Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e81e2c00-a513-4147-992e-a192a2dba6b1.roa
File:                     e81e2c00-a513-4147-992e-a192a2dba6b1.roa (raw, json)
Hash identifier:          DteJ4DuVQTNFrJ0qauPRDMFyIAk7uS+Z2+o1r5c9YL4=
Subject key identifier:   89:37:3F:6F:A2:0F:B6:75:9A:34:C4:57:CD:25:F9:F3:26:08:CD:03
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       67AD886D194C525C87E0859890E07903780D07DA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e81e2c00-a513-4147-992e-a192a2dba6b1.roa
Signing time:             Fri 24 Oct 2025 00:10:06 +0000
ROA not before:           Fri 24 Oct 2025 00:10:06 +0000
ROA not after:            Fri 28 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        151.160.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ad:88:6d:19:4c:52:5c:87:e0:85:98:90:e0:79:03:78:0d:07:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 24 00:10:06 2025 GMT
            Not After : Nov 28 23:59:59 2025 GMT
        Subject: serialNumber=0360c17315c2887e564144770642eb30b77acebc5ec1b3df8ee448c89c3b437c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:80:7f:fc:ab:cf:8e:63:a6:97:5d:40:7d:8a:
                    23:ee:a4:85:0a:f1:ac:73:72:11:fe:05:64:c2:0f:
                    99:e8:ae:5b:2e:02:63:24:71:17:ec:8f:40:d8:9f:
                    48:2d:7d:cc:51:0e:d3:32:d7:59:45:38:e8:f9:a8:
                    b9:70:24:49:5d:5f:46:ae:3d:69:90:2a:21:6b:65:
                    a8:fd:c0:50:d3:c4:8a:53:62:df:fb:ca:61:af:33:
                    f7:db:b8:76:9c:22:f2:73:15:d6:cd:3c:87:b5:37:
                    67:c5:c1:88:2d:db:93:16:36:31:12:66:0f:64:21:
                    5c:bd:85:eb:30:6a:97:1a:38:37:c3:bd:89:81:a5:
                    98:fe:45:b2:82:d0:13:27:16:84:9c:1e:02:d0:af:
                    ea:58:98:c3:11:77:25:f7:8a:63:0d:01:b6:9f:ad:
                    8f:cd:eb:f8:e9:da:b3:82:58:50:72:1c:06:4b:72:
                    ba:b9:98:5e:82:e0:5e:9e:9b:97:f6:71:28:6c:1a:
                    81:fa:4d:7d:a4:74:32:fc:a9:52:f6:d1:44:c0:85:
                    2e:c8:26:97:ac:af:46:6a:f7:ff:2c:1a:84:bf:04:
                    05:32:0e:df:b3:43:8d:b4:5a:9d:8c:e0:42:7b:73:
                    1b:39:da:5a:da:91:ba:db:2e:1c:b9:5a:79:21:d8:
                    ec:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:37:3F:6F:A2:0F:B6:75:9A:34:C4:57:CD:25:F9:F3:26:08:CD:03
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e81e2c00-a513-4147-992e-a192a2dba6b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.160.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         cb:37:85:c1:2f:13:96:ad:cc:8a:6a:28:94:43:44:31:73:42:
         09:b3:7e:fa:38:b0:52:39:bc:63:b1:11:da:db:81:09:50:3b:
         d7:ff:36:6f:05:7f:0c:31:1a:71:5f:0b:bb:35:9e:0d:50:10:
         a8:28:2a:92:60:ca:f0:8e:5a:9e:75:7f:70:a9:89:1e:e7:70:
         2f:eb:af:ec:72:6b:c1:87:4c:03:0f:a7:6a:c9:ce:5f:a9:84:
         a1:a2:1f:0b:35:40:ae:e7:9a:7e:65:3d:4d:11:04:57:81:2d:
         67:34:f5:67:29:69:f6:72:a3:a4:cd:8f:7b:ba:7b:bc:45:a5:
         e6:a1:a8:73:d8:4d:ac:39:9a:65:20:1c:83:d0:25:7d:77:63:
         51:1a:21:7b:35:b6:b1:89:58:ce:f7:89:8c:4c:55:a1:38:3d:
         64:c4:08:1c:24:9c:4b:64:82:c0:1a:a2:ed:ae:98:cf:da:3e:
         f3:1f:10:bf:92:93:31:de:17:aa:58:72:22:3d:65:f9:c0:8e:
         b9:81:4d:d6:d1:12:e3:4e:c0:83:1f:22:b7:47:60:db:f5:b1:
         8a:52:99:77:7e:7f:26:d0:0e:0b:cd:b4:cc:0d:ae:03:09:09:
         5d:3a:6d:26:5f:74:8a:d8:de:9e:60:df:b2:5c:49:37:3a:8a:
         1c:9e:30:dc
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUZ62IbRlMUlyH4IWYkOB5A3gNB9owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDI0MDAxMDA2WhcNMjUxMTI4MjM1OTU5
WjB6MUkwRwYDVQQFE0AwMzYwYzE3MzE1YzI4ODdlNTY0MTQ0NzcwNjQyZWIzMGI3
N2FjZWJjNWVjMWIzZGY4ZWU0NDhjODljM2I0MzdjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDMgH/8q8+OY6aXXUB9iiPupIUK8axzchH+BWTCD5norlsu
AmMkcRfsj0DYn0gtfcxRDtMy11lFOOj5qLlwJEldX0auPWmQKiFrZaj9wFDTxIpT
Yt/7ymGvM/fbuHacIvJzFdbNPIe1N2fFwYgt25MWNjESZg9kIVy9heswapcaODfD
vYmBpZj+RbKC0BMnFoScHgLQr+pYmMMRdyX3imMNAbafrY/N6/jp2rOCWFByHAZL
crq5mF6C4F6em5f2cShsGoH6TX2kdDL8qVL20UTAhS7IJpesr0Zq9/8sGoS/BAUy
Dt+zQ420Wp2M4EJ7cxs52lrakbrbLhy5Wnkh2OzpAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUiTc/b6IPtnWaNMRXzSX58yYIzQMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2U4MWUyYzAwLWE1MTMtNDE0Ny05OTJlLWExOTJhMmRiYTZiMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCXoDANBgkqhkiG9w0BAQsFAAOCAQEAyzeFwS8Tlq3MimoolENEMXNCCbN+
+jiwUjm8Y7ER2tuBCVA71/82bwV/DDEacV8LuzWeDVAQqCgqkmDK8I5annV/cKmJ
HudwL+uv7HJrwYdMAw+nasnOX6mEoaIfCzVArueafmU9TREEV4EtZzT1Zylp9nKj
pM2Pe7p7vEWl5qGoc9hNrDmaZSAcg9AlfXdjURohezW2sYlYzveJjExVoTg9ZMQI
HCScS2SCwBqi7a6Yz9o+8x8Qv5KTMd4XqlhyIj1l+cCOuYFN1tES407Agx8it0dg
2/WxilKZd35/JtAOC820zA2uAwkJXTptJl90itjenmDfslxJNzqKHJ4w3A==
-----END CERTIFICATE-----