Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc1edd83-1b74-4b56-9667-3461850e8add.roa
File:                     cc1edd83-1b74-4b56-9667-3461850e8add.roa (raw, json)
Hash identifier:          G7YCuNJGQlq/0+ndq/11bD7fc0xf1O5rd84+ayZbTWc=
Subject key identifier:   56:96:48:BD:9C:E0:A4:B1:76:7C:31:64:9B:74:95:74:BA:F5:25:57
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       75175B48928ED964AA76DBB70C14C570EB5E95C0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc1edd83-1b74-4b56-9667-3461850e8add.roa
Signing time:             Tue 21 Oct 2025 00:41:31 +0000
ROA not before:           Tue 21 Oct 2025 00:41:31 +0000
ROA not after:            Tue 25 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        129.224.224.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:17:5b:48:92:8e:d9:64:aa:76:db:b7:0c:14:c5:70:eb:5e:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 21 00:41:31 2025 GMT
            Not After : Nov 25 23:59:59 2025 GMT
        Subject: serialNumber=227f02425bd5174c6dd240d478f85fa418c0041c7d6644762254331748f22572, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f4:0b:56:48:bd:da:d1:99:6d:a5:b6:6a:ee:
                    73:c7:d2:b2:48:2d:50:6c:cb:35:34:f0:8b:ca:9b:
                    eb:e7:97:5a:05:ca:b3:d7:ce:e4:cd:5e:e8:83:67:
                    ae:24:8b:6a:4e:ce:b9:f6:63:9b:a0:60:51:e0:54:
                    e9:9d:f7:6a:cf:0a:3f:68:35:51:4f:cd:c4:94:0c:
                    49:25:1a:96:85:c9:88:1d:83:ad:ac:b1:80:cd:c5:
                    a6:a8:f3:70:c3:a9:e9:94:ab:78:4a:2d:d5:a6:a3:
                    32:93:da:2f:65:27:5a:14:fa:0a:d5:46:33:ea:ba:
                    5f:ce:3f:96:d0:be:44:61:dd:93:46:93:26:c9:c0:
                    94:80:b8:4e:76:b5:5d:bd:f2:c6:46:cd:94:f8:80:
                    3a:72:a0:68:94:b0:d4:55:96:27:8d:42:5b:3d:2a:
                    7b:56:d1:d3:11:31:c4:ca:b0:eb:80:40:4d:56:54:
                    a5:91:23:de:59:c0:22:3c:43:30:28:f5:e3:60:df:
                    89:6e:e1:90:49:75:9d:94:0e:38:05:c0:cc:2f:b2:
                    31:44:54:0a:55:08:da:e4:7e:0a:6e:39:0f:ee:05:
                    81:2f:e2:9f:6f:01:78:d5:da:c8:96:96:11:3a:db:
                    b5:90:75:6d:50:a4:e8:5b:0c:80:7f:b1:72:e7:2b:
                    fb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:96:48:BD:9C:E0:A4:B1:76:7C:31:64:9B:74:95:74:BA:F5:25:57
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc1edd83-1b74-4b56-9667-3461850e8add.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.224.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1a:7e:0b:fa:ce:72:e5:44:1e:00:54:90:13:b8:92:d5:30:0b:
         90:a3:29:1e:67:82:cf:5c:0c:17:9b:a3:3f:39:79:18:78:31:
         be:a0:1c:f9:de:bd:90:bc:87:c2:25:bb:ce:bf:12:89:6b:0c:
         f3:8e:f6:8b:5d:ba:7c:35:42:8e:76:ec:2c:e2:f0:d6:86:2f:
         cc:3e:61:32:87:3d:21:1a:b0:8f:55:c7:98:cf:c5:56:d3:28:
         ab:cf:a4:29:97:c5:e9:be:d8:ae:1b:96:fc:b2:58:74:5b:b8:
         3b:71:57:3a:c0:74:75:b3:b5:f3:a6:f2:92:97:e8:76:9b:b2:
         a7:61:d8:30:22:70:0f:9c:87:9f:4e:da:0f:22:bb:d4:3a:73:
         39:5a:6e:1d:8a:15:e9:20:76:0a:1e:b6:46:4c:fa:32:b4:05:
         65:48:e4:84:14:07:ba:87:c0:ab:13:60:48:fb:f0:9f:15:56:
         3a:61:7f:26:fb:4a:df:93:f3:f3:1f:34:de:64:7f:5d:76:9e:
         70:ef:e7:0b:36:f2:a6:d6:49:64:12:af:28:01:99:fc:bb:30:
         49:88:89:69:f8:52:f9:a6:7a:fa:0f:bd:fc:53:12:bb:1e:a1:
         d0:8c:cb:a6:ad:0f:d2:80:d7:ae:ca:ec:cf:b7:07:4c:52:50:
         8b:a3:a0:4e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUdRdbSJKO2WSqdtu3DBTFcOtelcAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIxMDA0MTMxWhcNMjUxMTI1MjM1OTU5
WjB6MUkwRwYDVQQFE0AyMjdmMDI0MjViZDUxNzRjNmRkMjQwZDQ3OGY4NWZhNDE4
YzAwNDFjN2Q2NjQ0NzYyMjU0MzMxNzQ4ZjIyNTcyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCq9AtWSL3a0ZltpbZq7nPH0rJILVBsyzU08IvKm+vnl1oF
yrPXzuTNXuiDZ64ki2pOzrn2Y5ugYFHgVOmd92rPCj9oNVFPzcSUDEklGpaFyYgd
g62ssYDNxaao83DDqemUq3hKLdWmozKT2i9lJ1oU+grVRjPqul/OP5bQvkRh3ZNG
kybJwJSAuE52tV298sZGzZT4gDpyoGiUsNRVlieNQls9KntW0dMRMcTKsOuAQE1W
VKWRI95ZwCI8QzAo9eNg34lu4ZBJdZ2UDjgFwMwvsjFEVApVCNrkfgpuOQ/uBYEv
4p9vAXjV2siWlhE627WQdW1QpOhbDIB/sXLnK/tJAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUVpZIvZzgpLF2fDFkm3SVdLr1JVcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2NjMWVkZDgzLTFiNzQtNGI1Ni05NjY3LTM0NjE4NTBlOGFkZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAWB4OAwDQYJKoZIhvcNAQELBQADggEBABp+C/rOcuVEHgBUkBO4ktUwC5Cj
KR5ngs9cDBeboz85eRh4Mb6gHPnevZC8h8Ilu86/EolrDPOO9otdunw1Qo527Czi
8NaGL8w+YTKHPSEasI9Vx5jPxVbTKKvPpCmXxem+2K4blvyyWHRbuDtxVzrAdHWz
tfOm8pKX6Habsqdh2DAicA+ch59O2g8iu9Q6czlabh2KFekgdgoetkZM+jK0BWVI
5IQUB7qHwKsTYEj78J8VVjphfyb7St+T8/MfNN5kf112nnDv5ws28qbWSWQSrygB
mfy7MEmIiWn4UvmmevoPvfxTErseodCMy6atD9KA167K7M+3B0xSUIujoE4=
-----END CERTIFICATE-----