Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5807671d-1b8f-4d66-a91c-fee2fe8ebb07.roa
File:                     5807671d-1b8f-4d66-a91c-fee2fe8ebb07.roa (raw, json)
Hash identifier:          fn2Ru5df4Y+uwauovdr4Mf6YEBx6wdKywCeS7ugU+RI=
Subject key identifier:   F7:25:E5:BB:A1:EC:FC:03:5B:09:FC:16:88:A3:F2:DB:A0:73:CC:41
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       368078D53407F9F1AA3A0B26A1C9B0E4E81CC038
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5807671d-1b8f-4d66-a91c-fee2fe8ebb07.roa
Signing time:             Mon 20 Oct 2025 01:42:07 +0000
ROA not before:           Mon 20 Oct 2025 01:42:07 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.157.128.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:80:78:d5:34:07:f9:f1:aa:3a:0b:26:a1:c9:b0:e4:e8:1c:c0:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 01:42:07 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=c185bc5afb387a5c2e31bebf956a80e75de2f6052937d3f4eea992d3c9d8c6a1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:95:7f:4c:87:80:9a:14:7c:70:e6:b2:99:c6:
                    39:90:7c:f2:9e:e1:f7:4b:1d:c2:01:0b:b4:82:64:
                    7a:a5:f7:57:a7:b4:61:e6:7e:aa:3a:66:6d:37:5c:
                    32:67:5a:4c:0a:99:52:d0:76:e4:3f:d2:85:80:f9:
                    24:c8:0b:ad:59:d7:3f:76:47:e5:6a:dc:ae:ea:de:
                    1e:56:36:a3:e8:0b:a6:2f:1f:20:c0:35:01:a2:73:
                    9d:08:a6:c0:93:89:73:b1:27:44:f7:e8:30:79:18:
                    59:fa:34:47:c4:64:8a:1b:a8:c4:7d:4e:85:43:82:
                    42:56:b2:98:91:47:4c:f8:e0:b5:4d:00:18:d4:31:
                    b8:da:74:4e:54:95:46:4c:2d:02:d3:05:de:3f:53:
                    9d:4e:f1:f6:af:4b:20:97:2e:dc:41:a6:82:b9:47:
                    49:37:ee:9a:9e:d0:b6:c7:51:b3:84:7b:c0:a7:a0:
                    c7:0f:01:b6:af:db:64:b2:96:50:33:d5:79:db:e4:
                    e1:8f:17:57:f3:ae:74:d1:97:cb:74:b9:f7:98:17:
                    b7:5e:5e:bf:b1:75:bd:36:25:69:ce:0f:1c:11:63:
                    54:4a:db:15:3b:fe:36:c5:a4:bf:c8:e6:c7:bd:7a:
                    83:02:76:82:da:28:30:3e:fa:5b:9f:fe:ef:84:2d:
                    52:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:25:E5:BB:A1:EC:FC:03:5B:09:FC:16:88:A3:F2:DB:A0:73:CC:41
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5807671d-1b8f-4d66-a91c-fee2fe8ebb07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.157.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:41:7b:46:0c:03:24:70:d0:9c:25:1b:75:17:f3:28:cc:e1:
         c8:0b:e9:49:f2:9c:16:c6:59:67:5b:ed:87:36:49:6c:99:89:
         37:da:4c:3e:44:f5:f9:8e:02:33:95:6d:b6:7c:bf:cd:71:a9:
         34:d6:c8:a9:87:84:44:8d:8e:41:c1:bb:86:53:5a:bd:1f:3f:
         6d:83:ba:6c:91:a3:4e:45:1e:c3:8c:86:6f:33:63:1e:b4:ea:
         2a:5b:d0:bd:e2:4e:9a:8b:55:2d:2c:09:00:d7:69:f7:dd:b0:
         ac:9b:ea:e8:fd:a7:5f:e3:1b:92:0f:34:06:36:53:5c:02:00:
         a0:6b:e8:97:64:b0:ca:58:f5:50:18:a6:36:ac:4d:b6:ed:e9:
         0c:c1:03:25:b3:62:45:f5:12:8a:cc:a8:fc:47:2f:f9:e4:9f:
         ab:dc:e3:51:c7:d8:d4:19:31:5f:ba:e2:d5:5e:92:e4:06:a0:
         7d:72:68:69:d2:26:42:79:9f:78:43:7d:a1:5c:98:69:1e:20:
         66:e7:89:cc:ca:82:49:a6:a5:13:f3:0a:aa:a4:c4:68:c5:22:
         50:e2:af:fc:b2:a5:9b:75:65:20:0b:06:9b:4e:d7:b9:49:6c:
         d2:1e:54:ea:a3:64:a1:f6:8e:8d:b7:78:95:8a:0c:73:d5:12:
         24:2a:3b:44
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUNoB41TQH+fGqOgsmocmw5OgcwDgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDE0MjA3WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BjMTg1YmM1YWZiMzg3YTVjMmUzMWJlYmY5NTZhODBlNzVk
ZTJmNjA1MjkzN2QzZjRlZWE5OTJkM2M5ZDhjNmExMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDHlX9Mh4CaFHxw5rKZxjmQfPKe4fdLHcIBC7SCZHql91en
tGHmfqo6Zm03XDJnWkwKmVLQduQ/0oWA+STIC61Z1z92R+Vq3K7q3h5WNqPoC6Yv
HyDANQGic50IpsCTiXOxJ0T36DB5GFn6NEfEZIobqMR9ToVDgkJWspiRR0z44LVN
ABjUMbjadE5UlUZMLQLTBd4/U51O8favSyCXLtxBpoK5R0k37pqe0LbHUbOEe8Cn
oMcPAbav22SyllAz1Xnb5OGPF1fzrnTRl8t0ufeYF7deXr+xdb02JWnODxwRY1RK
2xU7/jbFpL/I5se9eoMCdoLaKDA++luf/u+ELVKDAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU9yXlu6Hs/ANbCfwWiKPy26BzzEEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzU4MDc2NzFkLTFiOGYtNGQ2Ni1hOTFjLWZlZTJmZThlYmIwNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJsnYAwDQYJKoZIhvcNAQELBQADggEBAHpBe0YMAyRw0JwlG3UX8yjM4cgL
6UnynBbGWWdb7Yc2SWyZiTfaTD5E9fmOAjOVbbZ8v81xqTTWyKmHhESNjkHBu4ZT
Wr0fP22DumyRo05FHsOMhm8zYx606ipb0L3iTpqLVS0sCQDXaffdsKyb6uj9p1/j
G5IPNAY2U1wCAKBr6JdksMpY9VAYpjasTbbt6QzBAyWzYkX1EorMqPxHL/nkn6vc
41HH2NQZMV+64tVekuQGoH1yaGnSJkJ5n3hDfaFcmGkeIGbniczKgkmmpRPzCqqk
xGjFIlDir/yypZt1ZSALBptO17lJbNIeVOqjZKH2jo23eJWKDHPVEiQqO0Q=
-----END CERTIFICATE-----