Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/268e0aa1-4eec-4cf2-bd4d-22f2a51d9b74.roa
File:                     268e0aa1-4eec-4cf2-bd4d-22f2a51d9b74.roa (raw, json)
Hash identifier:          F/NtuvR7kzffD9nUQiS4FmRcwN+AFDm4ObEHUK/HFis=
Subject key identifier:   43:EB:D8:22:BC:5D:B2:4E:05:D8:4D:B1:EE:24:6C:A0:6C:EC:7A:FB
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6B0BBEF9C7C52543862801D0CF2C3EEDB54D3685
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/268e0aa1-4eec-4cf2-bd4d-22f2a51d9b74.roa
Signing time:             Sun 11 Oct 2026 14:40:11 +0000
ROA not before:           Sun 11 Oct 2026 14:40:11 +0000
ROA not after:            Sat 09 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        52.223.0.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:0b:be:f9:c7:c5:25:43:86:28:01:d0:cf:2c:3e:ed:b5:4d:36:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 11 14:40:11 2026 GMT
            Not After : Jan  9 23:59:59 2027 GMT
        Subject: serialNumber=0177d40c6fc4838f6198ad5323ae548b41efe1836e170e5a2085849839e95732, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ff:5c:4a:15:55:3c:32:60:c5:06:34:81:7a:
                    ff:4c:bf:29:96:11:d9:48:29:79:b9:84:d6:46:7e:
                    76:d4:c8:30:38:70:b5:62:66:67:24:da:6a:6e:7f:
                    1c:c4:54:38:b8:c5:46:9b:a8:41:a7:ef:52:18:70:
                    49:68:27:93:c1:39:75:eb:61:2b:e7:7d:96:2e:77:
                    34:b8:83:60:05:24:82:40:0a:22:2d:60:ff:8f:7d:
                    81:ab:28:25:05:6a:91:c5:9d:4e:22:df:a2:80:d3:
                    64:56:8c:3e:c8:18:bd:cb:35:7b:0e:96:b7:9b:bf:
                    11:3c:19:06:95:d8:47:33:e4:9f:20:ec:67:05:aa:
                    e1:81:42:ea:ef:83:d7:a5:58:3c:b1:e9:63:29:f2:
                    c3:fd:ae:53:16:4e:8b:8f:4f:9f:1b:c0:d8:aa:b8:
                    4b:c6:5f:55:96:11:e9:fc:4f:ef:57:f0:76:ed:a5:
                    9e:95:14:c8:dc:53:da:00:88:a6:33:b0:6b:b5:4b:
                    36:95:53:55:28:ed:17:08:30:49:4c:75:a0:34:ad:
                    6c:ba:89:5a:c5:96:3c:49:90:1d:c8:00:9a:bd:64:
                    ce:b4:47:5c:79:8b:cc:bb:c8:65:ea:b7:66:aa:41:
                    97:a3:77:a4:24:80:9e:17:d4:f4:d2:53:27:18:a5:
                    00:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EB:D8:22:BC:5D:B2:4E:05:D8:4D:B1:EE:24:6C:A0:6C:EC:7A:FB
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/268e0aa1-4eec-4cf2-bd4d-22f2a51d9b74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.223.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b0:af:2c:3d:09:89:5c:97:6a:31:b6:4b:58:11:b8:ce:bd:46:
         6f:33:d0:51:7c:28:a3:79:ce:af:b2:7f:a0:9b:8e:8f:b1:51:
         82:14:db:72:7e:59:49:4d:7e:85:1f:ae:3a:cc:2c:1e:19:55:
         4f:7b:84:4f:3f:92:e8:81:5c:a2:34:1b:33:fd:14:42:0d:3e:
         0d:e4:e6:c0:04:df:bc:b2:d4:84:80:8f:a5:0e:8a:ce:52:78:
         9a:64:36:dc:7a:94:73:e2:40:37:0c:70:37:2b:18:63:b1:66:
         c7:b3:10:62:a2:5f:bb:9c:59:dc:98:00:54:91:0e:43:67:75:
         29:8b:be:f0:da:a7:c2:90:3b:5f:88:fe:4e:76:ba:5b:96:37:
         cc:6f:8b:70:5a:e9:6d:a4:e9:eb:66:8c:52:32:4a:e7:5e:23:
         cb:54:ef:28:6f:f2:73:4e:f8:06:e0:f5:73:ef:c9:7a:0d:cb:
         7c:7b:39:0c:53:4c:70:31:c9:fb:bb:25:25:5c:aa:0b:5e:0c:
         de:3b:9a:e7:06:8b:67:1c:95:f8:31:88:73:fb:33:d0:ee:03:
         53:6a:ef:8f:68:12:df:f2:a4:a6:4c:8a:c4:1f:bc:41:c7:6f:
         01:c4:c0:76:53:6b:66:87:ff:54:a5:62:20:81:d7:cd:b1:23:
         28:88:a4:60
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUawu++cfFJUOGKAHQzyw+7bVNNoUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDExMTQ0MDExWhcNMjcwMTA5MjM1OTU5
WjB6MUkwRwYDVQQFE0AwMTc3ZDQwYzZmYzQ4MzhmNjE5OGFkNTMyM2FlNTQ4YjQx
ZWZlMTgzNmUxNzBlNWEyMDg1ODQ5ODM5ZTk1NzMyMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCq/1xKFVU8MmDFBjSBev9MvymWEdlIKXm5hNZGfnbUyDA4
cLViZmck2mpufxzEVDi4xUabqEGn71IYcEloJ5PBOXXrYSvnfZYudzS4g2AFJIJA
CiItYP+PfYGrKCUFapHFnU4i36KA02RWjD7IGL3LNXsOlrebvxE8GQaV2Ecz5J8g
7GcFquGBQurvg9elWDyx6WMp8sP9rlMWTouPT58bwNiquEvGX1WWEen8T+9X8Hbt
pZ6VFMjcU9oAiKYzsGu1SzaVU1Uo7RcIMElMdaA0rWy6iVrFljxJkB3IAJq9ZM60
R1x5i8y7yGXqt2aqQZejd6QkgJ4X1PTSUycYpQDhAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUQ+vYIrxdsk4F2E2x7iRsoGzsevswHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzI2OGUwYWExLTRlZWMtNGNmMi1iZDRkLTIyZjJhNTFkOWI3NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAc03wAwDQYJKoZIhvcNAQELBQADggEBALCvLD0JiVyXajG2S1gRuM69Rm8z
0FF8KKN5zq+yf6Cbjo+xUYIU23J+WUlNfoUfrjrMLB4ZVU97hE8/kuiBXKI0GzP9
FEINPg3k5sAE37yy1ISAj6UOis5SeJpkNtx6lHPiQDcMcDcrGGOxZsezEGKiX7uc
WdyYAFSRDkNndSmLvvDap8KQO1+I/k52uluWN8xvi3Ba6W2k6etmjFIySudeI8tU
7yhv8nNO+Abg9XPvyXoNy3x7OQxTTHAxyfu7JSVcqgteDN47mucGi2cclfgxiHP7
M9DuA1Nq749oEt/ypKZMisQfvEHHbwHEwHZTa2aH/1SlYiCB182xIyiIpGA=
-----END CERTIFICATE-----