Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83e4b024-53ee-4bde-bdcd-3dd937d5a133.roa
File:                     83e4b024-53ee-4bde-bdcd-3dd937d5a133.roa (raw, json)
Hash identifier:          5xniEgTsl/TKiQMYMLtvSMLMpCE32GqUtvfdFA0xIvc=
Subject key identifier:   4F:A6:51:4F:D4:44:17:4C:F5:77:F4:7D:98:82:9D:E6:37:D8:2C:A4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       53DA2F0C3B4CF9FDEB683932840450B532AB7D13
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83e4b024-53ee-4bde-bdcd-3dd937d5a133.roa
Signing time:             Sun 19 Oct 2025 01:31:49 +0000
ROA not before:           Sun 19 Oct 2025 01:31:49 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.139.119.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:da:2f:0c:3b:4c:f9:fd:eb:68:39:32:84:04:50:b5:32:ab:7d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 01:31:49 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=c7d7340d5455450965f3485e7f01a008193bda0e90646cdc65039c741e28cfc3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9f:14:d6:11:85:0a:77:31:6e:97:ed:d6:67:
                    25:15:82:c1:47:9b:d6:72:e5:fa:94:97:ad:c4:0e:
                    e0:a7:a5:5c:9e:74:d9:c8:ce:06:f6:f5:11:31:be:
                    6d:90:d0:ee:48:44:fa:83:73:f8:53:6c:59:5d:d6:
                    c7:4a:5e:f6:f3:14:ba:cf:ee:ac:bf:2f:e0:fe:f0:
                    38:17:21:b8:e6:9c:91:34:cc:b0:bb:a0:cf:52:5f:
                    94:c9:37:24:c2:00:cd:55:cd:25:73:de:e3:e6:75:
                    de:fd:94:ef:e3:e8:29:fb:ab:df:d3:b5:1e:85:66:
                    e8:be:2b:60:34:d4:b4:58:61:76:1c:28:68:b4:14:
                    3d:9e:25:77:81:3d:75:39:c9:16:af:3d:fc:42:08:
                    03:64:b7:d8:c7:d0:70:21:49:e0:a5:90:51:7c:ca:
                    0f:e3:0c:1a:5d:21:a6:cd:af:98:2e:70:53:b2:29:
                    90:ec:ba:13:d1:c8:d6:9a:4d:fa:f9:31:44:30:cd:
                    c7:c2:8d:d4:2f:f3:00:d2:f3:61:ad:67:be:d0:c6:
                    4a:92:d5:8d:0c:b2:bf:13:3e:48:39:0f:1a:ff:02:
                    c4:db:e9:88:0c:ef:e9:00:f7:20:22:2e:09:68:7f:
                    a3:48:26:4c:53:40:15:a4:85:22:bd:41:2d:5f:63:
                    ac:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A6:51:4F:D4:44:17:4C:F5:77:F4:7D:98:82:9D:E6:37:D8:2C:A4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83e4b024-53ee-4bde-bdcd-3dd937d5a133.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.139.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:d5:6d:8c:e0:3b:99:86:2a:d9:2a:1f:09:73:94:2a:73:75:
         fe:c7:aa:05:7d:46:1b:8f:de:34:b7:57:2c:bd:50:7d:8d:eb:
         c5:f5:e5:b2:7c:a9:34:08:7a:d9:8b:6d:aa:f9:1f:19:aa:5d:
         ad:40:70:54:27:46:e5:b0:ce:9a:7a:f1:5b:e3:fe:35:10:6a:
         e8:a3:cd:91:3f:9a:4f:d0:4a:56:dc:65:27:3d:3f:92:46:80:
         b2:8d:4b:3d:e5:73:a2:f3:54:5e:c7:a8:1d:9a:b9:62:e7:be:
         94:7c:f5:e2:bf:e4:58:7e:23:83:08:2d:fe:04:a6:ea:ff:c4:
         ae:e3:5b:f4:44:a6:d6:3e:dd:15:8f:2e:ff:24:f4:f1:43:a2:
         b8:50:2b:e3:27:44:de:55:61:73:06:b4:c6:06:77:82:a9:f2:
         25:77:da:90:34:37:b3:0e:7b:4e:15:fd:c7:cb:fa:f2:52:79:
         15:fe:36:6b:16:06:11:3f:45:38:e5:21:6e:ce:0d:95:68:cf:
         02:47:00:30:d3:ec:2b:15:83:92:01:2f:94:cb:6f:cf:89:8e:
         f9:0e:75:81:ca:bc:34:fc:09:ea:13:d9:82:58:60:2b:ba:73:
         dc:af:31:70:c6:d2:0b:14:b8:6b:15:a4:f8:0b:b8:6f:65:d8:
         c4:82:49:25
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUU9ovDDtM+f3raDkyhARQtTKrfRMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDEzMTQ5WhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BjN2Q3MzQwZDU0NTU0NTA5NjVmMzQ4NWU3ZjAxYTAwODE5
M2JkYTBlOTA2NDZjZGM2NTAzOWM3NDFlMjhjZmMzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDSnxTWEYUKdzFul+3WZyUVgsFHm9Zy5fqUl63EDuCnpVye
dNnIzgb29RExvm2Q0O5IRPqDc/hTbFld1sdKXvbzFLrP7qy/L+D+8DgXIbjmnJE0
zLC7oM9SX5TJNyTCAM1VzSVz3uPmdd79lO/j6Cn7q9/TtR6FZui+K2A01LRYYXYc
KGi0FD2eJXeBPXU5yRavPfxCCANkt9jH0HAhSeClkFF8yg/jDBpdIabNr5gucFOy
KZDsuhPRyNaaTfr5MUQwzcfCjdQv8wDS82GtZ77QxkqS1Y0Msr8TPkg5Dxr/AsTb
6YgM7+kA9yAiLglof6NIJkxTQBWkhSK9QS1fY6zPAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUT6ZRT9REF0z1d/R9mIKd5jfYLKQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzgzZTRiMDI0LTUzZWUtNGJkZS1iZGNkLTNkZDkzN2Q1YTEzMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsi3cwDQYJKoZIhvcNAQELBQADggEBADLVbYzgO5mGKtkqHwlzlCpzdf7H
qgV9RhuP3jS3Vyy9UH2N68X15bJ8qTQIetmLbar5HxmqXa1AcFQnRuWwzpp68Vvj
/jUQauijzZE/mk/QSlbcZSc9P5JGgLKNSz3lc6LzVF7HqB2auWLnvpR89eK/5Fh+
I4MILf4Epur/xK7jW/REptY+3RWPLv8k9PFDorhQK+MnRN5VYXMGtMYGd4Kp8iV3
2pA0N7MOe04V/cfL+vJSeRX+NmsWBhE/RTjlIW7ODZVozwJHADDT7CsVg5IBL5TL
b8+JjvkOdYHKvDT8CeoT2YJYYCu6c9yvMXDG0gsUuGsVpPgLuG9l2MSCSSU=
-----END CERTIFICATE-----