Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff28ff32-8589-40e1-8f07-cacdbffd05b8.roa
File:                     ff28ff32-8589-40e1-8f07-cacdbffd05b8.roa (raw, json)
Hash identifier:          +bI9QrR5TTC3XxOw38WsflUAoRN8Z2AZ+6fWqFVkFXo=
Subject key identifier:   9B:E2:78:12:E9:C5:F4:15:AD:B5:9D:42:57:D2:48:53:3B:50:5D:BC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       49F0A6061914067EF8690315D12E0EB0B34F6988
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff28ff32-8589-40e1-8f07-cacdbffd05b8.roa
Signing time:             Sun 02 Nov 2025 00:20:39 +0000
ROA not before:           Sun 02 Nov 2025 00:20:39 +0000
ROA not after:            Sun 07 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        159.20.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:f0:a6:06:19:14:06:7e:f8:69:03:15:d1:2e:0e:b0:b3:4f:69:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  2 00:20:39 2025 GMT
            Not After : Dec  7 23:59:59 2025 GMT
        Subject: serialNumber=ea6b141bfbce4f07213632a086c87f12d0c4d5289a4dcd27724dd0b462004c9f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:36:72:f1:e4:3b:e1:ff:a7:de:0b:57:50:36:
                    3a:e0:c2:cd:c3:73:4c:d3:26:21:2c:5a:00:24:cf:
                    1c:26:7b:7c:4e:99:57:97:4a:0f:e9:a7:74:de:60:
                    b1:7f:df:9b:a7:1b:fe:7c:b5:14:49:fd:83:e5:f5:
                    c7:8b:71:8a:cd:f6:2e:74:82:c6:72:83:49:08:99:
                    23:8c:76:c5:d4:fc:d5:32:ed:30:3c:7f:60:b1:60:
                    01:b2:3b:00:56:5a:c2:6f:ba:ae:dc:28:ad:70:4e:
                    2a:84:31:31:5d:2e:ce:24:1f:fc:22:87:e8:46:9a:
                    2d:21:0c:8a:66:b7:c1:ae:7b:19:fa:4f:79:2d:3e:
                    01:7b:c2:1b:21:0c:ca:09:69:c7:2e:71:5d:21:9a:
                    ea:bb:ec:fb:d3:1a:b5:01:d1:bd:4c:29:e0:70:3a:
                    b4:eb:25:93:86:e8:a8:69:35:30:f6:80:40:40:fe:
                    ba:e4:51:69:47:47:0e:8e:93:b3:9b:3d:b1:ab:bc:
                    98:64:20:b6:ca:8c:3e:db:32:c3:22:3b:e7:7b:78:
                    ef:8f:06:73:b6:5e:cb:10:60:68:b4:7e:cd:65:cb:
                    42:36:0f:0a:fd:c1:3b:2a:d6:be:71:8a:55:f8:48:
                    15:c7:1e:6d:27:f2:c1:4a:4a:95:ff:fb:74:7d:24:
                    98:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E2:78:12:E9:C5:F4:15:AD:B5:9D:42:57:D2:48:53:3B:50:5D:BC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff28ff32-8589-40e1-8f07-cacdbffd05b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.20.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4a:51:0d:23:4a:2a:1b:43:da:c7:74:4d:8a:cd:de:ba:c1:14:
         7b:a5:68:6d:77:bc:c2:ca:27:d0:33:89:e5:52:4d:e1:25:bc:
         89:86:6f:aa:41:f0:38:32:61:5d:95:b6:6e:9f:f0:44:fa:ef:
         d3:5b:77:db:19:fb:1d:bc:c4:86:19:0f:bd:77:75:80:fa:e7:
         ca:f5:99:02:8a:08:38:17:1c:61:fd:cc:1f:3d:a8:af:bc:f8:
         d7:db:55:c8:72:e1:aa:84:45:b5:61:25:96:99:60:f1:14:f5:
         b1:29:6b:a8:08:5c:62:65:02:81:76:d9:d9:3a:90:dd:48:f1:
         35:6d:f0:26:7d:11:27:af:67:27:19:df:1b:f2:d4:d7:6a:5b:
         d9:ec:72:5d:e9:8f:ab:a9:c3:10:76:ac:44:ff:ea:7c:03:91:
         35:c2:7e:26:a5:88:7e:ef:4a:15:03:4b:c3:c6:ef:fe:eb:8b:
         7b:59:46:8a:6f:88:03:e1:5f:2d:49:a4:cb:f9:87:a7:ed:01:
         c8:17:2b:c6:1c:33:ca:17:d0:85:a4:80:d6:b1:9b:59:d8:38:
         12:eb:e9:d7:ba:50:93:d6:ad:1c:c6:0e:83:4b:df:ac:ff:47:
         c3:aa:13:ba:05:0e:12:5b:f5:8a:74:01:27:54:ed:13:77:89:
         d0:aa:2b:c0
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUSfCmBhkUBn74aQMV0S4OsLNPaYgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTAyMDAyMDM5WhcNMjUxMjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BlYTZiMTQxYmZiY2U0ZjA3MjEzNjMyYTA4NmM4N2YxMmQw
YzRkNTI4OWE0ZGNkMjc3MjRkZDBiNDYyMDA0YzlmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCeNnLx5Dvh/6feC1dQNjrgws3Dc0zTJiEsWgAkzxwme3xO
mVeXSg/pp3TeYLF/35unG/58tRRJ/YPl9ceLcYrN9i50gsZyg0kImSOMdsXU/NUy
7TA8f2CxYAGyOwBWWsJvuq7cKK1wTiqEMTFdLs4kH/wih+hGmi0hDIpmt8Guexn6
T3ktPgF7whshDMoJaccucV0hmuq77PvTGrUB0b1MKeBwOrTrJZOG6KhpNTD2gEBA
/rrkUWlHRw6Ok7ObPbGrvJhkILbKjD7bMsMiO+d7eO+PBnO2XssQYGi0fs1ly0I2
Dwr9wTsq1r5xilX4SBXHHm0n8sFKSpX/+3R9JJiTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUm+J4EunF9BWttZ1CV9JIUztQXbwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2ZmMjhmZjMyLTg1ODktNDBlMS04ZjA3LWNhY2RiZmZkMDViOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAefFIAwDQYJKoZIhvcNAQELBQADggEBAEpRDSNKKhtD2sd0TYrN3rrBFHul
aG13vMLKJ9AzieVSTeElvImGb6pB8DgyYV2Vtm6f8ET679Nbd9sZ+x28xIYZD713
dYD658r1mQKKCDgXHGH9zB89qK+8+NfbVchy4aqERbVhJZaZYPEU9bEpa6gIXGJl
AoF22dk6kN1I8TVt8CZ9ESevZycZ3xvy1NdqW9nscl3pj6upwxB2rET/6nwDkTXC
fialiH7vShUDS8PG7/7ri3tZRopviAPhXy1JpMv5h6ftAcgXK8YcM8oX0IWkgNax
m1nYOBLr6de6UJPWrRzGDoNL36z/R8OqE7oFDhJb9Yp0ASdU7RN3idCqK8A=
-----END CERTIFICATE-----