Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1319bff-f900-43dc-b7cc-7a35184b65a5.roa
File:                     f1319bff-f900-43dc-b7cc-7a35184b65a5.roa (raw, json)
Hash identifier:          9nrK2Q2QMyqV3j5+RMkbbyZF8NzDyz7xZ9/y+vUrCnQ=
Subject key identifier:   0F:55:1D:10:E2:54:DA:50:ED:6C:02:6E:17:F4:93:FE:0B:5F:C4:97
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5F6EDAB90AF2EE4B039DED0DDC4CD0AF9A62F5B4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1319bff-f900-43dc-b7cc-7a35184b65a5.roa
Signing time:             Fri 31 Oct 2025 00:50:04 +0000
ROA not before:           Fri 31 Oct 2025 00:50:04 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.162.64.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:6e:da:b9:0a:f2:ee:4b:03:9d:ed:0d:dc:4c:d0:af:9a:62:f5:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 31 00:50:04 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=4e533ecd7bf21529df89117f3acdebce0d4fdefc6cb47dc852624caf95162bf2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:0f:0d:00:4a:69:12:44:af:c1:cf:7c:9c:cb:
                    ad:90:ee:1e:fb:b4:cb:28:6b:cc:da:e7:7f:1b:ec:
                    97:85:f7:29:c2:9d:fb:e3:03:54:d8:27:31:eb:fa:
                    9d:ca:2a:83:0e:2c:58:2f:6a:5a:46:a5:4c:e8:5e:
                    46:c8:20:c2:9c:d8:9e:e1:3b:5e:43:0a:0e:95:97:
                    45:8b:15:4f:77:c0:52:40:f1:7c:7a:21:a1:a5:6a:
                    f3:6c:7f:36:c7:78:a0:e0:3e:ef:ca:a6:32:c9:0a:
                    ec:27:1b:c9:3f:83:70:86:34:b3:5e:b0:50:ac:64:
                    c6:94:e9:15:fc:a9:c6:69:52:c8:b9:30:b1:33:49:
                    97:b0:40:13:e5:3a:27:a3:23:9a:60:49:e6:8d:e8:
                    a8:83:0f:0f:45:ee:f3:5d:de:e4:6c:95:0f:c0:f0:
                    19:4b:ff:c3:77:ef:24:42:e7:55:b0:05:0b:0f:23:
                    7f:99:50:b2:00:8a:1e:96:74:53:0d:0d:1e:d3:fc:
                    b7:8e:19:36:0a:d1:f7:10:b1:08:1f:6e:e4:09:a3:
                    c4:b4:0b:eb:14:b7:64:2f:01:e5:c2:53:1f:ad:95:
                    97:ec:51:8e:07:71:1d:d2:52:3c:bf:dd:fd:11:47:
                    de:b8:4b:2f:bf:2f:52:56:22:d9:08:de:be:5c:e2:
                    92:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:55:1D:10:E2:54:DA:50:ED:6C:02:6E:17:F4:93:FE:0B:5F:C4:97
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1319bff-f900-43dc-b7cc-7a35184b65a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.162.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3f:c1:58:f9:6d:46:df:56:21:d3:80:86:d2:2e:35:29:89:41:
         fd:c9:83:36:e2:c2:0e:9a:2e:15:f8:fa:ed:47:77:bd:2f:4b:
         44:63:d0:fc:37:1d:78:ff:65:d6:b7:f3:1f:8a:b2:22:1b:f0:
         4c:d4:d3:bc:7f:c6:80:89:ec:4f:fe:13:13:2d:ff:4e:26:5e:
         2c:40:2c:9d:2d:51:dc:99:5a:ae:77:ea:78:e4:df:c8:1e:52:
         1d:5a:d8:ee:e0:0a:c1:6c:48:65:f8:02:7a:25:74:9f:47:25:
         84:b4:5a:f4:ab:ed:23:4e:b8:38:69:5c:63:37:66:16:f0:1a:
         0a:f4:69:88:21:d1:c5:ca:28:25:94:82:1b:f7:c8:86:8d:a5:
         c4:19:11:83:82:b2:f6:a9:b5:36:69:72:9e:53:6f:be:74:49:
         68:65:a7:c9:d2:d9:0f:0d:ac:1f:8a:bb:7a:52:1c:fd:52:b6:
         44:4c:4b:7b:b8:12:6e:65:fd:78:f7:7d:33:f2:82:c3:f9:10:
         d0:82:aa:68:3d:6f:cc:14:1a:d6:ec:30:fc:3f:8c:e4:f1:da:
         ba:53:1d:71:94:15:f5:94:96:d7:63:ef:aa:6d:80:56:2e:5e:
         b6:4a:76:99:ce:62:4c:ba:e1:b9:77:dd:aa:34:3f:45:26:c1:
         91:b2:4e:69
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUX27auQry7ksDne0N3EzQr5pi9bQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDMxMDA1MDA0WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A0ZTUzM2VjZDdiZjIxNTI5ZGY4OTExN2YzYWNkZWJjZTBk
NGZkZWZjNmNiNDdkYzg1MjYyNGNhZjk1MTYyYmYyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD5Dw0ASmkSRK/Bz3ycy62Q7h77tMsoa8za538b7JeF9ynC
nfvjA1TYJzHr+p3KKoMOLFgvalpGpUzoXkbIIMKc2J7hO15DCg6Vl0WLFU93wFJA
8Xx6IaGlavNsfzbHeKDgPu/KpjLJCuwnG8k/g3CGNLNesFCsZMaU6RX8qcZpUsi5
MLEzSZewQBPlOiejI5pgSeaN6KiDDw9F7vNd3uRslQ/A8BlL/8N37yRC51WwBQsP
I3+ZULIAih6WdFMNDR7T/LeOGTYK0fcQsQgfbuQJo8S0C+sUt2QvAeXCUx+tlZfs
UY4HcR3SUjy/3f0RR964Sy+/L1JWItkI3r5c4pJ9AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUD1UdEOJU2lDtbAJuF/ST/gtfxJcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2YxMzE5YmZmLWY5MDAtNDNkYy1iN2NjLTdhMzUxODRiNjVhNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMNokAwDQYJKoZIhvcNAQELBQADggEBAD/BWPltRt9WIdOAhtIuNSmJQf3J
gzbiwg6aLhX4+u1Hd70vS0Rj0Pw3HXj/Zda38x+KsiIb8EzU07x/xoCJ7E/+ExMt
/04mXixALJ0tUdyZWq536njk38geUh1a2O7gCsFsSGX4AnoldJ9HJYS0WvSr7SNO
uDhpXGM3ZhbwGgr0aYgh0cXKKCWUghv3yIaNpcQZEYOCsvaptTZpcp5Tb750SWhl
p8nS2Q8NrB+Ku3pSHP1StkRMS3u4Em5l/Xj3fTPygsP5ENCCqmg9b8wUGtbsMPw/
jOTx2rpTHXGUFfWUltdj76ptgFYuXrZKdpnOYky64bl33ao0P0UmwZGyTmk=
-----END CERTIFICATE-----