Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b802b55b-ad50-4a90-858f-89ddec9187bf.roa
File:                     b802b55b-ad50-4a90-858f-89ddec9187bf.roa (raw, json)
Hash identifier:          Vcs++6UISipXblYlZd8OAwxB0uPXe7YxtHHxaTRLlns=
Subject key identifier:   76:D3:A0:B7:48:8D:06:BC:1A:D1:BF:ED:C5:19:77:C3:E5:2B:12:57
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       424B583229C944EFD1873F27753643B1ADD87EAF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b802b55b-ad50-4a90-858f-89ddec9187bf.roa
Signing time:             Fri 24 Oct 2025 11:25:18 +0000
ROA not before:           Fri 24 Oct 2025 11:25:18 +0000
ROA not after:            Fri 28 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.138.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:4b:58:32:29:c9:44:ef:d1:87:3f:27:75:36:43:b1:ad:d8:7e:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 24 11:25:18 2025 GMT
            Not After : Nov 28 23:59:59 2025 GMT
        Subject: serialNumber=a408e02448e557be0016870b6bd4882638e9eb6d5b5ab9ff9d1bcda1c6f9ce14, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:19:b0:36:fb:5d:37:75:07:6f:bc:30:03:ef:
                    8a:83:e7:48:ce:bc:62:dd:31:62:c7:5b:58:0f:15:
                    bd:22:3a:e2:52:58:b8:98:c9:ff:3d:e5:fe:fb:0a:
                    70:3a:f1:64:09:d3:0d:17:20:3f:96:7b:c6:96:60:
                    19:9f:99:86:de:e4:4e:0b:a3:70:37:77:46:80:5b:
                    4e:42:a7:45:d5:18:8d:41:70:bb:34:c7:a5:d4:1f:
                    7f:29:7d:5a:b8:2f:42:24:fa:40:d8:5e:c4:01:31:
                    66:e2:3b:a2:05:b4:63:bf:ed:b0:07:4e:28:11:b7:
                    a3:73:53:75:ec:c6:49:cf:6f:82:08:ad:f5:20:25:
                    56:eb:27:64:d6:dd:89:e9:e6:d4:08:4c:f0:16:94:
                    05:f1:a2:d2:4b:17:84:ee:0b:1b:d5:95:4a:2b:93:
                    bb:08:17:55:07:ac:f1:0e:dc:12:be:9a:0c:f8:b8:
                    e5:ce:aa:6c:b1:6e:ee:4b:92:62:b9:ea:c1:c1:22:
                    6e:14:ac:93:7d:14:f8:16:3f:0e:2f:7e:04:7a:42:
                    24:f8:01:79:ec:4a:06:b4:b3:a2:08:33:ec:fc:f2:
                    22:1d:70:92:81:2d:f9:5b:c0:a9:a2:f0:2a:7c:d7:
                    10:c4:73:4c:78:f6:3b:99:21:a1:f6:7c:08:12:65:
                    37:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D3:A0:B7:48:8D:06:BC:1A:D1:BF:ED:C5:19:77:C3:E5:2B:12:57
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b802b55b-ad50-4a90-858f-89ddec9187bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:f7:2b:4f:54:f7:dc:87:3b:68:75:6f:8d:eb:4e:e4:ea:66:
         3b:cc:a9:d7:2e:27:51:3e:44:fc:1b:b6:03:5d:11:d7:18:e9:
         76:a9:9a:64:6d:46:32:66:1f:d2:4d:22:dc:3f:9c:db:3b:7b:
         39:b3:61:dd:87:4c:9d:47:7d:65:57:87:c2:eb:96:b9:93:06:
         84:12:1a:8f:3e:57:1e:c3:89:95:5b:16:33:53:5b:b0:26:b6:
         23:ac:da:33:0d:21:5c:12:5c:53:27:32:69:6f:5c:a1:76:cc:
         6c:5e:c5:34:c6:3e:ad:9c:eb:a6:ba:6c:fc:c8:22:c2:41:95:
         a5:d8:4c:df:f8:ee:d2:3f:1c:3d:39:30:be:a8:ee:8a:ef:eb:
         61:c6:9d:c6:55:4a:27:57:27:19:27:cc:7f:14:bb:6b:85:4f:
         da:d8:64:01:2e:ec:46:06:c2:ed:24:1c:a8:bd:07:70:77:b2:
         b6:84:d9:82:37:0a:a8:bc:9b:4b:8b:10:5b:63:0b:95:da:c2:
         d3:87:52:4a:fd:ce:99:8b:05:bf:ec:03:f2:fb:bc:99:b2:5c:
         cb:3c:89:2d:54:38:0b:f0:6f:6a:65:60:9a:85:5e:cd:dc:4b:
         76:5a:0d:44:82:8e:32:f9:aa:8b:b8:f1:c5:7c:87:8a:34:ab:
         ac:6a:30:4d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQktYMinJRO/Rhz8ndTZDsa3Yfq8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDI0MTEyNTE4WhcNMjUxMTI4MjM1OTU5
WjB6MUkwRwYDVQQFE0BhNDA4ZTAyNDQ4ZTU1N2JlMDAxNjg3MGI2YmQ0ODgyNjM4
ZTllYjZkNWI1YWI5ZmY5ZDFiY2RhMWM2ZjljZTE0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDKGbA2+103dQdvvDAD74qD50jOvGLdMWLHW1gPFb0iOuJS
WLiYyf895f77CnA68WQJ0w0XID+We8aWYBmfmYbe5E4Lo3A3d0aAW05Cp0XVGI1B
cLs0x6XUH38pfVq4L0Ik+kDYXsQBMWbiO6IFtGO/7bAHTigRt6NzU3XsxknPb4II
rfUgJVbrJ2TW3Ynp5tQITPAWlAXxotJLF4TuCxvVlUork7sIF1UHrPEO3BK+mgz4
uOXOqmyxbu5LkmK56sHBIm4UrJN9FPgWPw4vfgR6QiT4AXnsSga0s6IIM+z88iId
cJKBLflbwKmi8Cp81xDEc0x49juZIaH2fAgSZTenAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUdtOgt0iNBrwa0b/txRl3w+UrElcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2I4MDJiNTViLWFkNTAtNGE5MC04NThmLTg5ZGRlYzkxODdiZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFBCYowDQYJKoZIhvcNAQELBQADggEBAA/3K09U99yHO2h1b43rTuTqZjvM
qdcuJ1E+RPwbtgNdEdcY6XapmmRtRjJmH9JNItw/nNs7ezmzYd2HTJ1HfWVXh8Lr
lrmTBoQSGo8+Vx7DiZVbFjNTW7AmtiOs2jMNIVwSXFMnMmlvXKF2zGxexTTGPq2c
66a6bPzIIsJBlaXYTN/47tI/HD05ML6o7orv62HGncZVSidXJxknzH8Uu2uFT9rY
ZAEu7EYGwu0kHKi9B3B3sraE2YI3Cqi8m0uLEFtjC5XawtOHUkr9zpmLBb/sA/L7
vJmyXMs8iS1UOAvwb2plYJqFXs3cS3ZaDUSCjjL5qou48cV8h4o0q6xqME0=
-----END CERTIFICATE-----