Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3bd639b4-5d27-4983-8a08-bf7283657766.roa
File:                     3bd639b4-5d27-4983-8a08-bf7283657766.roa (raw, json)
Hash identifier:          iSkYobggoPHxdtpHhWLJ+eH91ZWQ0vLTG1ThN3EKMTw=
Subject key identifier:   0E:1D:94:6D:0F:F6:CD:42:00:44:69:BD:40:F4:E3:0B:52:0E:38:61
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1E5920DEF86B9525A00508868BF728C51749A5A5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3bd639b4-5d27-4983-8a08-bf7283657766.roa
Signing time:             Mon 20 Oct 2025 05:11:29 +0000
ROA not before:           Mon 20 Oct 2025 05:11:29 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.157.180.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:59:20:de:f8:6b:95:25:a0:05:08:86:8b:f7:28:c5:17:49:a5:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 05:11:29 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=d2087203b500758bb9ee5cbef0674263c0e2e4f0e8885097273810ba940eca4f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:d8:4d:4e:dc:be:f0:91:4b:f4:37:47:2e:03:
                    53:5d:64:37:25:9b:9e:26:97:28:ca:a2:ea:59:09:
                    8a:7a:b8:71:8f:4e:47:65:80:3e:bf:d9:66:81:e5:
                    eb:56:ea:e2:cc:04:a5:d6:dc:f2:e8:c5:9c:03:13:
                    9e:78:76:b5:20:88:8b:46:7b:b4:73:4c:39:7b:dd:
                    a7:45:55:c3:fb:eb:11:cf:d6:ca:fa:97:f1:f3:69:
                    49:b1:d2:91:0e:db:86:12:8e:6d:97:39:a4:a3:81:
                    79:41:f3:b3:13:67:30:28:87:51:bc:31:bf:30:9a:
                    e9:63:cc:45:61:98:ce:f4:45:50:a9:15:df:90:99:
                    3c:22:e7:de:8e:64:87:e7:c7:f4:46:6c:92:2f:20:
                    11:22:b9:32:59:19:37:37:62:e9:8b:69:74:8e:08:
                    f7:22:c6:4a:de:b4:f2:c4:56:fd:45:21:c5:5c:b4:
                    d1:7f:33:dd:ad:b7:74:58:9f:98:60:c2:33:65:9f:
                    f5:6a:e4:c3:09:41:81:30:2f:b1:1d:a2:d4:71:c9:
                    0e:14:16:7e:dc:65:3d:b6:fe:be:07:21:d8:ad:e6:
                    20:f9:9f:8c:5d:a1:9b:33:34:13:20:ce:be:2b:8d:
                    3f:3e:1e:6b:0f:4b:56:fa:2c:14:04:4b:71:48:3b:
                    f7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:1D:94:6D:0F:F6:CD:42:00:44:69:BD:40:F4:E3:0B:52:0E:38:61
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3bd639b4-5d27-4983-8a08-bf7283657766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.157.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:a9:59:c8:34:9e:4c:a3:c8:08:f9:96:c1:90:56:9b:81:a3:
         a1:c5:47:ec:1a:f6:12:f5:85:1b:32:2f:5e:2c:12:19:ac:fd:
         74:9f:f5:d2:b0:28:66:cf:8f:d0:4c:8f:24:5d:84:2f:b5:81:
         b9:95:f3:24:1b:e8:df:08:47:ef:ee:7d:28:9a:02:f6:9c:68:
         63:39:81:69:54:c5:11:a6:df:11:a9:3d:06:0a:7a:0d:70:58:
         76:8f:87:4e:9f:76:df:25:8e:34:26:e1:0e:0d:9a:a9:f9:df:
         8f:b8:67:bc:51:03:ea:d0:c8:59:6b:c9:2f:1e:a8:46:b3:23:
         70:a5:66:4d:3c:82:66:8b:4b:8e:ef:a6:8a:57:bc:fd:02:e1:
         21:8a:1f:ad:d8:cf:f5:2a:fc:82:07:05:a4:b4:72:82:3b:fb:
         d3:4d:e4:4a:8d:c9:7f:d4:12:23:8f:d9:66:af:7b:f0:ea:bc:
         8c:11:a0:7c:83:f5:0d:ee:f9:d7:b2:49:0f:9f:c5:66:c0:00:
         88:99:f1:4a:16:b5:8c:80:f3:bd:1f:00:98:ae:9e:b6:f5:c5:
         e5:eb:01:1f:8c:79:e4:33:56:62:c1:94:6c:40:d9:a0:a7:44:
         48:e7:d4:f5:36:57:46:e6:6f:7a:24:2e:a2:d1:fe:2f:68:93:
         97:4d:95:38
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUHlkg3vhrlSWgBQiGi/coxRdJpaUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDUxMTI5WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BkMjA4NzIwM2I1MDA3NThiYjllZTVjYmVmMDY3NDI2M2Mw
ZTJlNGYwZTg4ODUwOTcyNzM4MTBiYTk0MGVjYTRmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDw2E1O3L7wkUv0N0cuA1NdZDclm54mlyjKoupZCYp6uHGP
TkdlgD6/2WaB5etW6uLMBKXW3PLoxZwDE554drUgiItGe7RzTDl73adFVcP76xHP
1sr6l/HzaUmx0pEO24YSjm2XOaSjgXlB87MTZzAoh1G8Mb8wmuljzEVhmM70RVCp
Fd+QmTwi596OZIfnx/RGbJIvIBEiuTJZGTc3YumLaXSOCPcixkretPLEVv1FIcVc
tNF/M92tt3RYn5hgwjNln/Vq5MMJQYEwL7EdotRxyQ4UFn7cZT22/r4HIdit5iD5
n4xdoZszNBMgzr4rjT8+HmsPS1b6LBQES3FIO/fzAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUDh2UbQ/2zUIARGm9QPTjC1IOOGEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzNiZDYzOWI0LTVkMjctNDk4My04YTA4LWJmNzI4MzY1Nzc2Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJsnbQwDQYJKoZIhvcNAQELBQADggEBAKSpWcg0nkyjyAj5lsGQVpuBo6HF
R+wa9hL1hRsyL14sEhms/XSf9dKwKGbPj9BMjyRdhC+1gbmV8yQb6N8IR+/ufSia
AvacaGM5gWlUxRGm3xGpPQYKeg1wWHaPh06fdt8ljjQm4Q4Nmqn534+4Z7xRA+rQ
yFlryS8eqEazI3ClZk08gmaLS47vpopXvP0C4SGKH63Yz/Uq/IIHBaS0coI7+9NN
5EqNyX/UEiOP2Wave/DqvIwRoHyD9Q3u+deySQ+fxWbAAIiZ8UoWtYyA870fAJiu
nrb1xeXrAR+MeeQzVmLBlGxA2aCnREjn1PU2V0bmb3okLqLR/i9ok5dNlTg=
-----END CERTIFICATE-----