Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c66bb97c-25da-49d9-a04b-c61672e7b35d.roa
File:                     c66bb97c-25da-49d9-a04b-c61672e7b35d.roa (raw, json)
Hash identifier:          WdJuY2nvaXcZsXK+rRLImXbAKq2ibyO1aowmtHdUGa8=
Subject key identifier:   DA:5F:8E:4F:11:E1:79:73:AE:C8:78:E0:E8:62:BA:BF:2E:E0:9F:57
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1EB2FDD8F31F81F2DB20711D4F326C5CB17355AB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c66bb97c-25da-49d9-a04b-c61672e7b35d.roa
Signing time:             Sun 26 Oct 2025 00:41:29 +0000
ROA not before:           Sun 26 Oct 2025 00:41:29 +0000
ROA not after:            Sun 30 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.6.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b2:fd:d8:f3:1f:81:f2:db:20:71:1d:4f:32:6c:5c:b1:73:55:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 26 00:41:29 2025 GMT
            Not After : Nov 30 23:59:59 2025 GMT
        Subject: serialNumber=30a8a7d0faea0d30c36e1a039b18efcaf3d6b4bc2884026b8dcc8ad9118611af, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1b:51:3a:62:09:93:41:ac:06:29:12:34:b6:
                    53:65:6e:9e:0f:a6:28:46:a3:a2:01:3f:9b:34:fd:
                    a5:60:45:bf:02:3e:93:0c:ed:0f:8a:8a:92:4b:06:
                    33:b5:48:30:63:43:4d:6b:96:2d:33:f8:b2:b0:df:
                    7e:67:f6:2c:8a:f1:1a:4e:e7:d1:bc:c5:c6:ec:0a:
                    dc:3e:ff:e7:9d:92:d0:c0:fc:fc:1b:fe:8e:fb:45:
                    fb:ab:d7:b3:c6:a9:6e:89:b7:46:38:e0:cd:8f:59:
                    8b:4d:19:39:c3:18:ae:32:3f:47:91:c2:1d:c7:2b:
                    a5:9b:78:5c:ef:c8:dc:21:2e:d9:a4:f0:36:3e:24:
                    25:2f:8a:71:4e:91:8f:7b:18:0f:5c:e2:3b:f2:aa:
                    ef:b6:18:76:6a:86:ec:3e:4e:45:7a:49:ea:71:e0:
                    12:f5:90:9f:16:7e:9f:96:64:3f:c6:53:18:b9:47:
                    c0:e8:16:2c:da:6d:e4:b2:86:ac:71:0d:37:f1:82:
                    d1:a4:24:b6:99:9e:bf:0b:ae:f3:39:64:c7:e6:b6:
                    7d:16:a7:62:6c:40:01:db:2a:d0:d8:93:c6:8a:94:
                    36:d7:30:6d:63:c3:95:f2:ec:d4:71:78:de:d0:48:
                    0f:5d:63:de:04:af:83:c1:0f:f3:74:3f:33:ad:d0:
                    31:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5F:8E:4F:11:E1:79:73:AE:C8:78:E0:E8:62:BA:BF:2E:E0:9F:57
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c66bb97c-25da-49d9-a04b-c61672e7b35d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.6.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4e:c9:9f:a0:61:40:47:73:29:2f:ec:7c:ad:f2:61:3f:fc:fa:
         51:2e:74:32:81:02:a7:1b:b4:8a:a9:00:a4:27:11:d7:77:9b:
         5c:d2:41:d5:0b:18:2d:cd:1a:1d:5c:54:ba:bd:b0:d9:2d:8e:
         ef:97:f0:81:2f:13:b2:8d:73:f2:80:d0:36:2b:98:59:f5:89:
         d7:f1:65:ca:2d:d3:67:c6:1d:17:98:97:63:94:ca:25:8d:73:
         f2:7e:31:3b:4c:93:8d:d5:c2:f6:e4:8b:7e:a6:96:75:e4:ed:
         3a:34:f3:01:07:5d:e5:41:b0:93:ac:8c:d6:41:ab:33:96:90:
         12:93:00:27:32:2a:b3:1a:df:d7:62:1a:96:8b:f1:71:4a:84:
         a7:2e:c9:f8:93:4c:ec:bc:01:a5:2a:f2:88:cc:ea:3a:f4:b0:
         79:c7:f0:91:7e:a3:06:12:d4:f9:f4:5a:ff:35:43:ec:d5:fd:
         91:c2:99:8d:8c:72:8c:2b:57:49:a8:1e:5a:62:ca:b0:86:83:
         8b:10:ca:dc:27:86:45:22:ac:c7:69:f9:bc:ba:f6:f1:7e:61:
         4a:01:7d:d6:11:18:07:9c:dc:dd:c9:31:ce:f2:42:1c:eb:01:
         dd:32:e1:ab:50:65:95:79:ff:10:58:ea:e6:8c:a0:08:da:ae:
         9d:7c:b4:0f
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUHrL92PMfgfLbIHEdTzJsXLFzVaswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDI2MDA0MTI5WhcNMjUxMTMwMjM1OTU5
WjB6MUkwRwYDVQQFE0AzMGE4YTdkMGZhZWEwZDMwYzM2ZTFhMDM5YjE4ZWZjYWYz
ZDZiNGJjMjg4NDAyNmI4ZGNjOGFkOTExODYxMWFmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDAG1E6YgmTQawGKRI0tlNlbp4PpihGo6IBP5s0/aVgRb8C
PpMM7Q+KipJLBjO1SDBjQ01rli0z+LKw335n9iyK8RpO59G8xcbsCtw+/+edktDA
/Pwb/o77Rfur17PGqW6Jt0Y44M2PWYtNGTnDGK4yP0eRwh3HK6WbeFzvyNwhLtmk
8DY+JCUvinFOkY97GA9c4jvyqu+2GHZqhuw+TkV6Sepx4BL1kJ8Wfp+WZD/GUxi5
R8DoFizabeSyhqxxDTfxgtGkJLaZnr8LrvM5ZMfmtn0Wp2JsQAHbKtDYk8aKlDbX
MG1jw5Xy7NRxeN7QSA9dY94Er4PBD/N0PzOt0DGpAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU2l+OTxHheXOuyHjg6GK6vy7gn1cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2M2NmJiOTdjLTI1ZGEtNDlkOS1hMDRiLWM2MTY3MmU3YjM1ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQBjANBgkqhkiG9w0BAQsFAAOCAQEATsmfoGFAR3MpL+x8rfJhP/z6US50
MoECpxu0iqkApCcR13ebXNJB1QsYLc0aHVxUur2w2S2O75fwgS8Tso1z8oDQNiuY
WfWJ1/Flyi3TZ8YdF5iXY5TKJY1z8n4xO0yTjdXC9uSLfqaWdeTtOjTzAQdd5UGw
k6yM1kGrM5aQEpMAJzIqsxrf12IalovxcUqEpy7J+JNM7LwBpSryiMzqOvSwecfw
kX6jBhLU+fRa/zVD7NX9kcKZjYxyjCtXSageWmLKsIaDixDK3CeGRSKsx2n5vLr2
8X5hSgF91hEYB5zc3ckxzvJCHOsB3TLhq1BllXn/EFjq5oygCNqunXy0Dw==
-----END CERTIFICATE-----