Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f542397a-2664-4186-9a24-a87ab5343f33.roa
File:                     f542397a-2664-4186-9a24-a87ab5343f33.roa (raw, json)
Hash identifier:          oTR6nOMTB+LhDKz0gN5gpdS/Boh7U/kb/jKFu3K8Aqo=
Subject key identifier:   7E:C6:0D:E7:A3:C4:50:27:52:8E:9B:69:A0:97:9F:36:65:A5:DE:88
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1D0C8F63F4E3149BB358026D8CFE483020120B33
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f542397a-2664-4186-9a24-a87ab5343f33.roa
Signing time:             Sat 25 Oct 2025 00:30:43 +0000
ROA not before:           Sat 25 Oct 2025 00:30:43 +0000
ROA not after:            Sat 29 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        130.80.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:0c:8f:63:f4:e3:14:9b:b3:58:02:6d:8c:fe:48:30:20:12:0b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 25 00:30:43 2025 GMT
            Not After : Nov 29 23:59:59 2025 GMT
        Subject: serialNumber=b002046fc0281c9066a6f5f1476376c2e85ecf38f6f24ac351b12feba8f7ce88, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:51:62:dd:46:1f:bf:b6:0c:fa:60:5a:aa:a7:
                    55:03:0e:05:56:c9:c3:fe:25:1a:97:71:f1:d9:e0:
                    25:18:b3:d5:47:85:bd:93:04:f5:ba:e5:b5:d3:73:
                    b2:23:9d:32:39:6a:64:29:38:30:b6:3d:02:db:85:
                    8d:2d:15:61:1a:41:75:84:16:3d:92:fb:c0:57:0b:
                    94:5d:84:6e:72:c4:9f:e6:a7:22:d9:0d:1b:8d:23:
                    68:67:4f:83:34:46:db:08:8b:57:5e:7c:78:a9:00:
                    a3:9f:a4:a9:1a:30:4a:87:2e:e4:d3:fa:d4:31:e4:
                    78:94:b4:7c:3d:cf:96:e1:95:86:01:4f:72:ca:9c:
                    c0:73:2f:c6:0f:7b:55:1e:b8:69:f9:98:f6:3f:75:
                    86:0a:b4:72:da:e2:e5:fb:b5:b4:9e:94:69:e3:21:
                    29:e9:50:03:71:64:05:5d:e6:22:53:08:83:04:d9:
                    3d:c4:e7:d9:9e:81:8b:fe:ef:bd:16:88:58:31:9d:
                    21:58:db:c3:e8:7f:1b:b4:43:a4:7d:70:b2:2b:62:
                    70:e3:09:b1:c3:ce:11:7c:9a:64:3f:d3:38:5f:e5:
                    31:2b:85:d6:8b:fb:ae:9d:6c:38:d6:6f:c8:f9:4d:
                    06:d0:e3:85:aa:1d:b4:03:9b:af:2a:5f:2d:72:30:
                    73:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C6:0D:E7:A3:C4:50:27:52:8E:9B:69:A0:97:9F:36:65:A5:DE:88
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f542397a-2664-4186-9a24-a87ab5343f33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.80.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1f:b0:58:23:82:3b:ef:5a:94:84:3e:27:0f:9d:a7:03:d1:5f:
         15:dd:30:d4:e3:e4:7a:c9:c9:6c:8c:74:64:df:7e:d7:7b:32:
         13:e1:0b:e1:03:95:d0:ad:e5:eb:ff:c1:66:a4:c0:8b:a8:8c:
         b5:79:0d:a4:48:58:91:82:2c:f8:87:80:d7:f5:5d:9f:0f:07:
         09:d1:37:da:c0:8c:66:b3:b0:3f:b4:08:f6:3a:2b:4d:fd:53:
         39:3c:35:93:a7:20:91:c8:13:c9:8b:e3:f1:66:f3:a8:b4:44:
         8c:a4:01:13:73:4f:86:52:07:ce:cf:2d:0a:80:c6:4c:78:e2:
         c4:cf:ad:f6:a7:da:35:54:70:68:ee:38:86:ec:90:22:4d:65:
         5b:48:51:00:b4:77:69:d4:a0:4d:26:d2:1e:37:62:65:c7:af:
         8d:b7:cb:e6:dc:e3:ef:3c:e8:10:cd:24:91:94:8f:39:83:b9:
         6b:fb:ca:52:fd:11:a8:63:0d:c5:48:cf:35:fc:f9:65:f1:bb:
         1f:1e:04:d0:e5:7b:88:26:fa:c1:ff:5e:58:4e:6a:14:bc:58:
         97:82:00:66:03:02:d2:fd:28:b4:9a:b3:54:16:b3:e9:09:26:
         65:aa:bd:a0:8d:93:b8:a1:5f:2a:4f:cc:64:4a:e6:71:4b:a1:
         85:75:8f:a6
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUHQyPY/TjFJuzWAJtjP5IMCASCzMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDI1MDAzMDQzWhcNMjUxMTI5MjM1OTU5
WjB6MUkwRwYDVQQFE0BiMDAyMDQ2ZmMwMjgxYzkwNjZhNmY1ZjE0NzYzNzZjMmU4
NWVjZjM4ZjZmMjRhYzM1MWIxMmZlYmE4ZjdjZTg4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCSUWLdRh+/tgz6YFqqp1UDDgVWycP+JRqXcfHZ4CUYs9VH
hb2TBPW65bXTc7IjnTI5amQpODC2PQLbhY0tFWEaQXWEFj2S+8BXC5RdhG5yxJ/m
pyLZDRuNI2hnT4M0RtsIi1defHipAKOfpKkaMEqHLuTT+tQx5HiUtHw9z5bhlYYB
T3LKnMBzL8YPe1UeuGn5mPY/dYYKtHLa4uX7tbSelGnjISnpUANxZAVd5iJTCIME
2T3E59megYv+770WiFgxnSFY28Pofxu0Q6R9cLIrYnDjCbHDzhF8mmQ/0zhf5TEr
hdaL+66dbDjWb8j5TQbQ44WqHbQDm68qXy1yMHNrAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUfsYN56PEUCdSjptpoJefNmWl3ogwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y1NDIzOTdhLTI2NjQtNDE4Ni05YTI0LWE4N2FiNTM0M2YzMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCCUDANBgkqhkiG9w0BAQsFAAOCAQEAH7BYI4I771qUhD4nD52nA9FfFd0w
1OPkesnJbIx0ZN9+13syE+EL4QOV0K3l6//BZqTAi6iMtXkNpEhYkYIs+IeA1/Vd
nw8HCdE32sCMZrOwP7QI9jorTf1TOTw1k6cgkcgTyYvj8WbzqLREjKQBE3NPhlIH
zs8tCoDGTHjixM+t9qfaNVRwaO44huyQIk1lW0hRALR3adSgTSbSHjdiZcevjbfL
5tzj7zzoEM0kkZSPOYO5a/vKUv0RqGMNxUjPNfz5ZfG7Hx4E0OV7iCb6wf9eWE5q
FLxYl4IAZgMC0v0otJqzVBaz6QkmZaq9oI2TuKFfKk/MZErmcUuhhXWPpg==
-----END CERTIFICATE-----