Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08bcb6ab-9eeb-480d-aef6-b69e67b9be1e.roa
File:                     08bcb6ab-9eeb-480d-aef6-b69e67b9be1e.roa (raw, json)
Hash identifier:          UOFwkZGQGY3+MnM0zZnj23UcICqUgNnqMPFtE9b2uNY=
Subject key identifier:   83:7D:87:44:2D:ED:BF:19:EC:99:3B:4F:ED:11:A8:FE:5B:C2:EF:A0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6DE23F443F5F4F5317AC4BA9DE6C1EC28799E4BE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08bcb6ab-9eeb-480d-aef6-b69e67b9be1e.roa
Signing time:             Mon 20 Oct 2025 04:31:06 +0000
ROA not before:           Mon 20 Oct 2025 04:31:06 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.224.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e2:3f:44:3f:5f:4f:53:17:ac:4b:a9:de:6c:1e:c2:87:99:e4:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 04:31:06 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=1b2569eda02df2389e7c6927bc60ac26075b298f6c11c20d352b2f097df7d9a7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:81:19:f5:69:6c:02:9a:d3:ff:b4:f7:27:7c:
                    a7:28:6d:4f:ff:d4:1f:97:48:35:38:5b:8a:4c:bf:
                    a4:f1:36:d0:08:7a:8e:2a:4e:81:dd:25:34:f1:8d:
                    4c:e4:12:d1:bb:59:2d:d3:c2:49:29:c0:f0:93:c1:
                    fc:db:b9:fd:4d:9a:d6:81:ef:24:42:c0:9a:27:1e:
                    47:ac:27:66:29:a5:9c:51:20:67:db:ec:8c:81:01:
                    98:77:2d:7b:7f:5f:f9:5f:fb:11:7e:5a:32:ca:fc:
                    ab:51:78:18:3f:ed:4f:c7:ca:9d:65:82:ce:ce:e5:
                    b3:67:c7:d0:41:9e:39:18:8b:0f:92:1b:d0:3c:55:
                    4f:58:47:3f:0f:35:52:3b:a8:2f:46:75:98:ed:6f:
                    94:96:b4:d2:d7:a2:84:d3:f9:b2:c4:0b:2b:e3:e0:
                    eb:dc:2d:a7:93:40:fb:d4:6d:5b:83:31:38:ba:23:
                    c5:cd:ae:59:ca:fc:8c:ba:7d:97:69:06:57:1f:bc:
                    68:0c:cb:21:cc:f2:0a:65:17:7a:07:94:b3:69:56:
                    b8:47:bc:79:7e:2a:40:b4:eb:83:1c:df:88:76:3c:
                    5e:62:1e:fd:70:b1:ce:90:11:d8:a1:74:46:19:45:
                    b9:00:ea:9a:58:c8:e4:f6:90:c0:43:12:2b:6b:1e:
                    7f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:7D:87:44:2D:ED:BF:19:EC:99:3B:4F:ED:11:A8:FE:5B:C2:EF:A0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08bcb6ab-9eeb-480d-aef6-b69e67b9be1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d7:05:29:85:6f:05:f3:b8:01:c6:89:f5:ed:06:55:01:1d:c9:
         a7:bd:79:f5:7e:20:6b:78:e6:f7:eb:21:54:de:35:4b:d9:b1:
         fd:0c:c4:32:b4:f3:d9:3f:65:f6:56:8f:07:8b:90:01:a1:3e:
         00:37:b1:97:84:48:c1:e2:49:70:7a:11:c8:16:2d:6e:7b:31:
         ef:6e:4f:3b:4e:fa:ed:2a:e7:05:47:0c:e3:96:74:ea:45:5d:
         a3:e5:93:03:9a:a2:ec:42:a3:7d:9b:db:5e:f8:4d:e7:07:c1:
         67:35:04:e3:12:30:36:4a:61:c1:07:0e:cd:09:b7:40:e4:07:
         2c:c0:38:73:bf:f3:5b:c3:be:ba:2c:a6:f0:5b:90:1b:6c:34:
         7a:a4:bc:18:c1:4d:64:64:2f:14:c6:75:50:ad:ea:d3:ec:5b:
         72:ba:6d:74:de:32:38:c3:d2:90:19:b0:68:03:1b:0f:f4:a1:
         1f:d6:4c:37:ac:51:af:47:f3:47:0e:64:81:51:18:58:7c:97:
         ef:ca:a7:97:e1:06:50:a9:e6:92:d8:90:f2:68:27:f2:44:28:
         eb:a9:df:a1:fa:b0:07:de:e6:77:dd:4b:82:ed:68:50:a2:8a:
         f6:19:1f:3a:5e:b1:a5:6f:0a:2e:d8:51:e7:b6:1b:4c:9c:6b:
         1d:23:a0:c6
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUbeI/RD9fT1MXrEup3mwewoeZ5L4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDQzMTA2WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0AxYjI1NjllZGEwMmRmMjM4OWU3YzY5MjdiYzYwYWMyNjA3
NWIyOThmNmMxMWMyMGQzNTJiMmYwOTdkZjdkOWE3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDLgRn1aWwCmtP/tPcnfKcobU//1B+XSDU4W4pMv6TxNtAI
eo4qToHdJTTxjUzkEtG7WS3TwkkpwPCTwfzbuf1NmtaB7yRCwJonHkesJ2YppZxR
IGfb7IyBAZh3LXt/X/lf+xF+WjLK/KtReBg/7U/Hyp1lgs7O5bNnx9BBnjkYiw+S
G9A8VU9YRz8PNVI7qC9GdZjtb5SWtNLXooTT+bLECyvj4OvcLaeTQPvUbVuDMTi6
I8XNrlnK/Iy6fZdpBlcfvGgMyyHM8gplF3oHlLNpVrhHvHl+KkC064Mc34h2PF5i
Hv1wsc6QEdihdEYZRbkA6ppYyOT2kMBDEitrHn/hAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUg32HRC3tvxnsmTtP7RGo/lvC76AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA4YmNiNmFiLTllZWItNDgwZC1hZWY2LWI2OWU2N2I5YmUxZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJsnuAwDQYJKoZIhvcNAQELBQADggEBANcFKYVvBfO4AcaJ9e0GVQEdyae9
efV+IGt45vfrIVTeNUvZsf0MxDK089k/ZfZWjweLkAGhPgA3sZeESMHiSXB6EcgW
LW57Me9uTztO+u0q5wVHDOOWdOpFXaPlkwOaouxCo32b2174TecHwWc1BOMSMDZK
YcEHDs0Jt0DkByzAOHO/81vDvrospvBbkBtsNHqkvBjBTWRkLxTGdVCt6tPsW3K6
bXTeMjjD0pAZsGgDGw/0oR/WTDesUa9H80cOZIFRGFh8l+/Kp5fhBlCp5pLYkPJo
J/JEKOup36H6sAfe5nfdS4LtaFCiivYZHzpesaVvCi7YUee2G0ycax0joMY=
-----END CERTIFICATE-----