Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f66d786-b4c1-484b-b0fd-97b0190dd4ce.roa
File:                     1f66d786-b4c1-484b-b0fd-97b0190dd4ce.roa (raw, json)
Hash identifier:          UwtmIjeqOOqqR5Qo+uiHQMmUSh3DkOd6mLANkJxa6Dc=
Subject key identifier:   E5:F8:64:F3:FA:15:21:A6:31:86:5E:01:37:46:49:C8:94:9F:7F:B0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1E060388F60B075AA00C8BDB425DF6964F9925A7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f66d786-b4c1-484b-b0fd-97b0190dd4ce.roa
Signing time:             Mon 20 Oct 2025 00:10:35 +0000
ROA not before:           Mon 20 Oct 2025 00:10:35 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.156.212.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:06:03:88:f6:0b:07:5a:a0:0c:8b:db:42:5d:f6:96:4f:99:25:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 00:10:35 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=8dfc4fc54c4ad674af58aabd5a7338caf862d245d946372556fa4667a73ddf28, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3b:11:ed:c7:bb:59:38:5e:7c:fa:9c:8b:6b:
                    c8:5c:89:3b:65:9c:74:e2:fa:34:23:22:c9:00:83:
                    8b:2f:a1:4e:e3:ac:51:c7:5d:eb:cf:d5:14:98:e4:
                    67:40:75:b1:46:c4:54:7d:3a:70:ac:59:20:87:d7:
                    c3:95:15:b1:50:a1:fa:90:33:56:b2:b7:f5:10:3f:
                    61:6a:06:32:f0:59:ce:1a:82:f4:52:83:60:d5:93:
                    57:7c:25:93:f4:88:c7:f0:ad:15:e8:21:c7:a0:ba:
                    d1:6e:00:f3:5a:5d:c9:cd:48:ff:7d:01:9b:e2:84:
                    7c:36:e1:cb:3a:39:bf:42:88:27:57:0d:21:ce:17:
                    27:9c:47:94:d1:0a:e3:04:d9:fb:64:26:2f:fd:3a:
                    40:34:58:49:b1:c5:a7:a4:36:4d:97:3f:a5:ca:da:
                    e8:50:41:79:4a:b9:7d:d0:fb:6c:a2:c1:5d:b1:fa:
                    75:f1:f4:60:07:23:7e:31:ab:e4:07:19:be:eb:bd:
                    3a:1b:68:d3:f9:eb:29:a9:3c:31:1f:b7:54:24:66:
                    64:f5:cf:a3:e5:a3:b8:c6:a9:2c:3f:50:34:a9:31:
                    18:5f:73:62:8d:f0:3e:05:c3:f9:e1:9e:13:58:e4:
                    53:be:46:ac:19:f6:a4:fe:98:a7:26:f3:3f:cc:f9:
                    70:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F8:64:F3:FA:15:21:A6:31:86:5E:01:37:46:49:C8:94:9F:7F:B0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f66d786-b4c1-484b-b0fd-97b0190dd4ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:94:66:46:e0:f4:b7:91:e5:97:fe:67:51:9a:3e:ea:d9:4a:
         bc:48:f1:f4:17:40:b7:11:a5:53:4f:12:5e:08:f0:3d:9d:45:
         65:49:fe:b8:5b:0f:bf:9d:15:84:be:e8:a6:ff:29:9d:c8:8d:
         fc:6f:05:81:99:a3:7f:74:eb:66:69:87:b6:d5:13:c4:71:f2:
         21:7b:a7:b3:ac:02:e0:33:d9:36:6b:25:d6:ec:16:be:00:52:
         b0:a0:77:67:92:f8:ee:eb:2e:8b:f2:56:97:f8:0e:bf:ee:64:
         5f:e5:26:f3:b1:31:50:0a:e0:10:e8:39:bc:d8:5f:93:f1:67:
         b2:7b:4d:4b:0e:90:49:62:91:e2:b2:51:6d:cb:7d:df:a0:60:
         1c:53:39:ae:1a:6a:b0:bf:22:68:28:e2:f9:44:cf:dd:ad:3f:
         bf:7a:ec:c8:04:b8:88:1b:7b:4c:cd:56:fc:5a:2d:b5:48:29:
         d2:5d:1c:05:c4:12:ab:63:e6:86:70:ca:fa:c7:a0:f1:76:03:
         34:79:bb:29:b7:e1:54:27:22:c2:67:68:e0:cf:bb:3f:1d:17:
         cf:a6:d5:cd:ab:47:00:ec:b2:55:68:54:ee:bb:f9:30:24:19:
         3c:ca:e8:14:4c:77:ab:b4:3e:b3:80:3b:a4:53:d4:94:f7:41:
         40:89:19:75
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUHgYDiPYLB1qgDIvbQl32lk+ZJacwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDAxMDM1WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A4ZGZjNGZjNTRjNGFkNjc0YWY1OGFhYmQ1YTczMzhjYWY4
NjJkMjQ1ZDk0NjM3MjU1NmZhNDY2N2E3M2RkZjI4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCVOxHtx7tZOF58+pyLa8hciTtlnHTi+jQjIskAg4svoU7j
rFHHXevP1RSY5GdAdbFGxFR9OnCsWSCH18OVFbFQofqQM1ayt/UQP2FqBjLwWc4a
gvRSg2DVk1d8JZP0iMfwrRXoIcegutFuAPNaXcnNSP99AZvihHw24cs6Ob9CiCdX
DSHOFyecR5TRCuME2ftkJi/9OkA0WEmxxaekNk2XP6XK2uhQQXlKuX3Q+2yiwV2x
+nXx9GAHI34xq+QHGb7rvTobaNP56ympPDEft1QkZmT1z6Plo7jGqSw/UDSpMRhf
c2KN8D4Fw/nhnhNY5FO+RqwZ9qT+mKcm8z/M+XA7AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU5fhk8/oVIaYxhl4BN0ZJyJSff7AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzFmNjZkNzg2LWI0YzEtNDg0Yi1iMGZkLTk3YjAxOTBkZDRjZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJsnNQwDQYJKoZIhvcNAQELBQADggEBAByUZkbg9LeR5Zf+Z1GaPurZSrxI
8fQXQLcRpVNPEl4I8D2dRWVJ/rhbD7+dFYS+6Kb/KZ3IjfxvBYGZo39062Zph7bV
E8Rx8iF7p7OsAuAz2TZrJdbsFr4AUrCgd2eS+O7rLovyVpf4Dr/uZF/lJvOxMVAK
4BDoObzYX5PxZ7J7TUsOkElikeKyUW3Lfd+gYBxTOa4aarC/Imgo4vlEz92tP796
7MgEuIgbe0zNVvxaLbVIKdJdHAXEEqtj5oZwyvrHoPF2AzR5uym34VQnIsJnaODP
uz8dF8+m1c2rRwDsslVoVO67+TAkGTzK6BRMd6u0PrOAO6RT1JT3QUCJGXU=
-----END CERTIFICATE-----