Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09c7338f-c963-409a-9d1b-366422dd1daa.roa
File:                     09c7338f-c963-409a-9d1b-366422dd1daa.roa (raw, json)
Hash identifier:          +cRL2BLLAojYnpt1tRoNryTKZAvJYkakEnjmJkTJeaU=
Subject key identifier:   0C:E7:32:8E:F3:97:3F:35:CA:3C:2D:75:35:60:7E:F2:28:EF:05:83
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       077BE5785AA6F7DBDB0A04E4A6D7D0D05DC5DC19
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09c7338f-c963-409a-9d1b-366422dd1daa.roa
Signing time:             Mon 20 Oct 2025 00:00:54 +0000
ROA not before:           Mon 20 Oct 2025 00:00:54 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.156.0.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:7b:e5:78:5a:a6:f7:db:db:0a:04:e4:a6:d7:d0:d0:5d:c5:dc:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 00:00:54 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=187108516dc3e953cc400d7f23bfca553e364227db4cc9a5ae09779b5dd446d7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:66:f1:b1:10:8c:6b:7b:c4:f7:51:70:58:8b:
                    89:1b:70:f9:b4:f3:13:d5:47:fc:f9:c3:19:b2:e9:
                    d1:de:6e:36:46:dd:60:71:cb:1a:6d:f0:16:da:1e:
                    07:2a:00:69:d6:1d:3f:d7:40:6a:18:b2:dd:59:8a:
                    27:b1:84:24:8c:61:13:09:17:92:13:2e:df:eb:57:
                    db:eb:12:01:a4:8e:99:2c:76:9b:51:5f:21:37:40:
                    21:e2:c7:0e:a8:8b:74:d6:d9:8c:0e:78:03:e4:91:
                    4f:62:bd:03:9c:64:a6:e5:91:2a:b8:4c:f7:fd:f2:
                    26:24:ce:e4:0c:c2:53:1f:4c:da:a5:53:f3:58:b4:
                    bc:27:d5:79:b9:3f:e8:f3:11:29:8d:8a:0b:3c:a4:
                    9f:55:db:be:21:7c:e8:fa:cc:96:aa:46:8d:64:18:
                    fa:53:fc:db:7b:92:85:7f:91:5f:f3:f9:37:1b:ba:
                    23:8b:6d:c9:13:81:23:3b:f6:bd:fc:4e:7c:77:93:
                    68:aa:14:86:06:82:14:04:3d:f3:f9:d0:f3:77:a7:
                    a9:b6:d6:c9:6e:17:33:c5:55:1e:e2:47:02:e4:f6:
                    a2:f4:9c:5e:59:9e:08:91:16:58:e2:3c:ee:01:48:
                    3c:a8:55:af:a4:9b:a8:11:56:eb:a0:2a:be:8c:fe:
                    27:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E7:32:8E:F3:97:3F:35:CA:3C:2D:75:35:60:7E:F2:28:EF:05:83
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09c7338f-c963-409a-9d1b-366422dd1daa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:45:8c:4b:81:fc:98:77:7a:1b:37:eb:4f:7c:0d:f1:10:0a:
         79:4f:88:17:53:6b:5d:59:03:38:e5:c0:d5:ca:44:27:20:67:
         74:d2:2f:aa:0b:a5:84:dd:2a:13:a9:a2:4b:9c:29:02:9b:4f:
         66:f7:b4:c1:70:39:ba:d6:92:d9:24:7b:a5:84:b5:00:2c:d2:
         e9:cf:9d:6f:8f:8f:f6:68:79:c1:af:28:3f:51:6f:86:ad:d5:
         0f:a1:50:e7:59:a5:33:22:8d:35:e4:7c:cf:8d:8b:3c:a4:f0:
         e5:1d:3d:81:a1:85:96:7d:be:6d:1a:f1:2e:c6:64:31:09:cf:
         55:08:ea:7a:10:3e:65:ca:93:e4:fa:0f:f9:ac:ed:7e:48:c7:
         a5:f0:f2:5f:96:45:6a:d3:10:70:3a:b8:4b:39:b8:d9:07:f9:
         74:6e:00:6e:1b:d8:d4:67:9d:ab:5c:62:85:26:c8:c3:4a:45:
         60:6e:98:78:65:3f:fa:61:75:19:8b:f2:65:82:c9:9f:98:15:
         b6:55:5c:a0:1b:f4:2c:93:94:3d:56:3e:9c:18:79:f4:a3:e6:
         c7:b0:0f:d8:b1:a0:3f:07:4c:12:85:e0:9a:5a:35:23:3e:57:
         f6:1e:0f:c4:e5:e9:27:a3:e3:ae:c6:40:51:a9:93:e8:e9:c9:
         62:bf:cd:0e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUB3vleFqm99vbCgTkptfQ0F3F3BkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDAwMDU0WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0AxODcxMDg1MTZkYzNlOTUzY2M0MDBkN2YyM2JmY2E1NTNl
MzY0MjI3ZGI0Y2M5YTVhZTA5Nzc5YjVkZDQ0NmQ3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDMZvGxEIxre8T3UXBYi4kbcPm08xPVR/z5wxmy6dHebjZG
3WBxyxpt8BbaHgcqAGnWHT/XQGoYst1ZiiexhCSMYRMJF5ITLt/rV9vrEgGkjpks
dptRXyE3QCHixw6oi3TW2YwOeAPkkU9ivQOcZKblkSq4TPf98iYkzuQMwlMfTNql
U/NYtLwn1Xm5P+jzESmNigs8pJ9V274hfOj6zJaqRo1kGPpT/Nt7koV/kV/z+Tcb
uiOLbckTgSM79r38Tnx3k2iqFIYGghQEPfP50PN3p6m21sluFzPFVR7iRwLk9qL0
nF5ZngiRFljiPO4BSDyoVa+km6gRVuugKr6M/ifPAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUDOcyjvOXPzXKPC11NWB+8ijvBYMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA5YzczMzhmLWM5NjMtNDA5YS05ZDFiLTM2NjQyMmRkMWRhYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJsnAAwDQYJKoZIhvcNAQELBQADggEBACdFjEuB/Jh3ehs36098DfEQCnlP
iBdTa11ZAzjlwNXKRCcgZ3TSL6oLpYTdKhOpokucKQKbT2b3tMFwObrWktkke6WE
tQAs0unPnW+Pj/ZoecGvKD9Rb4at1Q+hUOdZpTMijTXkfM+Nizyk8OUdPYGhhZZ9
vm0a8S7GZDEJz1UI6noQPmXKk+T6D/ms7X5Ix6Xw8l+WRWrTEHA6uEs5uNkH+XRu
AG4b2NRnnatcYoUmyMNKRWBumHhlP/phdRmL8mWCyZ+YFbZVXKAb9CyTlD1WPpwY
efSj5sewD9ixoD8HTBKF4JpaNSM+V/YeD8Tl6Sej467GQFGpk+jpyWK/zQ4=
-----END CERTIFICATE-----