Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/984a59d5-e044-49ef-ae66-4b6be4d4d9cb.roa
File:                     984a59d5-e044-49ef-ae66-4b6be4d4d9cb.roa (raw, json)
Hash identifier:          R2BOy/bPQhNKs6neWpDWCavQxGFy4rtEprzOzUTIS8I=
Subject key identifier:   37:77:E2:21:2F:32:59:7D:0D:DD:6D:59:C1:BC:DA:C4:81:54:71:A0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2C39C25DA24294DAF21990FEC2F2B3E7775CF6F6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/984a59d5-e044-49ef-ae66-4b6be4d4d9cb.roa
Signing time:             Fri 24 Oct 2025 00:10:05 +0000
ROA not before:           Fri 24 Oct 2025 00:10:05 +0000
ROA not after:            Fri 28 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        129.235.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:39:c2:5d:a2:42:94:da:f2:19:90:fe:c2:f2:b3:e7:77:5c:f6:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 24 00:10:05 2025 GMT
            Not After : Nov 28 23:59:59 2025 GMT
        Subject: serialNumber=0aef3c8b78007c34cecebc8372b73e156d0a018e2c3d1e835400db87fa682878, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9b:9f:8f:18:58:d5:9b:ed:a7:63:bd:6e:8c:
                    14:ee:eb:b5:b3:f3:d9:df:49:d5:b4:8e:45:b3:bb:
                    1f:4b:d8:ab:d1:35:a6:72:46:01:1b:fd:fe:9f:ca:
                    f5:8e:5d:3a:e5:ea:84:da:3c:c9:21:d2:49:6f:fc:
                    56:5a:2b:f1:6b:12:72:c3:f7:80:3d:24:88:6e:1b:
                    5e:48:c3:00:22:d2:d0:72:29:93:62:70:84:4a:7e:
                    54:b6:4a:6f:43:0e:08:55:e3:5d:32:ba:68:69:12:
                    17:da:dc:7c:22:ad:37:44:ee:7f:55:b6:cd:46:a4:
                    ed:7a:e9:a5:f3:c5:17:cf:23:a2:5f:99:ad:85:c5:
                    8a:08:a9:9d:99:98:4a:f9:41:4e:68:ab:17:35:59:
                    44:60:0b:3d:55:9c:b6:18:09:b9:b2:ae:fd:84:87:
                    c0:4f:0d:40:38:6a:f6:a2:da:63:cd:c2:66:65:fb:
                    84:1f:45:b5:9b:5b:35:0a:02:cf:6b:85:05:b9:16:
                    7f:5d:f2:5a:44:fa:8a:99:7e:95:b1:b9:40:27:ae:
                    fd:d8:67:3f:6a:70:4a:c4:09:70:91:1e:92:3d:06:
                    9c:4f:0e:40:bd:83:75:a2:c5:9c:b1:ad:d8:80:dd:
                    15:20:29:59:f5:7a:53:ed:a2:b4:36:96:61:da:6a:
                    81:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:77:E2:21:2F:32:59:7D:0D:DD:6D:59:C1:BC:DA:C4:81:54:71:A0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/984a59d5-e044-49ef-ae66-4b6be4d4d9cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.235.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         41:7e:f7:24:03:b5:a3:9f:49:94:51:55:66:94:3c:84:44:77:
         77:e9:2b:a9:e5:4a:e7:5c:84:3e:cf:f0:e1:b4:f2:b5:bf:a5:
         a6:4e:33:fb:58:59:19:f9:33:e0:cf:76:9c:00:f9:ee:c8:78:
         bd:a6:3c:36:31:37:73:43:63:a0:ec:5b:de:82:79:0f:d7:41:
         cb:70:cb:f1:7f:85:9a:f5:67:ac:87:47:92:7b:2f:ee:5d:2f:
         dc:e9:8e:a8:0c:b6:64:f3:40:0e:c0:79:a9:c3:05:cb:7a:63:
         8f:51:07:37:a4:cb:36:d1:7a:ab:56:2b:b8:4b:af:ea:d8:49:
         49:79:be:b8:2a:87:2d:dd:05:db:b5:e0:9e:86:1f:c1:7f:b7:
         9c:f6:ff:10:9d:1e:d1:5c:0c:2c:70:83:53:00:2c:db:84:60:
         be:fc:9e:4c:4d:de:18:77:e3:4b:35:ce:1a:92:64:bd:61:2f:
         c7:30:08:df:77:82:e0:ff:99:3d:00:3a:81:4d:04:16:23:b5:
         40:1a:33:7f:cd:e4:f0:f2:b5:15:55:63:bd:f2:0a:62:16:80:
         c4:30:45:44:d2:6a:c3:fb:b6:39:b0:98:b6:06:66:99:71:10:
         92:03:d8:ac:d6:4a:8c:38:be:7f:d8:c0:94:4e:2d:28:c6:d5:
         c0:e1:cb:66
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIULDnCXaJClNryGZD+wvKz53dc9vYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDI0MDAxMDA1WhcNMjUxMTI4MjM1OTU5
WjB6MUkwRwYDVQQFE0AwYWVmM2M4Yjc4MDA3YzM0Y2VjZWJjODM3MmI3M2UxNTZk
MGEwMThlMmMzZDFlODM1NDAwZGI4N2ZhNjgyODc4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCjm5+PGFjVm+2nY71ujBTu67Wz89nfSdW0jkWzux9L2KvR
NaZyRgEb/f6fyvWOXTrl6oTaPMkh0klv/FZaK/FrEnLD94A9JIhuG15IwwAi0tBy
KZNicIRKflS2Sm9DDghV410yumhpEhfa3HwirTdE7n9Vts1GpO166aXzxRfPI6Jf
ma2FxYoIqZ2ZmEr5QU5oqxc1WURgCz1VnLYYCbmyrv2Eh8BPDUA4avai2mPNwmZl
+4QfRbWbWzUKAs9rhQW5Fn9d8lpE+oqZfpWxuUAnrv3YZz9qcErECXCRHpI9BpxP
DkC9g3WixZyxrdiA3RUgKVn1elPtorQ2lmHaaoGTAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUN3fiIS8yWX0N3W1ZwbzaxIFUcaAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzk4NGE1OWQ1LWUwNDQtNDllZi1hZTY2LTRiNmJlNGQ0ZDljYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCB6zANBgkqhkiG9w0BAQsFAAOCAQEAQX73JAO1o59JlFFVZpQ8hER3d+kr
qeVK51yEPs/w4bTytb+lpk4z+1hZGfkz4M92nAD57sh4vaY8NjE3c0NjoOxb3oJ5
D9dBy3DL8X+FmvVnrIdHknsv7l0v3OmOqAy2ZPNADsB5qcMFy3pjj1EHN6TLNtF6
q1YruEuv6thJSXm+uCqHLd0F27XgnoYfwX+3nPb/EJ0e0VwMLHCDUwAs24Rgvvye
TE3eGHfjSzXOGpJkvWEvxzAI33eC4P+ZPQA6gU0EFiO1QBozf83k8PK1FVVjvfIK
YhaAxDBFRNJqw/u2ObCYtgZmmXEQkgPYrNZKjDi+f9jAlE4tKMbVwOHLZg==
-----END CERTIFICATE-----