Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ff9c68a-3a5c-455e-9257-292ec9acee0d.roa
File:                     7ff9c68a-3a5c-455e-9257-292ec9acee0d.roa (raw, json)
Hash identifier:          vBeYuqSntiiKLCkQoby3Fj8kRS2XM6LQ+Zh1lUGvQNA=
Subject key identifier:   97:B6:49:38:5C:DD:1F:AF:E6:4E:CE:26:56:6C:2B:0A:A9:CC:E9:8A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       262CA7EBA6C58B0F9869F5A9C18A0F1FF8BE368E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ff9c68a-3a5c-455e-9257-292ec9acee0d.roa
Signing time:             Mon 20 Oct 2025 00:41:16 +0000
ROA not before:           Mon 20 Oct 2025 00:41:16 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.159.192.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:2c:a7:eb:a6:c5:8b:0f:98:69:f5:a9:c1:8a:0f:1f:f8:be:36:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 00:41:16 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=8f2f72d0391bc8850f60a856981ef5452d477a1f1e90052eac23684bfae5120e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4f:b6:ac:81:30:32:fd:4e:bd:1b:f6:1b:b1:
                    05:c0:fa:88:95:2f:4e:a8:7d:d0:53:a6:7d:35:09:
                    9e:d4:2e:a1:89:84:a4:38:1c:1c:87:6d:36:b9:8c:
                    2c:d3:e7:b8:35:9b:ee:1d:83:7f:e2:bb:3d:3b:3e:
                    f6:9d:dc:f7:8e:47:55:ee:90:39:92:f5:24:54:5e:
                    79:bc:97:64:d2:29:8e:b5:03:ea:d2:23:2b:28:1e:
                    79:44:d9:82:87:38:f2:c4:ea:c3:f0:4e:57:33:80:
                    80:60:66:49:39:dd:5e:1b:78:57:fb:3d:77:f1:53:
                    34:db:f5:77:d8:b4:74:25:8a:1d:d2:b0:92:40:91:
                    bc:6a:ec:77:ad:28:73:75:67:0a:39:0b:4a:97:15:
                    3f:b4:fb:ea:c8:1b:7d:03:5c:54:23:e1:2d:33:06:
                    ad:84:fd:f4:38:fb:06:d6:16:48:bc:a4:a5:6a:7d:
                    68:40:b6:25:66:d3:54:ae:35:5f:77:0f:ea:c6:a4:
                    8a:19:e0:3b:f2:49:f5:79:e8:0c:1a:f5:ba:93:67:
                    7e:3e:1e:04:84:6c:5d:b8:fe:71:e3:6f:86:8d:97:
                    02:b9:f1:30:e6:29:92:b0:09:34:12:1d:b5:76:ad:
                    c8:01:b8:db:86:fa:8e:80:00:81:cf:6b:a9:01:4d:
                    92:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B6:49:38:5C:DD:1F:AF:E6:4E:CE:26:56:6C:2B:0A:A9:CC:E9:8A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ff9c68a-3a5c-455e-9257-292ec9acee0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.159.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:5b:02:8f:88:03:c5:b4:39:47:14:fe:19:c1:68:fb:af:dc:
         9f:87:cd:50:7e:18:8e:f6:1c:c9:2b:37:f4:2d:66:ff:87:cc:
         9a:87:32:6c:42:1d:38:4b:29:e8:be:93:87:50:b2:e9:95:fc:
         0c:c7:ad:74:e5:8c:6d:6c:43:84:2b:6d:32:d1:ec:9a:3d:81:
         5d:8c:5e:ea:49:25:4f:ee:05:33:ed:7e:f5:4b:3b:f8:59:65:
         4d:46:06:17:bc:02:4c:7e:09:f1:60:63:cf:a2:f9:2a:f3:97:
         c7:72:af:11:e7:4f:6f:d8:35:fd:71:f3:ba:83:74:11:d9:cf:
         bb:8f:c8:ba:ee:f7:d4:22:20:52:f1:cb:ef:92:20:a9:23:43:
         00:cf:60:4a:c3:25:90:19:dc:e9:ff:51:79:4d:52:53:db:ca:
         d5:aa:cc:63:bb:e9:7d:2f:de:3a:75:99:aa:b3:00:61:1e:84:
         f7:da:0e:30:5f:34:e3:1a:30:dc:ff:2d:20:6c:07:a8:6f:84:
         45:6b:fa:4d:19:ae:42:94:98:88:fa:25:0c:a7:14:5c:16:d7:
         f9:c2:02:fa:25:3d:56:22:92:73:c2:41:4a:54:00:d0:31:55:
         7a:7e:0d:52:f8:36:53:c8:2b:9e:b5:14:59:86:36:9f:6c:1a:
         d1:f8:dc:7c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJiyn66bFiw+YafWpwYoPH/i+No4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDA0MTE2WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A4ZjJmNzJkMDM5MWJjODg1MGY2MGE4NTY5ODFlZjU0NTJk
NDc3YTFmMWU5MDA1MmVhYzIzNjg0YmZhZTUxMjBlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCnT7asgTAy/U69G/YbsQXA+oiVL06ofdBTpn01CZ7ULqGJ
hKQ4HByHbTa5jCzT57g1m+4dg3/iuz07Pvad3PeOR1XukDmS9SRUXnm8l2TSKY61
A+rSIysoHnlE2YKHOPLE6sPwTlczgIBgZkk53V4beFf7PXfxUzTb9XfYtHQlih3S
sJJAkbxq7HetKHN1Zwo5C0qXFT+0++rIG30DXFQj4S0zBq2E/fQ4+wbWFki8pKVq
fWhAtiVm01SuNV93D+rGpIoZ4DvySfV56Awa9bqTZ34+HgSEbF24/nHjb4aNlwK5
8TDmKZKwCTQSHbV2rcgBuNuG+o6AAIHPa6kBTZLlAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUl7ZJOFzdH6/mTs4mVmwrCqnM6YowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdmZjljNjhhLTNhNWMtNDU1ZS05MjU3LTI5MmVjOWFjZWUwZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsn8AwDQYJKoZIhvcNAQELBQADggEBAC9bAo+IA8W0OUcU/hnBaPuv3J+H
zVB+GI72HMkrN/QtZv+HzJqHMmxCHThLKei+k4dQsumV/AzHrXTljG1sQ4QrbTLR
7Jo9gV2MXupJJU/uBTPtfvVLO/hZZU1GBhe8Akx+CfFgY8+i+Srzl8dyrxHnT2/Y
Nf1x87qDdBHZz7uPyLru99QiIFLxy++SIKkjQwDPYErDJZAZ3On/UXlNUlPbytWq
zGO76X0v3jp1maqzAGEehPfaDjBfNOMaMNz/LSBsB6hvhEVr+k0ZrkKUmIj6JQyn
FFwW1/nCAvolPVYiknPCQUpUANAxVXp+DVL4NlPIK561FFmGNp9sGtH43Hw=
-----END CERTIFICATE-----