Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c85cb81-2f87-47f2-841f-f6fc32387e85.roa
File:                     7c85cb81-2f87-47f2-841f-f6fc32387e85.roa (raw, json)
Hash identifier:          st7hKvV15MLEHM9sVootRRuL6dEUfG/21HsLgobOPsA=
Subject key identifier:   12:19:F9:64:A2:B4:8E:6D:44:CD:19:A5:06:C7:43:C1:C9:8A:96:09
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7ED7CC80866718DABE9FAF0D7E2B987FB8F5F845
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c85cb81-2f87-47f2-841f-f6fc32387e85.roa
Signing time:             Mon 20 Oct 2025 00:31:46 +0000
ROA not before:           Mon 20 Oct 2025 00:31:46 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.139.238.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d7:cc:80:86:67:18:da:be:9f:af:0d:7e:2b:98:7f:b8:f5:f8:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 00:31:46 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=5a1d3c52639faa4f8490b5712f03f93c44dce468d1ef4ef45811742e3d1183ba, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:50:39:9c:15:00:7a:1d:2f:d4:da:00:52:ed:
                    94:b0:44:32:c4:3e:fc:f1:39:3e:17:0d:fe:71:d7:
                    f6:d8:89:95:06:9f:48:b8:5d:a2:4f:80:48:04:28:
                    40:f9:ea:af:31:09:09:c4:32:98:15:8a:32:5e:c9:
                    05:91:90:ba:65:5c:71:3e:f3:74:34:c0:2a:09:25:
                    4c:7e:b9:ef:ec:f5:df:26:a2:fe:db:f1:e5:08:9b:
                    21:c5:08:74:e2:d7:c8:79:95:34:9d:b2:92:f4:29:
                    15:df:db:7e:3d:2e:7f:1b:21:11:99:c3:f3:d7:11:
                    54:6d:4b:bf:cf:f7:c0:f8:9e:2e:a7:ab:2a:2e:9f:
                    e6:db:9d:c4:80:66:84:aa:ff:c0:0b:72:02:cc:73:
                    2d:a1:48:f1:8a:6c:f7:f9:a1:4d:b1:56:97:c0:c8:
                    6d:dc:05:17:09:fe:07:a6:d4:0f:6a:41:3c:56:b4:
                    29:15:69:6f:72:5f:8a:34:43:09:63:e0:b3:29:76:
                    f0:c2:a4:71:b9:7a:40:e9:65:0b:db:ae:96:b8:ec:
                    ed:b9:f1:e9:95:c0:dc:ac:56:34:f6:16:59:64:cb:
                    f0:fc:03:7e:13:c2:91:1b:1d:3d:73:25:9e:c6:8f:
                    71:0a:2d:96:dd:3f:28:11:a8:05:d6:70:47:d6:b2:
                    13:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:19:F9:64:A2:B4:8E:6D:44:CD:19:A5:06:C7:43:C1:C9:8A:96:09
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c85cb81-2f87-47f2-841f-f6fc32387e85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.139.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:31:42:ab:32:f3:4a:ef:12:ee:34:0f:f1:00:db:77:18:90:
         10:24:21:e8:e1:d0:2d:7b:aa:41:0b:27:4e:a2:55:be:64:99:
         80:e1:5a:b1:ba:eb:ae:ae:72:ec:7b:f3:38:ad:06:72:97:7c:
         8a:aa:04:d4:7d:a6:d0:12:10:68:9e:b3:d7:6f:d7:fb:df:a5:
         f2:0f:c0:49:eb:12:00:d8:45:0b:6d:d2:9e:f0:27:df:3e:d6:
         68:f9:a3:12:98:03:23:08:f0:83:be:ac:cd:dc:20:fa:24:a1:
         2d:49:7f:70:4f:ee:a4:d2:14:c4:95:4f:a0:40:ce:4c:87:ff:
         f5:fb:e6:75:be:78:ae:ef:4d:72:60:be:91:42:79:a8:1c:3c:
         47:0d:39:6f:f2:8a:06:a9:9b:ca:ad:0f:eb:0e:fb:e9:79:14:
         02:13:e0:be:c6:ed:ed:53:52:a1:73:79:13:8c:52:e0:ac:16:
         d4:bc:4d:3d:f0:fc:55:23:a3:34:41:6a:6a:2c:bf:2d:a5:17:
         10:62:59:24:ee:59:de:66:b3:3e:08:0b:36:ee:3b:a4:0e:96:
         a0:e6:41:1e:87:98:d3:c4:f0:d0:cc:b7:9b:7d:fc:ec:de:ba:
         ed:ef:4e:06:e6:c8:c8:54:ae:ea:40:22:33:f7:b8:12:69:7b:
         87:8c:0d:9a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUftfMgIZnGNq+n68NfiuYf7j1+EUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDAzMTQ2WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A1YTFkM2M1MjYzOWZhYTRmODQ5MGI1NzEyZjAzZjkzYzQ0
ZGNlNDY4ZDFlZjRlZjQ1ODExNzQyZTNkMTE4M2JhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDOUDmcFQB6HS/U2gBS7ZSwRDLEPvzxOT4XDf5x1/bYiZUG
n0i4XaJPgEgEKED56q8xCQnEMpgVijJeyQWRkLplXHE+83Q0wCoJJUx+ue/s9d8m
ov7b8eUImyHFCHTi18h5lTSdspL0KRXf2349Ln8bIRGZw/PXEVRtS7/P98D4ni6n
qyoun+bbncSAZoSq/8ALcgLMcy2hSPGKbPf5oU2xVpfAyG3cBRcJ/gem1A9qQTxW
tCkVaW9yX4o0Qwlj4LMpdvDCpHG5ekDpZQvbrpa47O258emVwNysVjT2Fllky/D8
A34TwpEbHT1zJZ7Gj3EKLZbdPygRqAXWcEfWshN3AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUEhn5ZKK0jm1EzRmlBsdDwcmKlgkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdjODVjYjgxLTJmODctNDdmMi04NDFmLWY2ZmMzMjM4N2U4NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFsi+4wDQYJKoZIhvcNAQELBQADggEBAGIxQqsy80rvEu40D/EA23cYkBAk
Iejh0C17qkELJ06iVb5kmYDhWrG6666ucux78zitBnKXfIqqBNR9ptASEGies9dv
1/vfpfIPwEnrEgDYRQtt0p7wJ98+1mj5oxKYAyMI8IO+rM3cIPokoS1Jf3BP7qTS
FMSVT6BAzkyH//X75nW+eK7vTXJgvpFCeagcPEcNOW/yigapm8qtD+sO++l5FAIT
4L7G7e1TUqFzeROMUuCsFtS8TT3w/FUjozRBamosvy2lFxBiWSTuWd5msz4ICzbu
O6QOlqDmQR6HmNPE8NDMt5t9/Ozeuu3vTgbmyMhUrupAIjP3uBJpe4eMDZo=
-----END CERTIFICATE-----