Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04145624-61d7-4de9-83d3-53ef70556bc2.roa
File:                     04145624-61d7-4de9-83d3-53ef70556bc2.roa (raw, json)
Hash identifier:          s2x9NlUSb/JuoF9XxXF44RMfgo3BqeFiuElZziQPBFY=
Subject key identifier:   36:09:6C:7D:CE:02:47:7E:EB:DB:29:37:7A:6F:2E:FD:5F:7B:CF:B2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6B6BF7BF6EEF2605B3AFB4A7633F9BF477F8F31A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04145624-61d7-4de9-83d3-53ef70556bc2.roa
Signing time:             Sun 19 Oct 2025 03:10:56 +0000
ROA not before:           Sun 19 Oct 2025 03:10:56 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.236.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:6b:f7:bf:6e:ef:26:05:b3:af:b4:a7:63:3f:9b:f4:77:f8:f3:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 03:10:56 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=cc2cde4fedccdc8a7533dd4396ddd899c0323a28e8e1e6a9e39867afd563de49, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e3:5f:08:de:56:07:68:a0:d5:64:f9:ab:1e:
                    2d:67:56:ab:f0:d0:71:96:7d:6c:0a:25:1d:b4:9c:
                    92:f1:63:ad:96:d9:de:93:9b:53:00:62:51:89:10:
                    fe:56:e8:5d:f8:83:aa:e1:75:71:80:06:7e:ab:35:
                    6e:d3:12:7c:3e:a0:07:52:7f:43:6f:ed:8f:2d:ab:
                    21:67:78:28:69:29:35:bc:88:32:f3:ae:fa:43:4f:
                    04:39:bf:24:56:a8:3e:4d:00:25:b1:db:ee:e9:30:
                    38:25:e9:16:0d:ca:ca:f8:cf:25:18:1d:51:73:d6:
                    7f:79:be:72:1e:11:01:de:e9:3e:ac:50:ca:7c:cc:
                    99:01:5a:d6:cd:80:25:b8:8f:f9:6e:85:1e:cd:b3:
                    bc:4b:c3:90:6e:5a:b1:a3:58:00:b8:85:6a:2a:f0:
                    b3:9f:b7:99:c5:d8:5c:eb:cf:15:af:c0:bb:1e:de:
                    df:40:65:36:16:a3:10:9b:eb:e1:1a:8a:9d:c2:a8:
                    35:b6:32:44:cb:bb:5c:7e:d4:73:5e:b3:5c:61:60:
                    c6:33:46:16:97:eb:17:8c:63:0b:7b:c4:39:0d:90:
                    c7:6b:22:ad:ef:1f:65:ef:b9:39:94:40:97:c0:33:
                    5e:10:0a:9b:d3:43:12:bf:84:31:83:c8:17:d3:f5:
                    9f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:09:6C:7D:CE:02:47:7E:EB:DB:29:37:7A:6F:2E:FD:5F:7B:CF:B2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04145624-61d7-4de9-83d3-53ef70556bc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:16:1a:d6:24:5e:62:61:ab:02:1c:fa:23:d8:9e:fb:09:29:
         de:1d:32:d7:48:e8:1c:c3:6a:46:ba:cf:c6:08:fc:5a:94:8f:
         c2:ff:60:09:76:58:a9:0f:ec:8f:a2:16:6c:09:19:1b:52:00:
         f3:7e:3d:14:13:6d:71:89:bb:ef:cc:cd:d3:ef:d5:80:4c:1f:
         50:4d:0c:66:7e:06:cb:d2:00:a1:14:9d:3a:24:6a:38:4e:8d:
         da:fb:69:9a:c7:91:aa:88:31:d3:b0:a3:75:2f:fb:0f:d6:46:
         cc:e5:15:6d:2c:8d:7d:3b:5b:0e:79:b7:6d:6a:45:d8:a6:67:
         79:1b:8e:a7:c1:a2:a5:4e:0b:31:24:8d:63:a7:ec:5c:cb:0b:
         c9:98:3a:e3:47:7c:1f:f0:95:9d:86:77:a3:6b:4f:dd:dd:ec:
         27:0d:f5:f5:bb:81:13:59:8d:60:3e:4e:75:1d:46:a5:e8:32:
         03:a6:f9:43:96:5b:a5:fc:fa:bd:7c:bc:da:29:c2:b5:48:1a:
         a2:92:66:56:f0:d2:7b:52:e2:7a:9f:1a:7f:de:4c:72:18:b2:
         5f:c0:ec:a0:c4:a3:6d:80:40:70:16:d2:9c:bc:81:46:8e:8a:
         e8:ce:ad:38:8c:58:c8:3d:97:76:f8:42:b9:60:bd:1d:c7:14:
         b5:26:93:50
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUa2v3v27vJgWzr7SnYz+b9Hf48xowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDMxMDU2WhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BjYzJjZGU0ZmVkY2NkYzhhNzUzM2RkNDM5NmRkZDg5OWMw
MzIzYTI4ZThlMWU2YTllMzk4NjdhZmQ1NjNkZTQ5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCK418I3lYHaKDVZPmrHi1nVqvw0HGWfWwKJR20nJLxY62W
2d6Tm1MAYlGJEP5W6F34g6rhdXGABn6rNW7TEnw+oAdSf0Nv7Y8tqyFneChpKTW8
iDLzrvpDTwQ5vyRWqD5NACWx2+7pMDgl6RYNysr4zyUYHVFz1n95vnIeEQHe6T6s
UMp8zJkBWtbNgCW4j/luhR7Ns7xLw5BuWrGjWAC4hWoq8LOft5nF2FzrzxWvwLse
3t9AZTYWoxCb6+Eaip3CqDW2MkTLu1x+1HNes1xhYMYzRhaX6xeMYwt7xDkNkMdr
Iq3vH2XvuTmUQJfAM14QCpvTQxK/hDGDyBfT9Z89AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUNglsfc4CR37r2yk3em8u/V97z7IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA0MTQ1NjI0LTYxZDctNGRlOS04M2QzLTUzZWY3MDU1NmJjMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsiuwwDQYJKoZIhvcNAQELBQADggEBAA4WGtYkXmJhqwIc+iPYnvsJKd4d
MtdI6BzDaka6z8YI/FqUj8L/YAl2WKkP7I+iFmwJGRtSAPN+PRQTbXGJu+/MzdPv
1YBMH1BNDGZ+BsvSAKEUnTokajhOjdr7aZrHkaqIMdOwo3Uv+w/WRszlFW0sjX07
Ww55t21qRdimZ3kbjqfBoqVOCzEkjWOn7FzLC8mYOuNHfB/wlZ2Gd6NrT93d7CcN
9fW7gRNZjWA+TnUdRqXoMgOm+UOWW6X8+r18vNopwrVIGqKSZlbw0ntS4nqfGn/e
THIYsl/A7KDEo22AQHAW0py8gUaOiujOrTiMWMg9l3b4QrlgvR3HFLUmk1A=
-----END CERTIFICATE-----