Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb749b21-d737-445d-8b86-397c0705e49c.roa
File:                     fb749b21-d737-445d-8b86-397c0705e49c.roa (raw, json)
Hash identifier:          b5H/rYCEeoBHoWJebd0FVye7v+lEg9UH7Q9wi8oLX0o=
Subject key identifier:   C1:5D:0A:F5:05:76:CB:73:99:04:02:DD:6F:5E:69:27:77:10:86:AF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       22E88ACC626CE38A05ABB30F03779D83C2FE66D7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb749b21-d737-445d-8b86-397c0705e49c.roa
Signing time:             Sat 01 Nov 2025 00:50:55 +0000
ROA not before:           Sat 01 Nov 2025 00:50:55 +0000
ROA not after:            Sat 06 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        150.247.64.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:e8:8a:cc:62:6c:e3:8a:05:ab:b3:0f:03:77:9d:83:c2:fe:66:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:50:55 2025 GMT
            Not After : Dec  6 23:59:59 2025 GMT
        Subject: serialNumber=f88af99e21b8439b0cc401af7e5edaed17423ad7ae639aae2a9b5a00c0d36cfd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e8:9f:7b:e0:4a:f9:e5:23:37:bf:aa:cd:77:
                    6b:3b:0f:c6:62:bb:54:95:0b:d2:a4:d3:d7:12:b8:
                    a3:86:5d:2d:f9:d5:08:6f:2c:82:2d:47:89:3b:97:
                    7c:f5:bd:36:bc:bf:54:a2:73:fd:9d:a0:b0:d1:04:
                    69:94:97:59:dd:17:9b:51:7f:23:18:67:88:2b:72:
                    4b:20:74:86:fc:2a:a7:da:1a:0c:22:c0:5c:a1:34:
                    e4:fe:05:72:f9:bd:8c:c4:86:a5:9b:3a:0b:61:5b:
                    8b:db:b3:a6:0a:e9:23:fc:c4:1f:61:78:9d:71:a4:
                    97:9d:75:9b:bc:d6:f5:01:fb:cf:81:22:77:16:ff:
                    35:de:7e:e5:5f:d2:55:40:28:5f:8d:58:72:a9:35:
                    35:2a:2b:02:6c:19:74:bd:70:1b:1d:f5:95:c1:5a:
                    c4:ce:e2:a3:8a:fc:36:b1:1b:9e:12:1a:82:bb:fb:
                    fa:b0:05:ae:a3:26:6d:5e:46:9a:bc:fb:6f:f4:1c:
                    5f:2e:1e:99:15:d6:68:42:5f:85:62:c5:7f:15:84:
                    cf:95:37:aa:34:32:87:2e:93:de:a4:9a:d7:6f:8f:
                    d1:36:68:c3:e6:66:a3:4a:b9:b7:8c:62:4a:c4:a8:
                    de:53:ef:6e:8d:4e:cb:78:96:a5:73:52:0a:c8:a4:
                    af:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5D:0A:F5:05:76:CB:73:99:04:02:DD:6F:5E:69:27:77:10:86:AF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb749b21-d737-445d-8b86-397c0705e49c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.247.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ba:90:08:af:50:78:d5:5b:85:57:98:33:75:7f:9a:80:64:70:
         6e:bb:b2:3d:b3:47:12:12:a3:22:20:ae:a9:7e:e5:9c:e8:d3:
         e3:2c:a5:ea:8f:fe:f8:1e:80:3a:76:7b:d9:74:75:27:6d:41:
         7e:69:06:a5:fa:bb:a1:d9:14:05:e5:6f:73:5f:71:48:91:08:
         75:f8:5e:80:af:91:9e:2e:08:8c:02:08:a1:1a:3a:50:a1:36:
         34:36:52:70:64:fc:c9:99:bf:2a:37:cf:d1:c2:54:20:e3:0a:
         45:bf:6f:05:48:c0:55:46:8c:9e:94:6c:3e:4d:f7:ca:bc:d0:
         5c:47:b2:36:f4:3d:76:cf:6e:10:28:8e:7a:d6:21:f5:1f:44:
         76:21:98:73:65:fb:4f:68:56:0a:c6:c4:5c:1f:4e:e1:f3:dc:
         4a:5f:bd:de:e8:75:9b:2b:4e:d8:0f:93:12:69:6c:7a:89:46:
         ef:78:f8:43:0c:7d:44:32:98:4b:5d:dd:02:7b:ba:c3:d2:30:
         8c:17:ea:58:f8:df:d0:16:25:6b:7a:a7:07:7b:9c:9d:82:a6:
         4a:6d:29:ac:bb:6f:56:69:83:7c:51:c5:9d:a9:6f:54:5f:68:
         0d:3f:a9:44:b3:ca:48:85:2f:85:87:7b:e7:ed:90:12:be:a9:
         e2:9a:fd:f7
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUIuiKzGJs44oFq7MPA3edg8L+ZtcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTAxMDA1MDU1WhcNMjUxMjA2MjM1OTU5
WjB6MUkwRwYDVQQFE0BmODhhZjk5ZTIxYjg0MzliMGNjNDAxYWY3ZTVlZGFlZDE3
NDIzYWQ3YWU2MzlhYWUyYTliNWEwMGMwZDM2Y2ZkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDX6J974Er55SM3v6rNd2s7D8Ziu1SVC9Kk09cSuKOGXS35
1QhvLIItR4k7l3z1vTa8v1Sic/2doLDRBGmUl1ndF5tRfyMYZ4grcksgdIb8Kqfa
GgwiwFyhNOT+BXL5vYzEhqWbOgthW4vbs6YK6SP8xB9heJ1xpJeddZu81vUB+8+B
IncW/zXefuVf0lVAKF+NWHKpNTUqKwJsGXS9cBsd9ZXBWsTO4qOK/DaxG54SGoK7
+/qwBa6jJm1eRpq8+2/0HF8uHpkV1mhCX4VixX8VhM+VN6o0Mocuk96kmtdvj9E2
aMPmZqNKubeMYkrEqN5T726NTst4lqVzUgrIpK9zAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUwV0K9QV2y3OZBALdb15pJ3cQhq8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2ZiNzQ5YjIxLWQ3MzctNDQ1ZC04Yjg2LTM5N2MwNzA1ZTQ5Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAWW90AwDQYJKoZIhvcNAQELBQADggEBALqQCK9QeNVbhVeYM3V/moBkcG67
sj2zRxISoyIgrql+5Zzo0+MspeqP/vgegDp2e9l0dSdtQX5pBqX6u6HZFAXlb3Nf
cUiRCHX4XoCvkZ4uCIwCCKEaOlChNjQ2UnBk/MmZvyo3z9HCVCDjCkW/bwVIwFVG
jJ6UbD5N98q80FxHsjb0PXbPbhAojnrWIfUfRHYhmHNl+09oVgrGxFwfTuHz3Epf
vd7odZsrTtgPkxJpbHqJRu94+EMMfUQymEtd3QJ7usPSMIwX6lj439AWJWt6pwd7
nJ2CpkptKay7b1Zpg3xRxZ2pb1RfaA0/qUSzykiFL4WHe+ftkBK+qeKa/fc=
-----END CERTIFICATE-----