Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a44dfd3-bbda-45ce-9ca6-30e6cbd9e8f1.roa
File:                     4a44dfd3-bbda-45ce-9ca6-30e6cbd9e8f1.roa (raw, json)
Hash identifier:          4lay7R8FQdvWgwrDYtl0jeMMiK+6bXLvZjyOMwBebAw=
Subject key identifier:   A5:AF:81:F1:40:79:48:B5:53:32:2D:84:6F:5B:AD:EB:37:7C:DF:89
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5720B25A331FBEAF2E6F167BDB058092640DF45C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a44dfd3-bbda-45ce-9ca6-30e6cbd9e8f1.roa
Signing time:             Sun 11 Oct 2026 14:40:13 +0000
ROA not before:           Sun 11 Oct 2026 14:40:13 +0000
ROA not after:            Sat 09 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        15.197.12.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:20:b2:5a:33:1f:be:af:2e:6f:16:7b:db:05:80:92:64:0d:f4:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 11 14:40:13 2026 GMT
            Not After : Jan  9 23:59:59 2027 GMT
        Subject: serialNumber=00da99d0efb4f57aca5066550b0aab6379b958e8c7a8c278a44578d52bf2ba23, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f2:0b:e6:cb:f1:38:d9:1b:51:1a:42:e4:8d:
                    b6:4c:58:87:57:c6:2e:bc:dc:9f:e3:d7:1d:82:a9:
                    4b:7b:d1:c3:4f:0a:08:51:cb:65:cd:f4:04:0b:26:
                    05:4a:a6:0c:38:36:f6:66:cd:84:d2:77:ea:3b:d9:
                    75:87:a2:e8:d1:53:63:b5:bd:3e:2a:8a:05:14:49:
                    0d:bc:d3:ed:fb:eb:63:2c:d8:71:32:c2:81:5f:42:
                    09:bc:60:dd:c1:86:9f:a6:98:9b:f0:64:df:02:75:
                    e1:0d:b5:dd:a4:9b:20:a3:40:59:e5:3c:8f:35:31:
                    74:8e:db:25:9f:05:50:c1:10:91:90:ee:e4:62:e5:
                    32:ff:3d:3d:30:44:6a:1e:ce:08:27:02:72:ea:db:
                    1f:09:fa:c4:6e:51:69:44:21:15:97:46:17:4c:3a:
                    86:a2:75:26:96:b6:d6:0d:4a:ac:27:d0:ee:87:4b:
                    91:88:54:85:36:d3:14:80:65:4d:1d:48:88:ca:9e:
                    b0:ba:03:3f:0d:f8:ce:a4:50:55:15:89:53:0d:bd:
                    1b:c0:a6:30:b4:1d:5a:ca:81:3e:7e:26:29:81:ae:
                    26:d0:6f:e1:ff:6a:94:ec:da:f2:72:75:8f:8a:c9:
                    ca:c5:95:1d:eb:08:29:5f:d1:75:bc:6d:9f:bf:c3:
                    6b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:AF:81:F1:40:79:48:B5:53:32:2D:84:6F:5B:AD:EB:37:7C:DF:89
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a44dfd3-bbda-45ce-9ca6-30e6cbd9e8f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.197.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:93:08:27:87:51:48:db:75:c8:52:06:af:d7:0d:36:55:93:
         a8:35:50:dd:81:ee:44:8f:5c:87:ec:60:f2:3a:e0:11:9a:88:
         b5:32:ba:7e:60:4d:52:99:fa:19:d3:3f:b2:2a:90:13:57:8b:
         0c:24:bf:d7:dd:9e:7d:58:39:2a:dc:a5:89:59:40:55:c5:c8:
         9f:40:5d:70:08:a1:cb:45:52:67:13:da:e7:6e:84:22:18:ec:
         05:13:99:6e:06:09:a4:c6:ec:5b:78:c3:2d:a2:69:ac:d7:04:
         44:66:d7:ab:22:dd:b3:65:9f:c0:0f:f9:72:6c:c3:74:d2:03:
         4d:bc:6b:3c:2d:81:2e:84:7c:50:49:ed:2a:33:18:d3:f4:42:
         e6:a0:ca:25:9b:c0:39:f8:f6:2d:84:e4:94:7b:bc:c7:30:c4:
         d8:ab:67:a1:30:c9:2b:db:3a:73:7b:a4:63:da:da:37:ea:58:
         1e:00:ba:77:77:40:be:03:40:bf:20:18:ba:1d:65:6f:3f:41:
         95:8d:00:4b:c3:12:11:d4:45:b3:ab:36:c4:ee:d1:4a:38:3d:
         78:ac:58:c7:d5:8c:7b:27:ef:1c:07:e1:3e:20:bc:ab:1a:f6:
         f3:3b:fe:75:11:b2:d3:48:4f:38:b0:ae:e3:95:0e:a5:6c:d0:
         66:a8:ea:d5
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVyCyWjMfvq8ubxZ72wWAkmQN9FwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDExMTQ0MDEzWhcNMjcwMTA5MjM1OTU5
WjB6MUkwRwYDVQQFE0AwMGRhOTlkMGVmYjRmNTdhY2E1MDY2NTUwYjBhYWI2Mzc5
Yjk1OGU4YzdhOGMyNzhhNDQ1NzhkNTJiZjJiYTIzMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCb8gvmy/E42RtRGkLkjbZMWIdXxi683J/j1x2CqUt70cNP
CghRy2XN9AQLJgVKpgw4NvZmzYTSd+o72XWHoujRU2O1vT4qigUUSQ280+3762Ms
2HEywoFfQgm8YN3Bhp+mmJvwZN8CdeENtd2kmyCjQFnlPI81MXSO2yWfBVDBEJGQ
7uRi5TL/PT0wRGoezggnAnLq2x8J+sRuUWlEIRWXRhdMOoaidSaWttYNSqwn0O6H
S5GIVIU20xSAZU0dSIjKnrC6Az8N+M6kUFUViVMNvRvApjC0HVrKgT5+JimBribQ
b+H/apTs2vJydY+KycrFlR3rCClf0XW8bZ+/w2vFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUpa+B8UB5SLVTMi2Eb1ut6zd834kwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzRhNDRkZmQzLWJiZGEtNDVjZS05Y2E2LTMwZTZjYmQ5ZThmMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAPxQwwDQYJKoZIhvcNAQELBQADggEBAEyTCCeHUUjbdchSBq/XDTZVk6g1
UN2B7kSPXIfsYPI64BGaiLUyun5gTVKZ+hnTP7IqkBNXiwwkv9fdnn1YOSrcpYlZ
QFXFyJ9AXXAIoctFUmcT2uduhCIY7AUTmW4GCaTG7Ft4wy2iaazXBERm16si3bNl
n8AP+XJsw3TSA028azwtgS6EfFBJ7SozGNP0QuagyiWbwDn49i2E5JR7vMcwxNir
Z6EwySvbOnN7pGPa2jfqWB4Aund3QL4DQL8gGLodZW8/QZWNAEvDEhHURbOrNsTu
0Uo4PXisWMfVjHsn7xwH4T4gvKsa9vM7/nURstNITziwruOVDqVs0Gao6tU=
-----END CERTIFICATE-----