Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8961378e-f818-4ac8-903f-71fd238c4fcd.roa
File:                     8961378e-f818-4ac8-903f-71fd238c4fcd.roa (raw, json)
Hash identifier:          p7rRefWtsG0wo1lxGHXZUScyq6mmSvqrnXrR36gOEFo=
Subject key identifier:   07:DF:66:3E:21:F5:5D:D1:E1:07:3C:B0:A6:BD:6E:98:74:B6:2B:39
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4CA0A45864F2FB225649C9F19C6FF764237CD300
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8961378e-f818-4ac8-903f-71fd238c4fcd.roa
Signing time:             Mon 20 Oct 2025 04:12:31 +0000
ROA not before:           Mon 20 Oct 2025 04:12:31 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.156.16.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:a0:a4:58:64:f2:fb:22:56:49:c9:f1:9c:6f:f7:64:23:7c:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 04:12:31 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=f79132838648d1ed6be4ac45702ac317f3639898e26e373b4119e99fe30e2a99, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a7:f3:93:eb:37:9a:5b:1b:6e:b8:ac:33:b0:
                    d9:2b:9d:87:f7:9b:1a:37:38:66:ce:2f:9f:e8:66:
                    1e:b0:e5:e5:c8:d8:d7:b8:26:92:86:50:ed:91:2a:
                    cd:c1:ae:bf:b7:75:53:f7:79:b3:8f:1d:44:18:74:
                    b7:c2:8e:ee:16:1e:78:97:1b:2a:84:dd:8c:29:3b:
                    52:8d:1c:91:ae:86:86:dc:f7:8b:61:13:82:6e:c6:
                    65:37:c2:7e:6a:5e:f2:7d:5f:21:33:b1:a8:e7:ad:
                    1a:d2:6c:c9:c0:a9:02:68:57:66:c4:f9:d4:c0:7c:
                    2e:46:13:c4:97:95:40:b7:8d:d7:02:23:9f:29:55:
                    49:24:a5:7c:d2:13:90:b7:99:e0:14:b1:de:80:1e:
                    2b:fa:c8:ac:7c:e2:16:c7:72:ce:26:0a:7a:46:dd:
                    1a:a4:1a:fe:50:71:06:88:1b:57:5f:b6:12:5d:6e:
                    8b:7a:42:d7:fd:72:c4:66:64:2f:52:ba:e3:b4:14:
                    f5:bc:38:6b:bd:8a:ae:6e:f2:c2:c0:af:8d:aa:f5:
                    04:ca:f2:71:0c:66:1c:95:e9:80:1f:3d:7f:a0:53:
                    8b:57:f0:94:21:96:16:87:51:7c:5f:f9:6c:2c:f4:
                    7d:0d:97:83:41:68:50:ba:be:45:95:18:3d:aa:12:
                    4f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:DF:66:3E:21:F5:5D:D1:E1:07:3C:B0:A6:BD:6E:98:74:B6:2B:39
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8961378e-f818-4ac8-903f-71fd238c4fcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d2:46:5f:c0:33:4d:51:d8:2c:6b:18:23:ee:07:c2:dc:ac:33:
         ba:9a:27:9f:bf:f9:34:31:68:97:52:df:ed:26:bf:8e:e0:fd:
         cc:aa:e3:5a:13:5e:03:b2:7f:72:27:67:7e:10:e6:e6:05:05:
         9e:04:41:7a:a1:7d:6d:f1:5a:e7:56:4a:4d:de:cf:79:86:f0:
         f1:fb:9b:bd:a1:df:70:dc:8d:ac:36:f9:14:70:06:ee:84:1d:
         d0:5b:10:4b:09:49:e2:ab:32:f7:5c:75:3f:aa:c1:b9:8b:44:
         5f:d5:2a:b0:ff:07:0b:04:02:0e:4e:33:76:b0:3f:25:d9:01:
         10:50:52:25:4e:e2:83:4c:3b:d3:55:95:66:7c:d8:06:cb:d5:
         77:ad:e4:fa:72:21:c8:94:b8:23:c3:d8:07:c0:14:76:c3:80:
         77:24:1e:95:75:60:65:32:64:ec:d4:7d:0b:4a:99:bd:36:76:
         dd:9a:00:bc:ef:8b:74:f8:04:37:bd:a0:7f:9b:ca:6b:21:a9:
         b5:91:8e:93:8c:57:f6:46:75:dc:c9:b3:1e:fa:d9:ac:a8:b8:
         a7:82:da:52:79:9a:c4:19:a7:35:63:4c:6f:2a:b4:43:70:99:
         3a:bf:fd:53:49:59:fd:23:39:77:99:dd:09:e6:7c:12:1b:14:
         6a:26:2f:42
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUTKCkWGTy+yJWScnxnG/3ZCN80wAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDQxMjMxWhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BmNzkxMzI4Mzg2NDhkMWVkNmJlNGFjNDU3MDJhYzMxN2Yz
NjM5ODk4ZTI2ZTM3M2I0MTE5ZTk5ZmUzMGUyYTk5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDhp/OT6zeaWxtuuKwzsNkrnYf3mxo3OGbOL5/oZh6w5eXI
2Ne4JpKGUO2RKs3Brr+3dVP3ebOPHUQYdLfCju4WHniXGyqE3YwpO1KNHJGuhobc
94thE4JuxmU3wn5qXvJ9XyEzsajnrRrSbMnAqQJoV2bE+dTAfC5GE8SXlUC3jdcC
I58pVUkkpXzSE5C3meAUsd6AHiv6yKx84hbHcs4mCnpG3RqkGv5QcQaIG1dfthJd
bot6Qtf9csRmZC9SuuO0FPW8OGu9iq5u8sLAr42q9QTK8nEMZhyV6YAfPX+gU4tX
8JQhlhaHUXxf+Wws9H0Nl4NBaFC6vkWVGD2qEk8LAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUB99mPiH1XdHhBzywpr1umHS2KzkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzg5NjEzNzhlLWY4MTgtNGFjOC05MDNmLTcxZmQyMzhjNGZjZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFsnBAwDQYJKoZIhvcNAQELBQADggEBANJGX8AzTVHYLGsYI+4HwtysM7qa
J5+/+TQxaJdS3+0mv47g/cyq41oTXgOyf3InZ34Q5uYFBZ4EQXqhfW3xWudWSk3e
z3mG8PH7m72h33Dcjaw2+RRwBu6EHdBbEEsJSeKrMvdcdT+qwbmLRF/VKrD/BwsE
Ag5OM3awPyXZARBQUiVO4oNMO9NVlWZ82AbL1Xet5PpyIciUuCPD2AfAFHbDgHck
HpV1YGUyZOzUfQtKmb02dt2aALzvi3T4BDe9oH+bymshqbWRjpOMV/ZGddzJsx76
2ayouKeC2lJ5msQZpzVjTG8qtENwmTq//VNJWf0jOXeZ3QnmfBIbFGomL0I=
-----END CERTIFICATE-----