Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b924111-71a9-4f53-a9d9-c401c20d4647.roa
File:                     5b924111-71a9-4f53-a9d9-c401c20d4647.roa (raw, json)
Hash identifier:          aOZ09VMoGy2t3raHQWbDA1l6fle7Hu+6TPJZ/AQAU+w=
Subject key identifier:   AF:82:D4:23:DE:DC:47:86:A1:8D:1B:F7:2C:45:9B:98:0F:81:BF:4B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       638C1E61E4542614FFA17E7FF3E25BCC6A25BA81
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b924111-71a9-4f53-a9d9-c401c20d4647.roa
Signing time:             Mon 20 Oct 2025 06:11:26 +0000
ROA not before:           Mon 20 Oct 2025 06:11:26 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.157.156.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:8c:1e:61:e4:54:26:14:ff:a1:7e:7f:f3:e2:5b:cc:6a:25:ba:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 06:11:26 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=a49f8e3a0e5ba4f56f766423a6c7b7ed5934135d198f05f5385f68fb202494d2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:74:5d:74:1e:0e:e3:6a:97:f8:80:45:ec:53:
                    4c:b2:74:9f:82:c9:08:34:a5:2d:b0:d9:80:32:57:
                    55:4a:86:07:af:71:e6:e1:98:00:d1:d4:7a:9a:a9:
                    e9:a8:a4:e1:55:f8:46:cb:15:4c:d4:9b:91:65:8f:
                    82:5a:9e:14:14:48:1d:c1:51:48:28:57:b3:d6:8e:
                    5f:1b:a0:24:05:d3:39:e9:ad:33:e5:43:a1:c7:ad:
                    e8:61:ff:10:b3:7e:8c:18:43:96:2a:76:e4:ed:a3:
                    08:7e:ed:f8:6b:fb:3e:f7:a1:a0:eb:bb:54:2c:04:
                    cc:34:87:46:52:3f:45:93:68:27:01:15:b4:45:ac:
                    29:4a:72:f1:61:26:fd:3d:1d:c5:b9:f5:4c:39:55:
                    0a:d3:a7:e1:66:70:8a:ed:b1:53:41:52:f5:d0:30:
                    f1:e0:f1:03:a4:2d:f0:73:a6:b2:b9:27:a3:a6:51:
                    e1:cc:1e:b8:a2:58:f3:cf:fb:64:28:ab:2e:5d:4f:
                    de:05:cd:01:5c:65:4b:c4:80:89:7e:39:a0:5a:13:
                    cc:17:ea:eb:37:fc:68:14:b9:69:c7:2e:cc:7f:c3:
                    c9:a6:48:45:49:92:8f:03:6e:f2:6c:84:c3:d8:c2:
                    d7:b8:23:4d:c1:76:11:2c:a0:01:e5:3b:9b:ee:bd:
                    56:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:82:D4:23:DE:DC:47:86:A1:8D:1B:F7:2C:45:9B:98:0F:81:BF:4B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b924111-71a9-4f53-a9d9-c401c20d4647.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.157.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:b8:b1:24:b0:59:79:f0:88:c2:66:5b:55:ac:04:49:6d:4e:
         0c:44:15:18:4d:08:81:d8:43:57:07:eb:dc:16:56:0a:b8:af:
         2e:e4:57:42:67:79:f7:24:d0:b3:46:4d:3a:d2:f7:58:4a:10:
         4a:1d:a4:87:22:56:4b:92:30:ef:8e:87:e5:ee:3f:40:4c:8d:
         47:30:65:97:64:e4:15:ca:19:e8:aa:e0:51:1b:f3:a8:cb:eb:
         7c:4b:5f:d1:b8:cd:5c:f2:5e:50:43:af:e5:0e:a2:25:3e:2e:
         b4:f0:dd:d5:ba:8a:0d:f4:4d:08:77:d4:31:63:0b:cf:dc:78:
         3b:9a:f4:80:af:04:f5:94:b1:64:ac:2c:65:24:5b:10:00:25:
         62:ff:97:f6:68:3e:70:a0:bc:c3:ab:3b:f3:18:d2:24:6b:a9:
         61:b3:40:7a:af:73:f6:e1:92:09:b3:47:70:d1:f0:d3:9b:ce:
         80:01:92:5c:91:03:67:f7:27:ce:6b:ed:ad:77:ff:5e:83:6f:
         7b:e7:26:59:4a:82:9d:27:1c:55:00:36:6d:b1:d5:cc:e0:3f:
         9a:27:b3:7b:1e:6f:01:fe:35:5e:57:18:c3:61:e3:69:8a:0b:
         58:8e:e8:09:7a:26:26:b9:c5:28:ad:b6:40:fb:25:ca:f5:a0:
         11:76:0c:c9
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUY4weYeRUJhT/oX5/8+JbzGoluoEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDYxMTI2WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BhNDlmOGUzYTBlNWJhNGY1NmY3NjY0MjNhNmM3YjdlZDU5
MzQxMzVkMTk4ZjA1ZjUzODVmNjhmYjIwMjQ5NGQyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDMdF10Hg7japf4gEXsU0yydJ+CyQg0pS2w2YAyV1VKhgev
cebhmADR1HqaqemopOFV+EbLFUzUm5Flj4JanhQUSB3BUUgoV7PWjl8boCQF0znp
rTPlQ6HHrehh/xCzfowYQ5YqduTtowh+7fhr+z73oaDru1QsBMw0h0ZSP0WTaCcB
FbRFrClKcvFhJv09HcW59Uw5VQrTp+FmcIrtsVNBUvXQMPHg8QOkLfBzprK5J6Om
UeHMHriiWPPP+2Qoqy5dT94FzQFcZUvEgIl+OaBaE8wX6us3/GgUuWnHLsx/w8mm
SEVJko8DbvJshMPYwte4I03BdhEsoAHlO5vuvVaTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUr4LUI97cR4ahjRv3LEWbmA+Bv0swHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzViOTI0MTExLTcxYTktNGY1My1hOWQ5LWM0MDFjMjBkNDY0Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFsnZwwDQYJKoZIhvcNAQELBQADggEBAIG4sSSwWXnwiMJmW1WsBEltTgxE
FRhNCIHYQ1cH69wWVgq4ry7kV0Jnefck0LNGTTrS91hKEEodpIciVkuSMO+Oh+Xu
P0BMjUcwZZdk5BXKGeiq4FEb86jL63xLX9G4zVzyXlBDr+UOoiU+LrTw3dW6ig30
TQh31DFjC8/ceDua9ICvBPWUsWSsLGUkWxAAJWL/l/ZoPnCgvMOrO/MY0iRrqWGz
QHqvc/bhkgmzR3DR8NObzoABklyRA2f3J85r7a13/16Db3vnJllKgp0nHFUANm2x
1czgP5ons3sebwH+NV5XGMNh42mKC1iO6Al6Jia5xSittkD7Jcr1oBF2DMk=
-----END CERTIFICATE-----