Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4cf55645-5d3d-47d7-a10c-aee4139a63ed.roa
File:                     4cf55645-5d3d-47d7-a10c-aee4139a63ed.roa (raw, json)
Hash identifier:          4RvxUs/z4kYJgKIC4A0gi7d0TJXg7XaSAVDgGWzouuo=
Subject key identifier:   CE:21:C4:24:8A:81:4B:5B:8F:EA:23:89:15:42:97:90:09:29:7F:42
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0BA53C64E01EB12D16C35C99C188A269814B7B29
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4cf55645-5d3d-47d7-a10c-aee4139a63ed.roa
Signing time:             Sun 19 Oct 2025 00:20:45 +0000
ROA not before:           Sun 19 Oct 2025 00:20:45 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.139.154.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a5:3c:64:e0:1e:b1:2d:16:c3:5c:99:c1:88:a2:69:81:4b:7b:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 00:20:45 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=5988e89ec19fa440409668f1c6c548368d68e06dca1530e64fda90dc023af3cf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:12:1e:9b:bc:62:dd:2d:45:2c:a6:6a:8d:f6:
                    1e:a2:92:b1:cc:40:8e:0b:e9:bc:76:9c:95:9e:82:
                    a1:d9:12:84:b7:34:3c:96:cd:9e:ad:59:91:76:a4:
                    a2:15:7c:3a:f6:f8:66:3d:59:67:a9:c7:a6:fe:15:
                    5d:f0:e1:8f:c8:2c:f5:13:3b:94:f6:72:14:1a:ca:
                    a8:16:02:d5:78:3d:3e:2a:db:a1:ce:30:6d:29:7a:
                    b0:10:52:b9:a6:d0:b4:a0:f1:2f:67:3e:40:8f:06:
                    e8:74:76:7c:5b:7f:3b:38:a7:15:d6:43:8e:94:d4:
                    92:17:f6:c1:4c:48:44:84:f2:c1:d5:cc:7f:fc:f4:
                    fc:ec:98:2e:cd:05:1e:46:35:65:a3:76:76:f4:a1:
                    df:ad:2f:21:5c:44:66:77:27:c8:58:0d:9a:ef:be:
                    5a:59:78:ff:8d:82:18:c4:95:aa:6c:0d:ea:71:0f:
                    9c:38:e1:71:60:2d:a6:00:6e:21:a6:cf:cb:00:c3:
                    31:38:fc:cd:e9:86:50:9e:44:47:2e:dd:9b:b1:70:
                    cb:08:7a:1b:23:ba:d6:f4:ef:fc:f6:c6:00:b3:e7:
                    ff:02:fd:31:c7:97:20:49:6b:34:d0:95:0a:1f:ea:
                    a9:e4:02:e8:04:cc:17:08:09:5c:d6:4d:b5:6e:b3:
                    0d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:21:C4:24:8A:81:4B:5B:8F:EA:23:89:15:42:97:90:09:29:7F:42
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4cf55645-5d3d-47d7-a10c-aee4139a63ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.139.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:a6:1c:53:40:47:cd:60:c9:a8:fb:42:87:7e:d2:6b:cd:17:
         e4:0a:3c:91:c7:b2:2a:cf:05:fd:24:3c:78:6f:f6:4a:36:63:
         44:2c:e4:07:34:29:27:46:4b:18:1a:95:2c:44:2d:7b:ac:46:
         e6:e5:2d:76:b9:37:43:b2:8a:26:07:98:a8:24:cd:c4:04:93:
         80:70:6d:9a:30:2f:5b:e5:2e:12:3d:b5:65:ca:af:e1:6b:3d:
         e6:b7:c7:dc:1a:9d:7d:eb:07:9c:b6:e5:f7:43:65:9a:80:68:
         ff:03:04:88:b2:34:7d:1e:9c:cb:d6:3e:f9:93:a3:e1:65:61:
         95:74:bc:a3:d5:5d:3c:10:01:d8:c5:cd:c9:ed:7b:8d:0a:fe:
         b9:af:d0:92:7a:a2:11:bb:a7:8e:cc:93:be:58:bb:b1:53:9d:
         dd:3c:8d:06:03:ce:af:bc:0f:23:07:42:bb:c3:4d:e0:0f:06:
         2f:1c:e9:35:10:2f:5f:23:30:8f:03:fe:9e:c4:49:42:43:b6:
         fc:ed:71:f8:ab:31:c3:b4:33:a4:49:81:52:f4:52:d5:10:de:
         42:9e:f8:21:62:6d:01:7e:8c:e3:4d:14:af:02:0d:0a:5f:63:
         19:ae:ee:73:5c:c1:6b:6b:97:ae:70:22:e3:7d:cc:46:a8:42:
         60:f4:93:fc
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUC6U8ZOAesS0Ww1yZwYiiaYFLeykwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDAyMDQ1WhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0A1OTg4ZTg5ZWMxOWZhNDQwNDA5NjY4ZjFjNmM1NDgzNjhk
NjhlMDZkY2ExNTMwZTY0ZmRhOTBkYzAyM2FmM2NmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8Eh6bvGLdLUUspmqN9h6ikrHMQI4L6bx2nJWegqHZEoS3
NDyWzZ6tWZF2pKIVfDr2+GY9WWepx6b+FV3w4Y/ILPUTO5T2chQayqgWAtV4PT4q
26HOMG0perAQUrmm0LSg8S9nPkCPBuh0dnxbfzs4pxXWQ46U1JIX9sFMSESE8sHV
zH/89PzsmC7NBR5GNWWjdnb0od+tLyFcRGZ3J8hYDZrvvlpZeP+NghjElapsDepx
D5w44XFgLaYAbiGmz8sAwzE4/M3phlCeREcu3ZuxcMsIehsjutb07/z2xgCz5/8C
/THHlyBJazTQlQof6qnkAugEzBcICVzWTbVusw1pAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUziHEJIqBS1uP6iOJFUKXkAkpf0IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzRjZjU1NjQ1LTVkM2QtNDdkNy1hMTBjLWFlZTQxMzlhNjNlZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFsi5owDQYJKoZIhvcNAQELBQADggEBADymHFNAR81gyaj7Qod+0mvNF+QK
PJHHsirPBf0kPHhv9ko2Y0Qs5Ac0KSdGSxgalSxELXusRublLXa5N0OyiiYHmKgk
zcQEk4BwbZowL1vlLhI9tWXKr+FrPea3x9wanX3rB5y25fdDZZqAaP8DBIiyNH0e
nMvWPvmTo+FlYZV0vKPVXTwQAdjFzcnte40K/rmv0JJ6ohG7p47Mk75Yu7FTnd08
jQYDzq+8DyMHQrvDTeAPBi8c6TUQL18jMI8D/p7ESUJDtvztcfirMcO0M6RJgVL0
UtUQ3kKe+CFibQF+jONNFK8CDQpfYxmu7nNcwWtrl65wIuN9zEaoQmD0k/w=
-----END CERTIFICATE-----