Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5dc7e992-bd0b-431a-8cc3-088f2ccafc1d.roa
File:                     5dc7e992-bd0b-431a-8cc3-088f2ccafc1d.roa (raw, json)
Hash identifier:          WGePyv3hW6rXtZZxKrJ+BSbu5LASaxAeNMVuwkvvm/4=
Subject key identifier:   5E:47:33:E5:B4:44:36:C6:5A:91:83:00:F5:4F:46:26:FB:D9:08:1A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4595431C4292D1BE7941F86DF698EBD1890BF6BA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5dc7e992-bd0b-431a-8cc3-088f2ccafc1d.roa
Signing time:             Mon 20 Oct 2025 05:40:10 +0000
ROA not before:           Mon 20 Oct 2025 05:40:10 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.159.85.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:95:43:1c:42:92:d1:be:79:41:f8:6d:f6:98:eb:d1:89:0b:f6:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 05:40:10 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=4b9c2127e9d70b57b6c030cb13628a59fcdb06347a02d931f84d1ac884b9e8e9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:42:b1:ad:e2:e1:f7:2a:35:06:17:f1:8a:2f:
                    d0:0b:3a:47:6d:bd:02:81:e9:f1:75:7f:12:90:3c:
                    c1:b3:d9:0f:a2:d3:5e:9a:d4:04:cd:a9:58:7c:7f:
                    fb:aa:9e:b2:d3:f9:e3:33:68:db:8c:a7:92:3d:05:
                    8b:5d:58:0d:13:38:02:e4:aa:60:68:ac:b5:f0:07:
                    20:cf:5d:44:57:d7:15:95:60:d1:f2:5a:25:c2:59:
                    62:fe:45:65:27:0b:e2:a1:db:c8:9e:f0:62:78:3d:
                    3f:c0:2e:b6:11:db:2a:e6:23:ce:c6:bd:a4:b5:9b:
                    e9:00:5d:22:51:f4:73:9b:19:83:59:62:c9:41:aa:
                    9b:63:08:69:06:61:24:6c:93:87:ca:08:66:08:92:
                    a1:9c:a2:a2:bf:bb:3f:23:14:05:e1:fe:8b:82:f8:
                    21:98:51:b5:be:18:63:a6:fe:11:b7:80:01:27:98:
                    18:72:f4:73:91:b7:d5:e6:fa:e3:bd:d1:1d:8e:d8:
                    ad:7d:76:b6:c2:b8:35:4f:34:91:1b:b4:70:22:3f:
                    9b:4e:aa:5d:49:1d:6c:84:c3:07:d5:4c:36:01:bd:
                    78:ab:a0:6e:d6:75:5b:53:52:04:d3:e2:95:66:00:
                    70:dd:c8:81:01:65:c4:96:eb:f5:41:81:62:d2:46:
                    d2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:47:33:E5:B4:44:36:C6:5A:91:83:00:F5:4F:46:26:FB:D9:08:1A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5dc7e992-bd0b-431a-8cc3-088f2ccafc1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.159.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:48:f9:ad:43:ca:f9:2b:8d:32:b0:60:fc:51:f4:3d:d6:07:
         a6:e5:66:1a:c1:a1:65:cf:be:af:35:f6:b8:ff:a0:fc:e4:59:
         9d:f1:c4:d1:c4:5d:22:d7:4b:d0:4a:fd:8e:cf:e7:35:b1:4a:
         46:6b:5c:4c:1e:76:0f:91:b7:23:38:3b:ee:2f:7e:81:9b:d0:
         91:b2:9a:58:df:c0:2c:c8:4a:72:c4:70:43:3a:08:84:88:c4:
         58:3f:f3:7f:4d:ed:31:79:17:d0:64:7d:99:11:fe:50:76:a7:
         2c:c2:9a:a2:cb:57:52:d6:02:b4:c9:44:80:a7:9a:03:83:8e:
         5f:74:6c:12:d6:a5:87:5c:c3:f5:65:d9:d7:73:40:39:be:f1:
         8c:11:66:db:86:26:54:56:f9:91:a7:28:dd:10:dc:06:a9:3e:
         c9:58:ec:b5:4f:fd:a4:b6:db:80:5d:f4:75:6c:9a:0a:67:c0:
         dd:62:42:20:ca:23:c1:ec:19:2d:08:a5:70:c7:c6:dd:0c:74:
         43:21:94:fe:24:c3:cd:2b:7a:bc:48:47:9f:23:ad:a0:85:08:
         c7:a2:f0:b4:ee:1f:da:ab:6d:21:e4:82:eb:da:2d:e4:d5:b6:
         93:bf:47:a9:76:58:72:77:b3:d5:07:cc:6d:aa:5c:df:14:7e:
         07:81:93:6c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIURZVDHEKS0b55Qfht9pjr0YkL9rowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDU0MDEwWhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A0YjljMjEyN2U5ZDcwYjU3YjZjMDMwY2IxMzYyOGE1OWZj
ZGIwNjM0N2EwMmQ5MzFmODRkMWFjODg0YjllOGU5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCcQrGt4uH3KjUGF/GKL9ALOkdtvQKB6fF1fxKQPMGz2Q+i
016a1ATNqVh8f/uqnrLT+eMzaNuMp5I9BYtdWA0TOALkqmBorLXwByDPXURX1xWV
YNHyWiXCWWL+RWUnC+Kh28ie8GJ4PT/ALrYR2yrmI87GvaS1m+kAXSJR9HObGYNZ
YslBqptjCGkGYSRsk4fKCGYIkqGcoqK/uz8jFAXh/ouC+CGYUbW+GGOm/hG3gAEn
mBhy9HORt9Xm+uO90R2O2K19drbCuDVPNJEbtHAiP5tOql1JHWyEwwfVTDYBvXir
oG7WdVtTUgTT4pVmAHDdyIEBZcSW6/VBgWLSRtIRAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUXkcz5bRENsZakYMA9U9GJvvZCBowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzVkYzdlOTkyLWJkMGItNDMxYS04Y2MzLTA4OGYyY2NhZmMxZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsn1UwDQYJKoZIhvcNAQELBQADggEBAAFI+a1DyvkrjTKwYPxR9D3WB6bl
ZhrBoWXPvq819rj/oPzkWZ3xxNHEXSLXS9BK/Y7P5zWxSkZrXEwedg+RtyM4O+4v
foGb0JGymljfwCzISnLEcEM6CISIxFg/839N7TF5F9BkfZkR/lB2pyzCmqLLV1LW
ArTJRICnmgODjl90bBLWpYdcw/Vl2ddzQDm+8YwRZtuGJlRW+ZGnKN0Q3AapPslY
7LVP/aS224Bd9HVsmgpnwN1iQiDKI8HsGS0IpXDHxt0MdEMhlP4kw80rerxIR58j
raCFCMei8LTuH9qrbSHkguvaLeTVtpO/R6l2WHJ3s9UHzG2qXN8UfgeBk2w=
-----END CERTIFICATE-----