Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9e2606a-70b0-45cc-a03d-b5a54fb9b75a.roa
File:                     b9e2606a-70b0-45cc-a03d-b5a54fb9b75a.roa (raw, json)
Hash identifier:          XZoS97ZmNZ5ukXE0kw7zFG0CJABFq4wHAGqJ7q2Wjms=
Subject key identifier:   95:61:EB:38:5C:F1:12:7A:98:1E:87:57:2D:C4:B6:FD:D4:30:3C:F2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       39B9F47E39CCAA7A951CD29D9BE4DC369FD7D619
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9e2606a-70b0-45cc-a03d-b5a54fb9b75a.roa
Signing time:             Sat 25 Oct 2025 00:01:11 +0000
ROA not before:           Sat 25 Oct 2025 00:01:11 +0000
ROA not after:            Sat 29 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.150.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b9:f4:7e:39:cc:aa:7a:95:1c:d2:9d:9b:e4:dc:36:9f:d7:d6:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 25 00:01:11 2025 GMT
            Not After : Nov 29 23:59:59 2025 GMT
        Subject: serialNumber=d5b7eacfc165761fc9ebb44266a8c481faa02a043a12821fe3b09b87450d78d7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c2:50:86:9b:ff:74:d5:50:f7:4a:b4:08:84:
                    4d:be:cd:c3:be:f6:fb:38:59:4f:12:a8:96:4d:2d:
                    b9:03:84:ea:ab:8d:0f:ab:64:d3:ff:51:e9:98:e6:
                    6f:20:27:23:82:9d:d9:08:fe:d3:f0:48:6d:1b:e0:
                    3a:63:36:fd:2c:f2:9e:be:0a:21:fb:b1:8c:c7:f7:
                    04:06:cc:b3:48:1c:79:be:2f:d8:69:e1:64:90:37:
                    da:92:7d:91:84:df:98:44:11:0f:e4:01:5a:51:f6:
                    5e:2e:3a:09:3d:8a:18:79:bd:e3:3b:63:0f:81:11:
                    6d:d5:a0:76:2f:ab:b4:e6:40:62:a0:8e:d5:e7:c4:
                    43:8d:92:03:d0:12:8c:19:16:a2:ab:6a:57:50:83:
                    81:a5:10:d8:25:dc:ca:13:0e:14:e4:00:91:e5:27:
                    d6:88:23:48:d4:b2:a4:9c:a6:80:7a:21:b0:57:a2:
                    a5:fb:ee:bc:17:a5:6a:10:99:cb:00:5c:a5:b8:99:
                    b2:09:dd:c8:3c:89:c1:c4:8e:d0:83:d4:d0:4c:6f:
                    d2:a3:b7:55:fb:71:cf:24:47:26:86:92:58:27:b9:
                    54:17:dc:07:79:77:c8:bb:87:2f:75:2b:d0:1c:33:
                    94:3e:d3:37:b9:a7:97:b3:b5:a7:14:f0:4a:3e:bd:
                    b5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:61:EB:38:5C:F1:12:7A:98:1E:87:57:2D:C4:B6:FD:D4:30:3C:F2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9e2606a-70b0-45cc-a03d-b5a54fb9b75a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.150.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7a:42:d4:95:a3:d7:2b:48:b0:49:a1:51:4d:f5:00:d8:75:00:
         b9:57:ff:80:83:65:11:14:9f:48:5e:96:ff:f3:e8:3e:74:93:
         45:e1:50:52:a0:46:3a:87:ce:9e:07:e7:f0:d5:99:60:8e:5a:
         b9:19:46:27:71:d4:84:8f:5d:2d:91:95:25:8f:07:23:26:5a:
         c8:68:2a:d3:52:d4:cb:64:1b:d3:a2:6a:3f:0d:0f:e1:d3:39:
         11:66:dc:4b:93:31:1a:67:2b:09:5a:22:fa:91:39:05:2e:b2:
         64:d7:1f:16:c0:f0:53:3b:40:c0:50:17:eb:47:ae:8d:ef:44:
         28:24:a3:98:4d:12:f8:40:86:ae:56:6b:22:f8:8b:61:98:0f:
         41:f2:65:e3:03:69:4a:01:b5:aa:c0:43:78:99:ff:20:fb:50:
         b7:ef:55:da:04:2f:48:67:a6:4f:65:11:d1:77:37:16:40:b1:
         c0:29:ad:ea:36:9f:9b:18:34:6f:2a:2a:ca:e2:ac:ad:16:d6:
         fa:1e:00:d6:74:7b:52:9a:57:d0:f3:e6:5f:ca:20:7d:d2:d9:
         19:2b:f3:3f:bd:33:ae:cb:6b:6a:ad:fa:84:01:2c:9a:fa:42:
         b7:b5:53:18:c4:8e:78:01:89:9f:df:bd:fe:50:9e:c9:fa:72:
         3e:45:46:58
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUObn0fjnMqnqVHNKdm+TcNp/X1hkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDI1MDAwMTExWhcNMjUxMTI5MjM1OTU5
WjB6MUkwRwYDVQQFE0BkNWI3ZWFjZmMxNjU3NjFmYzllYmI0NDI2NmE4YzQ4MWZh
YTAyYTA0M2ExMjgyMWZlM2IwOWI4NzQ1MGQ3OGQ3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJwlCGm/901VD3SrQIhE2+zcO+9vs4WU8SqJZNLbkDhOqr
jQ+rZNP/UemY5m8gJyOCndkI/tPwSG0b4DpjNv0s8p6+CiH7sYzH9wQGzLNIHHm+
L9hp4WSQN9qSfZGE35hEEQ/kAVpR9l4uOgk9ihh5veM7Yw+BEW3VoHYvq7TmQGKg
jtXnxEONkgPQEowZFqKraldQg4GlENgl3MoTDhTkAJHlJ9aII0jUsqScpoB6IbBX
oqX77rwXpWoQmcsAXKW4mbIJ3cg8icHEjtCD1NBMb9Kjt1X7cc8kRyaGklgnuVQX
3Ad5d8i7hy91K9AcM5Q+0ze5p5eztacU8Eo+vbXLAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUlWHrOFzxEnqYHodXLcS2/dQwPPIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2I5ZTI2MDZhLTcwYjAtNDVjYy1hMDNkLWI1YTU0ZmI5Yjc1YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQljANBgkqhkiG9w0BAQsFAAOCAQEAekLUlaPXK0iwSaFRTfUA2HUAuVf/
gINlERSfSF6W//PoPnSTReFQUqBGOofOngfn8NWZYI5auRlGJ3HUhI9dLZGVJY8H
IyZayGgq01LUy2Qb06JqPw0P4dM5EWbcS5MxGmcrCVoi+pE5BS6yZNcfFsDwUztA
wFAX60euje9EKCSjmE0S+ECGrlZrIviLYZgPQfJl4wNpSgG1qsBDeJn/IPtQt+9V
2gQvSGemT2UR0Xc3FkCxwCmt6jafmxg0byoqyuKsrRbW+h4A1nR7UppX0PPmX8og
fdLZGSvzP70zrstraq36hAEsmvpCt7VTGMSOeAGJn9+9/lCeyfpyPkVGWA==
-----END CERTIFICATE-----