Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/355b425a-920e-47e1-8519-467f2ef8cec3.roa
File:                     355b425a-920e-47e1-8519-467f2ef8cec3.roa (raw, json)
Hash identifier:          hyXdzVkq52wvPzPFUFf84DUzTa7Xh+Im5wu/YW6vRVc=
Subject key identifier:   B4:49:DF:39:3D:20:79:D0:97:FD:1E:F7:4D:D0:EC:BC:E4:C9:6A:C5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7A2B6265CE4ECA538FBA5030898CB96E601CC139
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/355b425a-920e-47e1-8519-467f2ef8cec3.roa
Signing time:             Mon 20 Oct 2025 05:00:05 +0000
ROA not before:           Mon 20 Oct 2025 05:00:05 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.139.0.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:2b:62:65:ce:4e:ca:53:8f:ba:50:30:89:8c:b9:6e:60:1c:c1:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 05:00:05 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=c99edc574f73f4176df2f59a307de92bcd24d749e8b8c685f739e4da947ce67d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9f:aa:92:63:86:48:72:d5:17:0e:37:6a:f9:
                    04:34:db:06:e8:1c:5e:60:09:f0:62:a0:d8:65:1c:
                    41:0a:61:9b:13:35:6b:c4:2b:8e:40:a8:d1:4b:b4:
                    ba:d2:50:a3:6f:ce:34:bb:38:d3:53:39:83:84:f0:
                    17:e3:f7:97:51:bb:91:de:9d:61:2c:b0:83:b5:14:
                    b9:aa:18:98:91:5a:2e:b1:7d:78:5e:5b:74:45:bd:
                    d1:0d:c7:53:a6:8d:de:31:28:7f:9e:29:88:7e:22:
                    fe:52:c5:8c:1a:6e:33:f0:6e:a8:7d:20:aa:cd:37:
                    f8:07:5a:1d:a5:97:df:e8:14:1b:a0:43:1a:a0:10:
                    4a:d9:b4:9f:3e:ae:83:1b:4f:66:77:11:24:0f:dc:
                    d9:30:9a:e9:f5:65:be:bc:3b:16:89:38:6b:ef:be:
                    66:85:88:af:5d:55:bb:e5:b0:76:bc:d7:6d:69:63:
                    15:50:7d:9c:9b:3f:0b:ad:92:42:bc:b8:84:a9:be:
                    8b:04:df:b6:0f:30:96:43:44:0a:31:bd:9f:94:eb:
                    92:01:d4:c1:48:f4:9f:81:dd:d2:e9:c4:df:c6:10:
                    7e:42:c2:d5:f3:03:dd:c2:29:1b:89:37:0e:cd:20:
                    c6:36:bd:53:0e:63:34:bc:32:57:e2:f5:79:c2:23:
                    c3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:49:DF:39:3D:20:79:D0:97:FD:1E:F7:4D:D0:EC:BC:E4:C9:6A:C5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/355b425a-920e-47e1-8519-467f2ef8cec3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.139.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         67:98:4b:35:e7:13:51:c5:3e:48:1d:d0:e1:2e:16:eb:38:e0:
         0c:fc:2b:a6:be:f2:59:32:65:43:9f:77:50:9a:7e:67:7f:9b:
         da:6b:f0:4e:a6:e4:6e:e5:1f:e6:24:03:59:a0:33:58:a5:81:
         7b:c5:8f:0d:dc:22:09:62:7f:c1:9d:0a:ef:c7:56:a7:a1:bb:
         4b:00:db:e5:b0:9a:be:16:58:e4:a9:25:86:9f:ff:d7:de:7d:
         73:1a:c2:92:2a:7d:a7:02:27:25:13:73:0a:ba:4b:fb:c7:6c:
         2f:4b:63:bd:84:db:a0:f5:ba:28:17:be:ee:5d:71:3d:a0:68:
         75:23:3a:41:c6:58:6a:fa:d3:02:af:65:77:b5:81:e7:5a:9e:
         38:dc:1a:c2:73:57:a7:9d:bb:0c:b4:f6:a6:85:30:83:7c:61:
         1b:85:5d:c1:29:97:ff:5b:c0:f5:d9:54:9f:da:93:1e:b1:a2:
         de:2f:9c:3c:33:0a:5f:5b:9f:8a:ce:52:3a:7c:bf:b0:63:77:
         20:36:fd:99:49:74:af:f4:05:ed:8a:e7:a5:06:8e:34:92:a0:
         35:77:05:3d:8f:4a:33:cb:e0:71:a1:05:10:92:7d:d4:95:de:
         9e:e4:56:ad:34:7f:ee:b2:70:bd:20:78:92:82:4c:c2:63:57:
         52:67:62:c2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUeitiZc5OylOPulAwiYy5bmAcwTkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDUwMDA1WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BjOTllZGM1NzRmNzNmNDE3NmRmMmY1OWEzMDdkZTkyYmNk
MjRkNzQ5ZThiOGM2ODVmNzM5ZTRkYTk0N2NlNjdkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCHn6qSY4ZIctUXDjdq+QQ02wboHF5gCfBioNhlHEEKYZsT
NWvEK45AqNFLtLrSUKNvzjS7ONNTOYOE8Bfj95dRu5HenWEssIO1FLmqGJiRWi6x
fXheW3RFvdENx1Omjd4xKH+eKYh+Iv5SxYwabjPwbqh9IKrNN/gHWh2ll9/oFBug
QxqgEErZtJ8+roMbT2Z3ESQP3Nkwmun1Zb68OxaJOGvvvmaFiK9dVbvlsHa8121p
YxVQfZybPwutkkK8uISpvosE37YPMJZDRAoxvZ+U65IB1MFI9J+B3dLpxN/GEH5C
wtXzA93CKRuJNw7NIMY2vVMOYzS8Mlfi9XnCI8OtAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUtEnfOT0gedCX/R73TdDsvOTJasUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzM1NWI0MjVhLTkyMGUtNDdlMS04NTE5LTQ2N2YyZWY4Y2VjMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARsiwAwDQYJKoZIhvcNAQELBQADggEBAGeYSzXnE1HFPkgd0OEuFus44Az8
K6a+8lkyZUOfd1Cafmd/m9pr8E6m5G7lH+YkA1mgM1ilgXvFjw3cIglif8GdCu/H
Vqehu0sA2+Wwmr4WWOSpJYaf/9fefXMawpIqfacCJyUTcwq6S/vHbC9LY72E26D1
uigXvu5dcT2gaHUjOkHGWGr60wKvZXe1gedanjjcGsJzV6eduwy09qaFMIN8YRuF
XcEpl/9bwPXZVJ/akx6xot4vnDwzCl9bn4rOUjp8v7BjdyA2/ZlJdK/0Be2K56UG
jjSSoDV3BT2PSjPL4HGhBRCSfdSV3p7kVq00f+6ycL0geJKCTMJjV1JnYsI=
-----END CERTIFICATE-----