Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4fa34c0-4d4e-41df-b548-b55e6e3aebc2.roa
File:                     b4fa34c0-4d4e-41df-b548-b55e6e3aebc2.roa (raw, json)
Hash identifier:          nay1jaxBgdY3VkcxxHA15cS5zhL6T+9tmQQahdEjT0c=
Subject key identifier:   CD:75:6C:8E:E8:CA:BA:CA:0D:7E:CE:84:05:D3:7C:5E:2E:E5:87:8F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       310BC0EED4AD705187D7C2CF1D1D123452322749
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4fa34c0-4d4e-41df-b548-b55e6e3aebc2.roa
Signing time:             Sun 26 Oct 2025 00:00:11 +0000
ROA not before:           Sun 26 Oct 2025 00:00:11 +0000
ROA not after:            Sun 30 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        76.223.135.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:0b:c0:ee:d4:ad:70:51:87:d7:c2:cf:1d:1d:12:34:52:32:27:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 26 00:00:11 2025 GMT
            Not After : Nov 30 23:59:59 2025 GMT
        Subject: serialNumber=2bee5f0bb6c1c427adbf542233dc7d800258b872c866284dab5591a940a9a337, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e2:b8:6f:fb:6c:cb:2d:e8:9c:60:54:ff:6f:
                    f5:3b:17:a6:4e:07:de:91:86:9f:fd:cd:ee:49:af:
                    4d:d5:dc:10:8a:df:4e:df:c4:29:62:83:f8:aa:07:
                    7b:f9:e3:35:7f:0f:e8:b1:31:dd:ea:1f:c1:72:30:
                    60:8e:24:a8:36:70:53:61:59:23:3c:31:ec:bb:1e:
                    43:48:29:06:8f:27:63:69:35:8a:9b:91:9c:e2:8f:
                    0b:2d:d4:d4:1f:f9:61:d7:75:b7:b1:cb:30:34:be:
                    35:b1:8f:e7:72:b5:7d:6c:99:8e:16:c5:e4:48:75:
                    98:22:b5:52:2c:e8:84:84:bc:b9:f9:cb:e6:89:4d:
                    11:43:44:e0:ac:69:5d:cf:57:de:e6:24:7c:40:28:
                    2f:8a:99:1e:64:3b:36:b5:77:98:24:c8:8d:4f:f3:
                    64:2f:a9:06:af:fa:77:2d:37:1d:12:53:4d:2e:5b:
                    d5:ab:8d:d0:f0:d5:01:01:b0:ae:c0:08:1f:1a:87:
                    27:dd:df:a3:78:70:96:2f:67:97:da:ab:43:4d:5f:
                    cb:fb:f8:6a:ba:28:58:0c:21:4f:7d:87:c2:cc:d3:
                    24:e3:84:1b:dd:37:0e:fc:3e:ac:36:48:ed:d0:8f:
                    8f:04:f5:a5:21:4b:ba:a7:2e:5b:5e:1a:bf:65:14:
                    67:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:75:6C:8E:E8:CA:BA:CA:0D:7E:CE:84:05:D3:7C:5E:2E:E5:87:8F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4fa34c0-4d4e-41df-b548-b55e6e3aebc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:52:e0:6a:a9:7a:3d:06:18:5b:04:86:8c:49:d6:16:3a:d8:
         aa:33:21:d0:0c:34:24:df:13:bd:e5:86:2b:94:38:f8:8f:e8:
         cb:32:21:aa:c1:a4:ba:77:7b:ea:9a:78:df:cd:31:32:04:96:
         5f:ef:61:29:a9:30:6a:36:65:67:3c:cf:83:c6:4c:98:4a:53:
         39:ab:6f:bb:82:b7:79:c7:2f:11:a8:ef:84:bd:45:a6:db:19:
         b4:a1:a2:21:d0:ef:e9:f8:c3:4f:ba:d4:14:3d:ff:ef:89:dc:
         d9:bd:be:3b:f5:06:92:c6:0d:40:a0:23:42:7b:16:da:c6:2c:
         ed:a0:33:01:5a:37:7d:da:88:aa:23:47:e0:81:48:1f:4e:28:
         d7:44:be:e3:f0:10:33:1b:bf:cb:02:e2:f2:d6:05:f5:f4:c0:
         21:48:db:ea:3d:15:aa:7c:69:2c:fb:2f:8f:66:94:35:fc:2b:
         b7:00:b1:47:04:90:63:22:bc:93:a7:cd:48:45:39:a2:ff:ef:
         21:13:82:a9:25:2a:01:61:08:65:32:9e:31:ce:4b:6e:75:17:
         5a:64:66:eb:9f:85:47:99:0b:b8:20:8a:92:68:78:9d:0d:25:
         f8:d3:a7:f5:6b:a2:22:8b:cb:4e:f7:21:25:23:fc:5c:9b:c8:
         25:6e:ff:17
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUMQvA7tStcFGH18LPHR0SNFIyJ0kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDI2MDAwMDExWhcNMjUxMTMwMjM1OTU5
WjB6MUkwRwYDVQQFE0AyYmVlNWYwYmI2YzFjNDI3YWRiZjU0MjIzM2RjN2Q4MDAy
NThiODcyYzg2NjI4NGRhYjU1OTFhOTQwYTlhMzM3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC64rhv+2zLLeicYFT/b/U7F6ZOB96Rhp/9ze5Jr03V3BCK
307fxClig/iqB3v54zV/D+ixMd3qH8FyMGCOJKg2cFNhWSM8Mey7HkNIKQaPJ2Np
NYqbkZzijwst1NQf+WHXdbexyzA0vjWxj+dytX1smY4WxeRIdZgitVIs6ISEvLn5
y+aJTRFDROCsaV3PV97mJHxAKC+KmR5kOza1d5gkyI1P82QvqQav+nctNx0SU00u
W9WrjdDw1QEBsK7ACB8ahyfd36N4cJYvZ5faq0NNX8v7+Gq6KFgMIU99h8LM0yTj
hBvdNw78Pqw2SO3Qj48E9aUhS7qnLlteGr9lFGcbAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUzXVsjujKusoNfs6EBdN8Xi7lh48wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2I0ZmEzNGMwLTRkNGUtNDFkZi1iNTQ4LWI1NWU2ZTNhZWJjMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABM34cwDQYJKoZIhvcNAQELBQADggEBAIZS4Gqpej0GGFsEhoxJ1hY62Koz
IdAMNCTfE73lhiuUOPiP6MsyIarBpLp3e+qaeN/NMTIEll/vYSmpMGo2ZWc8z4PG
TJhKUzmrb7uCt3nHLxGo74S9RabbGbShoiHQ7+n4w0+61BQ9/++J3Nm9vjv1BpLG
DUCgI0J7FtrGLO2gMwFaN33aiKojR+CBSB9OKNdEvuPwEDMbv8sC4vLWBfX0wCFI
2+o9Fap8aSz7L49mlDX8K7cAsUcEkGMivJOnzUhFOaL/7yETgqklKgFhCGUynjHO
S251F1pkZuufhUeZC7ggipJoeJ0NJfjTp/VroiKLy073ISUj/FybyCVu/xc=
-----END CERTIFICATE-----