Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aae2d162-8718-4e30-8f4a-57332cb846c6.roa
File:                     aae2d162-8718-4e30-8f4a-57332cb846c6.roa (raw, json)
Hash identifier:          INWbxd3u2KWh+0PSe1XkqXRqmxmGKRg8as9hh7r+ksU=
Subject key identifier:   A3:C5:19:CD:65:55:15:A3:5E:42:D4:37:31:9F:B9:07:F7:DA:4D:4A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       214929E7468B756539643BA0DF0D60F8C5D7A9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aae2d162-8718-4e30-8f4a-57332cb846c6.roa
Signing time:             Tue 21 Oct 2025 00:50:08 +0000
ROA not before:           Tue 21 Oct 2025 00:50:08 +0000
ROA not after:            Tue 25 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        45.57.160.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:49:29:e7:46:8b:75:65:39:64:3b:a0:df:0d:60:f8:c5:d7:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 21 00:50:08 2025 GMT
            Not After : Nov 25 23:59:59 2025 GMT
        Subject: serialNumber=f870bda467668ce45a832a9221637aee2d2e0f9f97e80771d4862d46dbf4cfe8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e3:5d:38:88:5c:af:33:d4:7a:70:a0:2e:1e:
                    f4:9c:9b:75:c8:99:0a:75:5e:28:7d:75:43:f6:e7:
                    56:4c:e3:98:f0:5d:b4:e3:12:9a:0e:6e:c0:5b:b6:
                    bb:7b:5c:b2:c6:56:12:42:90:4c:2d:25:bf:1c:40:
                    e7:1e:6f:be:72:16:fe:84:56:b3:ac:ff:73:1d:69:
                    ea:5d:17:72:43:39:2e:57:c1:4d:a9:f0:2a:a1:60:
                    61:e2:d8:ca:0a:fb:91:27:c4:e6:d5:ef:bd:82:c5:
                    ad:d9:59:4d:a5:e3:cf:e5:1a:82:25:96:3f:d5:4d:
                    3b:36:81:ea:b9:aa:80:f8:76:54:68:71:d0:ae:4a:
                    d1:51:6b:1f:c2:4a:fd:77:18:9f:41:bb:52:8c:f4:
                    13:b4:44:32:b5:1c:40:5e:e5:93:05:15:2f:01:05:
                    5d:e7:c8:93:ef:4c:30:be:66:78:7c:b1:3f:2a:fd:
                    86:5f:b8:88:5c:d4:2f:b1:de:99:46:dd:b6:a1:9d:
                    70:f9:dd:88:d7:ec:55:b6:7a:65:29:0e:f2:2c:2d:
                    87:c3:09:6e:5b:a4:e0:3d:c8:14:e9:d1:9e:42:7b:
                    cb:53:eb:a5:a4:b5:67:b2:e1:b4:b2:a5:88:f4:66:
                    80:59:f9:c4:ce:67:02:96:ad:29:e3:d0:df:04:78:
                    f7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C5:19:CD:65:55:15:A3:5E:42:D4:37:31:9F:B9:07:F7:DA:4D:4A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aae2d162-8718-4e30-8f4a-57332cb846c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.57.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1d:6d:f5:bb:9d:2b:a1:13:1b:de:3f:5b:06:05:9e:3a:0f:0d:
         db:7d:29:31:24:89:78:8c:81:16:5e:c5:f6:bc:6f:e1:a3:a9:
         8b:fe:22:ca:48:06:ed:c4:10:4d:7f:df:a8:50:f8:fe:0a:0f:
         81:86:43:ff:9a:fc:75:50:9a:19:52:2a:bf:21:42:6f:17:7d:
         6f:00:a5:9f:af:eb:1e:68:b4:b7:65:5a:5c:b0:c1:74:10:bb:
         f7:71:e5:01:ea:94:c2:2f:bb:df:5c:3c:27:08:11:b9:a7:8b:
         e1:d7:78:c5:4c:09:6d:05:60:5a:23:38:57:cf:11:2c:73:59:
         6c:64:b5:93:55:81:e3:07:e5:bd:d4:4d:19:ea:52:86:c0:3e:
         85:fc:8f:0d:8c:82:04:35:99:2f:ff:32:49:09:02:26:74:f7:
         67:9d:d5:f9:bc:29:61:c7:99:db:e1:7f:f2:ba:d2:9b:d8:dd:
         60:82:7d:af:46:94:e4:d3:db:80:77:c2:aa:c5:c3:7e:b5:7b:
         d4:ba:50:bc:b4:fb:63:01:8a:f1:d4:49:f7:c3:1d:4e:f1:66:
         34:90:12:f6:26:59:22:e8:08:2d:06:0e:fd:ec:74:e7:7b:f2:
         57:d2:85:dc:d7:a6:6b:92:71:0a:9d:a0:77:43:d0:15:97:de:
         bd:46:39:9e
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgITIUkp50aLdWU5ZDug3w1g+MXXqTANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz
NzEwN2RiZThjYjcxZDBhNzAeFw0yNTEwMjEwMDUwMDhaFw0yNTExMjUyMzU5NTla
MHoxSTBHBgNVBAUTQGY4NzBiZGE0Njc2NjhjZTQ1YTgzMmE5MjIxNjM3YWVlMmQy
ZTBmOWY5N2U4MDc3MWQ0ODYyZDQ2ZGJmNGNmZTgxLTArBgNVBAMTJGIyNWM5NzBm
LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJDjXTiIXK8z1HpwoC4e9JybdciZCnVeKH11Q/bnVkzjmPBd
tOMSmg5uwFu2u3tcssZWEkKQTC0lvxxA5x5vvnIW/oRWs6z/cx1p6l0XckM5LlfB
TanwKqFgYeLYygr7kSfE5tXvvYLFrdlZTaXjz+UagiWWP9VNOzaB6rmqgPh2VGhx
0K5K0VFrH8JK/XcYn0G7Uoz0E7REMrUcQF7lkwUVLwEFXefIk+9MML5meHyxPyr9
hl+4iFzUL7HemUbdtqGdcPndiNfsVbZ6ZSkO8iwth8MJbluk4D3IFOnRnkJ7y1Pr
paS1Z7LhtLKliPRmgFn5xM5nApatKePQ3wR4900CAwEAAaOCArEwggKtMB0GA1Ud
DgQWBBSjxRnNZVUVo15C1Dcxn7kH99pNSjAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd
vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk
YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx
OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy
NWMwNDI5NDIvYWFlMmQxNjItODcxOC00ZTMwLThmNGEtNTczMzJjYjg0NmM2LnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt
MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBS05oDANBgkqhkiG9w0BAQsFAAOCAQEAHW31u50roRMb3j9bBgWeOg8N230p
MSSJeIyBFl7F9rxv4aOpi/4iykgG7cQQTX/fqFD4/goPgYZD/5r8dVCaGVIqvyFC
bxd9bwCln6/rHmi0t2VaXLDBdBC793HlAeqUwi+731w8JwgRuaeL4dd4xUwJbQVg
WiM4V88RLHNZbGS1k1WB4wflvdRNGepShsA+hfyPDYyCBDWZL/8ySQkCJnT3Z53V
+bwpYceZ2+F/8rrSm9jdYIJ9r0aU5NPbgHfCqsXDfrV71LpQvLT7YwGK8dRJ98Md
TvFmNJAS9iZZIugILQYO/ex053vyV9KF3Nema5JxCp2gd0PQFZfevUY5ng==
-----END CERTIFICATE-----