Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bb973ef-cb7d-4829-9561-13dec989f35d.roa
File:                     2bb973ef-cb7d-4829-9561-13dec989f35d.roa (raw, json)
Hash identifier:          EO+1MtcLY/TJ6cYo06IMBQ4/EXF9wMpZTA1cJMK000E=
Subject key identifier:   76:4E:7D:5D:CE:E1:7F:A5:71:74:31:01:04:E2:EE:EC:0D:D2:44:ED
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       21B4AF1D47A76DB4363D86DDFD07710FD3C3F194
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bb973ef-cb7d-4829-9561-13dec989f35d.roa
Signing time:             Mon 20 Oct 2025 05:32:16 +0000
ROA not before:           Mon 20 Oct 2025 05:32:16 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.157.139.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b4:af:1d:47:a7:6d:b4:36:3d:86:dd:fd:07:71:0f:d3:c3:f1:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 05:32:16 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=aeb99441e32b40ec09161a65d548d8ebec7809b5e3ee6a1c1fc9affbe64cb4d9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f9:48:31:f4:0d:bd:dd:1f:7e:e4:8c:86:cc:
                    c5:5f:e9:c8:7d:dc:7f:d9:05:54:fd:9b:3a:83:0a:
                    92:0c:be:17:4a:3a:db:c6:5a:2e:01:4d:4a:ff:d0:
                    14:f6:54:e7:85:20:03:9a:b5:e2:bc:a0:4d:da:47:
                    01:9c:5c:77:66:57:84:b9:b6:b7:0c:92:42:0a:21:
                    d1:6d:c8:4f:1c:cb:70:2c:a4:93:49:d4:40:10:25:
                    ba:3d:27:f3:a4:78:f1:22:4e:f6:81:45:f1:9f:fa:
                    5f:52:08:81:85:8c:62:3c:97:0b:56:6c:e6:c9:28:
                    ab:81:97:1f:e0:dc:02:dc:e6:4f:37:e5:7c:e2:13:
                    26:2a:9d:b2:03:8d:9b:66:8e:3a:3d:4d:57:85:3d:
                    5a:2e:26:c2:b0:91:84:21:d1:e8:4c:c2:d9:0e:b7:
                    7f:e5:7f:e7:88:3a:1e:c1:1d:f4:4a:8a:89:e6:cf:
                    7b:3f:f8:be:a8:88:ac:67:4d:7d:79:43:4f:5e:70:
                    81:92:09:a0:ba:cb:f8:7b:31:82:51:7c:22:ca:27:
                    5a:43:fb:f5:a6:71:94:a1:5c:ab:cc:da:01:71:3b:
                    de:59:e6:f3:31:5a:f5:99:e9:dd:e6:80:43:42:63:
                    19:de:39:29:0f:d2:2d:56:1a:47:8b:fa:ed:61:1f:
                    43:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:4E:7D:5D:CE:E1:7F:A5:71:74:31:01:04:E2:EE:EC:0D:D2:44:ED
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bb973ef-cb7d-4829-9561-13dec989f35d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.157.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:15:b7:e7:12:c6:24:bb:97:87:66:09:fc:7f:e5:fe:1d:2c:
         58:e7:1f:24:01:ec:3e:23:03:29:ab:9f:b0:4e:09:6c:af:97:
         33:97:9b:5e:c9:44:d6:84:c9:bb:e4:93:14:43:d9:da:35:24:
         23:65:75:06:32:31:b1:ca:05:5b:87:1c:12:92:ff:3c:b5:a6:
         d4:99:06:ec:6d:1a:46:76:19:24:e5:1e:66:4e:12:84:93:7f:
         bf:36:b6:49:91:48:78:44:60:8e:74:a8:69:37:30:5e:d8:95:
         42:47:ac:5b:f4:72:0c:00:e9:b2:f6:49:2e:ea:61:14:0d:a1:
         4c:6f:b4:e2:83:29:fe:1c:53:c3:b7:97:82:b6:0b:ea:a9:c3:
         69:40:9b:c1:af:d2:56:56:ff:bf:0d:d6:75:79:78:eb:25:c9:
         fa:bd:ba:22:70:ef:1e:01:05:b7:87:22:d1:5e:f9:84:54:cc:
         a3:1f:8c:02:0d:71:6e:42:ee:cd:ee:c6:3c:29:6d:89:57:60:
         21:ad:82:55:93:a8:c0:1d:a7:b0:30:37:c4:14:42:13:94:61:
         73:89:0f:b1:ac:9a:03:8e:e7:41:1e:27:49:97:4d:a8:0c:2d:
         a9:c7:55:64:27:bd:56:d6:80:98:2a:25:cb:d5:88:75:c5:23:
         a5:4e:77:82
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUIbSvHUenbbQ2PYbd/QdxD9PD8ZQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDUzMjE2WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BhZWI5OTQ0MWUzMmI0MGVjMDkxNjFhNjVkNTQ4ZDhlYmVj
NzgwOWI1ZTNlZTZhMWMxZmM5YWZmYmU2NGNiNGQ5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDO+Ugx9A293R9+5IyGzMVf6ch93H/ZBVT9mzqDCpIMvhdK
OtvGWi4BTUr/0BT2VOeFIAOateK8oE3aRwGcXHdmV4S5trcMkkIKIdFtyE8cy3As
pJNJ1EAQJbo9J/OkePEiTvaBRfGf+l9SCIGFjGI8lwtWbObJKKuBlx/g3ALc5k83
5XziEyYqnbIDjZtmjjo9TVeFPVouJsKwkYQh0ehMwtkOt3/lf+eIOh7BHfRKionm
z3s/+L6oiKxnTX15Q09ecIGSCaC6y/h7MYJRfCLKJ1pD+/WmcZShXKvM2gFxO95Z
5vMxWvWZ6d3mgENCYxneOSkP0i1WGkeL+u1hH0MdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUdk59Xc7hf6VxdDEBBOLu7A3SRO0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzJiYjk3M2VmLWNiN2QtNDgyOS05NTYxLTEzZGVjOTg5ZjM1ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsnYswDQYJKoZIhvcNAQELBQADggEBAG8Vt+cSxiS7l4dmCfx/5f4dLFjn
HyQB7D4jAymrn7BOCWyvlzOXm17JRNaEybvkkxRD2do1JCNldQYyMbHKBVuHHBKS
/zy1ptSZBuxtGkZ2GSTlHmZOEoSTf782tkmRSHhEYI50qGk3MF7YlUJHrFv0cgwA
6bL2SS7qYRQNoUxvtOKDKf4cU8O3l4K2C+qpw2lAm8Gv0lZW/78N1nV5eOslyfq9
uiJw7x4BBbeHItFe+YRUzKMfjAINcW5C7s3uxjwpbYlXYCGtglWTqMAdp7AwN8QU
QhOUYXOJD7GsmgOO50EeJ0mXTagMLanHVWQnvVbWgJgqJcvViHXFI6VOd4I=
-----END CERTIFICATE-----