM8Ro87fRnyk1OQp4yX1J/21
jqdDpVP8WbxgIEc3dXPV8fFiY5AKCf9q4yhuSdFdkdogRBkJJDmHEctN7g==
-----END CERTIFICATE-----