Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f29e7bd-6047-4f4c-b4b1-1f41b303f71e.roa
File:                     5f29e7bd-6047-4f4c-b4b1-1f41b303f71e.roa (raw, json)
Hash identifier:          XFygMsLO+h7q2gI7gldKYmSjUIn2Vhvo+BJm5Ve/B9I=
Subject key identifier:   47:F1:14:31:5E:AD:3D:BA:1E:B8:FB:5D:20:DB:E8:67:D2:28:73:91
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1F78AEE5DB8FC1DA64C091A750EE1CF0FDE887F2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f29e7bd-6047-4f4c-b4b1-1f41b303f71e.roa
Signing time:             Mon 20 Oct 2025 01:41:34 +0000
ROA not before:           Mon 20 Oct 2025 01:41:34 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.157.48.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:78:ae:e5:db:8f:c1:da:64:c0:91:a7:50:ee:1c:f0:fd:e8:87:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 01:41:34 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=8e0851d6000dcddd8aa90dd8c40916bcf07e7461d34c8d7634fd21c89d512ebc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:08:ee:ff:a8:e7:85:90:00:cf:4f:42:c9:8d:
                    46:9f:7d:6c:cb:5e:30:67:5e:2a:1f:8c:43:db:30:
                    51:41:3b:ea:4d:49:5d:9f:81:de:38:7c:d3:f5:1c:
                    cb:c0:bc:2d:94:4f:f2:c7:1b:4d:b5:4f:d8:f0:ae:
                    cb:81:26:a3:f0:7a:d8:f2:74:e3:05:9d:d3:15:20:
                    47:cb:2c:5d:42:93:49:0b:1a:a5:16:cc:fe:1d:b9:
                    c4:d1:75:83:b1:a9:4a:35:74:72:e5:0d:09:11:3c:
                    9b:d8:5c:c8:8d:18:51:04:d2:95:74:5f:29:8f:7b:
                    9f:4a:92:ea:1a:d8:bc:f5:fc:74:e1:45:70:4f:3d:
                    d7:d1:11:21:13:e7:45:35:c1:87:80:a8:4a:55:2d:
                    44:4a:18:77:ad:b7:08:4b:2e:d0:2a:9b:09:6e:29:
                    b4:a2:ce:e2:91:f4:a7:54:ca:32:02:b3:8f:24:7a:
                    60:3d:9e:2b:c6:b2:8e:3f:22:70:1b:f4:31:8f:36:
                    63:b4:19:a3:5c:55:96:ae:42:2c:b1:d9:64:06:43:
                    cb:30:13:bf:15:11:70:ee:7c:12:ab:a2:88:b1:0e:
                    28:2a:f7:b5:91:2e:b5:61:a3:1f:64:59:d0:3c:0a:
                    9d:55:96:e2:af:ec:7f:f3:7e:28:ca:d8:8d:08:3a:
                    aa:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F1:14:31:5E:AD:3D:BA:1E:B8:FB:5D:20:DB:E8:67:D2:28:73:91
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f29e7bd-6047-4f4c-b4b1-1f41b303f71e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.157.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         21:23:63:f4:c2:76:1e:60:6d:c3:f7:12:80:38:81:aa:e8:ed:
         2d:3a:b0:ec:17:16:b6:0e:bf:8d:a6:dd:a4:f6:5f:77:58:24:
         92:09:49:d2:72:af:64:b6:e8:f1:3a:74:cf:90:9d:cc:f5:9e:
         3c:5d:d9:c6:b7:09:35:f9:e2:47:d0:2c:b7:47:b0:d3:59:62:
         1f:ee:fa:cf:42:bf:48:e6:c4:b7:be:30:59:12:ad:c0:6f:fa:
         48:a6:9f:60:ad:c1:c8:24:f7:db:71:9c:f3:e5:b4:cf:4d:5e:
         d8:b9:03:4b:b1:60:fa:6a:48:ac:9c:d4:14:11:81:73:b3:05:
         4e:dd:d8:51:e8:fb:7e:c1:7a:e9:07:3a:20:ba:17:e3:be:1e:
         5d:51:72:13:a6:82:30:cf:e5:0f:d2:a6:d4:b6:9b:3a:7d:d0:
         6b:74:02:77:01:ea:f6:68:6b:f9:92:6a:44:7e:0e:3c:39:f5:
         79:5a:32:49:d2:4a:3f:1c:30:58:2f:1d:d4:a9:ac:22:84:73:
         17:9b:57:87:93:81:ee:ea:a9:74:04:62:06:14:24:59:2f:33:
         5f:69:8f:39:70:00:09:d1:cc:c2:ad:d9:db:51:70:98:34:c2:
         6b:72:a3:d5:93:87:4a:bd:66:5a:89:a2:27:24:a8:2c:cb:1f:
         63:ce:f2:f3
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUH3iu5duPwdpkwJGnUO4c8P3oh/IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDE0MTM0WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A4ZTA4NTFkNjAwMGRjZGRkOGFhOTBkZDhjNDA5MTZiY2Yw
N2U3NDYxZDM0YzhkNzYzNGZkMjFjODlkNTEyZWJjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDOCO7/qOeFkADPT0LJjUaffWzLXjBnXiofjEPbMFFBO+pN
SV2fgd44fNP1HMvAvC2UT/LHG021T9jwrsuBJqPwetjydOMFndMVIEfLLF1Ck0kL
GqUWzP4ducTRdYOxqUo1dHLlDQkRPJvYXMiNGFEE0pV0XymPe59Kkuoa2Lz1/HTh
RXBPPdfRESET50U1wYeAqEpVLURKGHettwhLLtAqmwluKbSizuKR9KdUyjICs48k
emA9nivGso4/InAb9DGPNmO0GaNcVZauQiyx2WQGQ8swE78VEXDufBKrooixDigq
97WRLrVhox9kWdA8Cp1VluKv7H/zfijK2I0IOqrjAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUR/EUMV6tPboeuPtdINvoZ9Ioc5EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzVmMjllN2JkLTYwNDctNGY0Yy1iNGIxLTFmNDFiMzAzZjcxZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARsnTAwDQYJKoZIhvcNAQELBQADggEBACEjY/TCdh5gbcP3EoA4garo7S06
sOwXFrYOv42m3aT2X3dYJJIJSdJyr2S26PE6dM+Qncz1njxd2ca3CTX54kfQLLdH
sNNZYh/u+s9Cv0jmxLe+MFkSrcBv+kimn2Ctwcgk99txnPPltM9NXti5A0uxYPpq
SKyc1BQRgXOzBU7d2FHo+37BeukHOiC6F+O+Hl1RchOmgjDP5Q/SptS2mzp90Gt0
AncB6vZoa/mSakR+Djw59XlaMknSSj8cMFgvHdSprCKEcxebV4eTge7qqXQEYgYU
JFkvM19pjzlwAAnRzMKt2dtRcJg0wmtyo9WTh0q9ZlqJoickqCzLH2PO8vM=
-----END CERTIFICATE-----