Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67111c8b-4bd5-4381-9d25-28015780cd00.roa
File:                     67111c8b-4bd5-4381-9d25-28015780cd00.roa (raw, json)
Hash identifier:          u9vEhxodUBoB8z6UNyZbjw5sRdfppscxcZh5OsgNYrw=
Subject key identifier:   17:FB:70:D1:83:90:CD:CA:7C:AC:97:9A:9F:49:8C:0A:3A:7E:CD:AE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       79326340945528BE2DF522F54A870D9C0CA89136
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67111c8b-4bd5-4381-9d25-28015780cd00.roa
Signing time:             Sat 15 Nov 2025 00:40:07 +0000
ROA not before:           Sat 15 Nov 2025 00:40:07 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        88.108.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:32:63:40:94:55:28:be:2d:f5:22:f5:4a:87:0d:9c:0c:a8:91:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 15 00:40:07 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=a412a2a0078a947f3e3fc74c788db5a672810096771be00629513ee117dea5b9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:44:63:68:22:a6:c9:2a:55:76:b3:bf:a8:ea:
                    27:b8:2c:fa:d4:74:fc:01:f2:45:be:04:73:3b:40:
                    a6:95:b5:f8:d2:cc:e5:a4:25:32:20:fb:9e:a5:6c:
                    af:fb:f4:2c:38:48:81:9e:8e:1c:c9:a7:31:fa:6d:
                    0d:5d:5d:0e:de:84:ee:ab:56:77:57:dd:0b:44:2b:
                    d0:60:25:36:e5:96:77:9c:1c:87:bf:95:8f:ae:3c:
                    9c:19:06:65:f7:9f:3f:34:0b:c4:06:7f:46:ef:9d:
                    0b:5e:a0:d5:d8:f7:78:5a:ff:f7:c5:3a:86:d2:76:
                    0d:21:e6:cb:78:1c:47:d7:72:cf:03:79:04:ca:e0:
                    03:ff:c8:b5:98:2a:d3:34:65:38:18:a3:5f:ba:b8:
                    ef:ee:cc:f9:73:b6:c3:7c:2d:85:5f:79:88:85:6c:
                    95:80:70:64:85:08:35:c4:81:e7:83:dc:62:d7:b6:
                    d2:2d:a0:96:03:e7:1f:47:27:6f:f1:fe:a0:37:33:
                    d0:34:40:f2:8e:10:8c:44:9a:36:de:97:94:8f:92:
                    eb:f7:c8:ac:77:2a:7a:6d:79:1e:a0:bc:bf:b3:21:
                    b7:98:c1:71:ba:20:69:ac:3b:0e:2e:a1:13:aa:8d:
                    d2:01:d1:9e:6a:b3:a4:96:0b:97:eb:da:ea:8b:d6:
                    09:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:FB:70:D1:83:90:CD:CA:7C:AC:97:9A:9F:49:8C:0A:3A:7E:CD:AE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67111c8b-4bd5-4381-9d25-28015780cd00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.108.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         aa:45:aa:ce:31:8a:e9:b4:b1:30:23:6f:5a:f5:f9:8f:73:0f:
         f5:65:26:13:3b:f5:e8:55:9f:87:30:e8:e4:43:4d:b8:94:bb:
         88:f7:ef:6b:dd:13:e7:61:aa:19:40:84:4d:44:6c:0a:5d:79:
         05:69:02:4c:3c:1e:57:8e:9b:ee:c3:71:2f:03:06:e9:c1:3d:
         7c:e8:56:a7:d5:b3:4a:38:09:e9:28:fb:d4:4e:f9:fb:02:ef:
         20:f0:92:b9:cf:64:0b:ba:4d:3d:d3:13:6d:96:07:71:e5:a4:
         ca:0a:7b:57:3e:f9:c7:ff:0e:25:c0:b1:53:f1:79:74:5e:9d:
         a8:3b:35:d3:d1:92:a0:61:eb:3d:35:3b:66:31:df:61:1a:02:
         77:e6:bc:62:30:2d:92:d7:ff:bd:96:7c:f6:b0:42:33:f4:9f:
         c5:bf:4f:2d:fb:5e:69:ed:dd:d3:b8:0f:6d:74:cc:74:a2:3a:
         00:8c:91:f9:4c:d6:f6:c3:bf:35:fd:62:a5:e3:96:de:07:32:
         62:97:cc:26:cd:28:62:82:40:b5:b1:4f:95:a2:6d:9b:23:7b:
         c4:32:3a:ab:ae:15:7e:2f:1a:c4:73:f1:8a:ca:f6:1d:b0:49:
         13:af:b6:31:8b:3b:12:a3:49:af:4c:09:79:f7:49:58:9e:b9:
         e8:f7:45:4b
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUeTJjQJRVKL4t9SL1SocNnAyokTYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTE1MDA0MDA3WhcNMjUxMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BhNDEyYTJhMDA3OGE5NDdmM2UzZmM3NGM3ODhkYjVhNjcy
ODEwMDk2NzcxYmUwMDYyOTUxM2VlMTE3ZGVhNWI5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCkRGNoIqbJKlV2s7+o6ie4LPrUdPwB8kW+BHM7QKaVtfjS
zOWkJTIg+56lbK/79Cw4SIGejhzJpzH6bQ1dXQ7ehO6rVndX3QtEK9BgJTbllnec
HIe/lY+uPJwZBmX3nz80C8QGf0bvnQteoNXY93ha//fFOobSdg0h5st4HEfXcs8D
eQTK4AP/yLWYKtM0ZTgYo1+6uO/uzPlztsN8LYVfeYiFbJWAcGSFCDXEgeeD3GLX
ttItoJYD5x9HJ2/x/qA3M9A0QPKOEIxEmjbel5SPkuv3yKx3KnpteR6gvL+zIbeY
wXG6IGmsOw4uoROqjdIB0Z5qs6SWC5fr2uqL1gm3AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUF/tw0YOQzcp8rJean0mMCjp+za4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzY3MTExYzhiLTRiZDUtNDM4MS05ZDI1LTI4MDE1NzgwY2QwMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwJYbDANBgkqhkiG9w0BAQsFAAOCAQEAqkWqzjGK6bSxMCNvWvX5j3MP9WUm
Ezv16FWfhzDo5ENNuJS7iPfva90T52GqGUCETURsCl15BWkCTDweV46b7sNxLwMG
6cE9fOhWp9WzSjgJ6Sj71E75+wLvIPCSuc9kC7pNPdMTbZYHceWkygp7Vz75x/8O
JcCxU/F5dF6dqDs109GSoGHrPTU7ZjHfYRoCd+a8YjAtktf/vZZ89rBCM/Sfxb9P
Lfteae3d07gPbXTMdKI6AIyR+UzW9sO/Nf1ipeOW3gcyYpfMJs0oYoJAtbFPlaJt
myN7xDI6q64Vfi8axHPxisr2HbBJE6+2MYs7EqNJr0wJefdJWJ656PdFSw==
-----END CERTIFICATE-----