Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1b466a2-817b-4958-ab89-444b143015d3.roa
File:                     c1b466a2-817b-4958-ab89-444b143015d3.roa (raw, json)
Hash identifier:          LgBifIyA02MfAFdQ6CDEnc0S4cs8b/ENiHX8V38+YKY=
Subject key identifier:   CB:4A:B1:AD:90:15:4C:3E:E9:74:AA:55:0C:A6:F5:E9:77:FA:04:D6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       69D0DA7B46BD726A143BA42AE32061CBF3EB798C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1b466a2-817b-4958-ab89-444b143015d3.roa
Signing time:             Fri 31 Oct 2025 00:00:20 +0000
ROA not before:           Fri 31 Oct 2025 00:00:20 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.17.128.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d0:da:7b:46:bd:72:6a:14:3b:a4:2a:e3:20:61:cb:f3:eb:79:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 31 00:00:20 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=a84c7e214546e1d774120f56ef2a643059662bbe36b31087390ec233483a3589, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:de:7c:75:9b:ed:71:f6:ba:ca:b4:49:30:47:
                    7c:1a:eb:50:79:d9:c7:67:95:40:20:c5:04:78:a6:
                    ff:b3:53:80:d6:e2:e6:62:ec:cc:d9:2d:68:55:e8:
                    22:71:ff:b1:f6:de:f2:c9:bd:db:07:52:3a:bf:3c:
                    bf:7d:7a:2b:1d:2e:51:1b:1c:d3:15:0a:2c:90:74:
                    3b:d5:14:fd:1a:ca:17:d8:d4:ae:64:df:95:5c:09:
                    44:d5:c3:8f:ea:69:0b:6a:4a:d6:9e:d5:14:5f:b1:
                    b3:17:d6:8a:6b:bf:77:be:26:59:9d:52:fb:c8:b4:
                    52:31:64:c3:b4:73:b8:d0:0e:0b:5d:bf:db:e7:43:
                    80:5a:6a:a9:8c:6c:55:ee:d4:e8:33:28:cd:57:74:
                    44:a0:87:0a:a6:2c:8b:f1:98:48:ba:9f:bb:5b:8a:
                    95:97:37:51:c4:ad:b6:17:57:36:2b:cc:2f:5f:97:
                    05:91:12:5f:91:5c:c2:fc:a7:fb:8e:1a:bd:f6:fe:
                    51:2f:66:27:f9:0f:b6:06:3d:fc:0f:97:06:ba:da:
                    07:15:5f:16:ce:64:7d:d6:4c:7e:0b:9d:0f:22:2a:
                    2e:71:cd:69:58:dd:31:1f:56:35:23:9a:3b:00:28:
                    88:79:36:d0:a0:1d:c0:02:6c:e7:94:53:21:bc:3b:
                    26:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4A:B1:AD:90:15:4C:3E:E9:74:AA:55:0C:A6:F5:E9:77:FA:04:D6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1b466a2-817b-4958-ab89-444b143015d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.17.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         71:e0:4c:5c:08:51:29:06:0f:e4:af:b9:d7:51:a9:a2:ee:5e:
         28:ac:31:f8:2a:e6:c6:c1:17:c5:34:c0:74:45:10:0c:3e:45:
         4b:cc:6e:37:30:ef:b4:b1:88:6f:fd:6a:d0:93:b4:6b:25:c1:
         4c:e9:6a:8d:46:73:17:2f:5e:c5:b5:5c:b8:d6:6f:14:bc:7c:
         84:43:2d:1c:3c:9b:c6:36:e8:b2:e9:c6:c2:29:c0:f2:06:f0:
         84:ea:a5:ac:4d:3a:43:35:84:24:2a:0c:85:00:08:18:69:b7:
         e8:0c:9a:20:46:df:9a:d8:48:02:40:3d:22:22:b8:87:bf:e0:
         be:3b:81:54:7b:0e:9a:cc:00:bd:c5:e0:7f:91:9c:6b:62:d3:
         cb:af:02:27:7c:e8:b6:a8:6c:f1:e8:98:bc:31:57:9f:0a:4c:
         ee:f2:55:c0:e3:a6:46:62:28:0c:1c:be:10:60:7a:b6:64:10:
         18:22:fb:0e:cb:9b:4b:68:40:1e:a8:45:ce:32:de:31:17:78:
         4e:40:f9:52:3b:9f:2a:ec:46:82:ab:65:e5:34:f8:cd:5e:f8:
         9b:e2:22:4c:7b:45:63:09:e4:e2:f1:d1:22:e4:81:a8:70:a1:
         2e:03:86:06:fb:d7:df:44:e5:57:18:70:60:8c:0b:bf:6e:0e:
         72:85:f0:d2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUadDae0a9cmoUO6Qq4yBhy/PreYwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDMxMDAwMDIwWhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BhODRjN2UyMTQ1NDZlMWQ3NzQxMjBmNTZlZjJhNjQzMDU5
NjYyYmJlMzZiMzEwODczOTBlYzIzMzQ4M2EzNTg5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD23nx1m+1x9rrKtEkwR3wa61B52cdnlUAgxQR4pv+zU4DW
4uZi7MzZLWhV6CJx/7H23vLJvdsHUjq/PL99eisdLlEbHNMVCiyQdDvVFP0ayhfY
1K5k35VcCUTVw4/qaQtqStae1RRfsbMX1oprv3e+JlmdUvvItFIxZMO0c7jQDgtd
v9vnQ4BaaqmMbFXu1OgzKM1XdESghwqmLIvxmEi6n7tbipWXN1HErbYXVzYrzC9f
lwWREl+RXML8p/uOGr32/lEvZif5D7YGPfwPlwa62gcVXxbOZH3WTH4LnQ8iKi5x
zWlY3TEfVjUjmjsAKIh5NtCgHcACbOeUUyG8OyZTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUy0qxrZAVTD7pdKpVDKb16Xf6BNYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2MxYjQ2NmEyLTgxN2ItNDk1OC1hYjg5LTQ0NGIxNDMwMTVkMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUyEYAwDQYJKoZIhvcNAQELBQADggEBAHHgTFwIUSkGD+SvuddRqaLuXiis
Mfgq5sbBF8U0wHRFEAw+RUvMbjcw77SxiG/9atCTtGslwUzpao1GcxcvXsW1XLjW
bxS8fIRDLRw8m8Y26LLpxsIpwPIG8ITqpaxNOkM1hCQqDIUACBhpt+gMmiBG35rY
SAJAPSIiuIe/4L47gVR7DprMAL3F4H+RnGti08uvAid86LaobPHomLwxV58KTO7y
VcDjpkZiKAwcvhBgerZkEBgi+w7Lm0toQB6oRc4y3jEXeE5A+VI7nyrsRoKrZeU0
+M1e+JviIkx7RWMJ5OLx0SLkgahwoS4Dhgb7199E5VcYcGCMC79uDnKF8NI=
-----END CERTIFICATE-----