Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c7ad818-e486-467f-8bdc-a00999319e77.roa
File:                     8c7ad818-e486-467f-8bdc-a00999319e77.roa (raw, json)
Hash identifier:          GvX7oFOQKAiaWIQftIETyyCcGAQsFT/s5mYiJUfyPJ4=
Subject key identifier:   B8:7E:B0:35:31:4E:EC:78:73:7C:17:AE:42:F3:CE:1C:B9:CB:FC:23
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       48A8E6E1D109B9DDA4BD8D75D1D8C706B3A38D3A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c7ad818-e486-467f-8bdc-a00999319e77.roa
Signing time:             Mon 20 Oct 2025 00:22:29 +0000
ROA not before:           Mon 20 Oct 2025 00:22:29 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.159.52.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a8:e6:e1:d1:09:b9:dd:a4:bd:8d:75:d1:d8:c7:06:b3:a3:8d:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 00:22:29 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=0002afae1d2b6febe1ea6226a86f47140bca67b1a200345f9363cf547a048ea6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7c:9a:30:53:7e:e6:b6:a4:21:fe:90:3d:c8:
                    34:9a:4c:f0:83:56:ba:65:50:b2:a3:f2:25:2b:9c:
                    ae:a0:57:36:a0:f9:d5:a7:1c:64:92:66:6c:93:c2:
                    0d:25:6e:2a:d5:1d:31:4b:ac:4e:7d:6a:11:7d:5c:
                    28:9b:53:38:c9:13:0c:97:67:85:9d:70:aa:86:94:
                    28:02:07:f5:82:67:c8:1d:3b:f0:c0:32:ad:ca:6d:
                    3f:ca:87:d6:76:75:a5:bf:3b:80:99:d0:32:90:7d:
                    2a:07:43:c1:31:42:32:42:a6:0f:ca:fa:9c:71:17:
                    b1:73:a3:46:4d:e8:c9:de:84:ef:00:39:8c:90:0d:
                    f2:ad:d6:36:e9:5c:2e:d6:4b:87:8d:e1:1c:88:2e:
                    c5:13:c6:04:97:3f:ed:42:59:49:aa:fc:3d:bb:19:
                    2d:ab:c4:d7:7a:ad:d4:c9:8f:98:30:fe:f4:b9:9f:
                    9f:90:7c:76:26:43:5d:f9:ae:75:67:12:e7:00:9b:
                    6e:63:99:3f:5a:2f:16:26:c8:bf:74:cd:f5:8d:47:
                    a7:c5:8a:48:97:95:59:45:68:9a:d3:af:38:cf:4c:
                    e7:03:b0:4d:87:6e:e3:cd:82:07:0d:e1:c1:aa:62:
                    c1:a7:ad:21:3d:65:fd:dd:9e:39:31:e5:5d:f8:97:
                    61:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:7E:B0:35:31:4E:EC:78:73:7C:17:AE:42:F3:CE:1C:B9:CB:FC:23
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c7ad818-e486-467f-8bdc-a00999319e77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.159.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:07:5b:ba:53:94:08:d2:2b:3f:65:53:2d:6b:22:36:c2:e6:
         15:9a:fa:3e:d0:9b:16:36:9d:be:28:36:5a:d7:32:82:d1:8e:
         7c:2e:e3:35:5e:83:01:2a:16:d4:bf:33:db:b7:53:5f:49:ca:
         03:6f:8f:33:d1:88:ad:fd:d7:32:c3:1d:58:ec:20:8b:ea:a7:
         c2:19:13:a1:e5:7e:31:fc:8f:c5:7a:72:7d:9e:4b:c2:f3:4c:
         5a:21:52:a3:c0:e4:a8:43:2f:3f:2d:99:5a:a7:fb:f2:42:f3:
         03:42:ea:d4:35:1f:4f:e3:33:5f:25:0e:5d:09:98:fe:8e:1c:
         28:69:69:37:a1:3e:ee:16:0a:de:cb:77:33:a8:a7:f7:e2:45:
         21:42:5c:bd:66:35:9e:37:e3:d0:20:53:9f:9c:4b:0e:fd:71:
         6e:6a:c5:b1:c4:d9:d2:2f:e8:3c:c7:b9:3a:93:8e:c1:10:b2:
         b7:1b:0c:6a:bb:b7:4a:a1:32:ed:e7:48:12:cf:c9:46:fb:5e:
         4e:df:6d:19:71:8b:53:a2:8a:fc:00:97:f9:de:36:2b:98:e6:
         71:48:dc:76:a9:32:60:76:20:e1:53:6c:55:8d:27:1a:6d:2e:
         13:0d:ec:62:d6:72:37:4d:5d:30:99:8b:ed:8a:ef:6f:cd:a8:
         cd:5e:ec:50
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUSKjm4dEJud2kvY110djHBrOjjTowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDAyMjI5WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0AwMDAyYWZhZTFkMmI2ZmViZTFlYTYyMjZhODZmNDcxNDBi
Y2E2N2IxYTIwMDM0NWY5MzYzY2Y1NDdhMDQ4ZWE2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDQfJowU37mtqQh/pA9yDSaTPCDVrplULKj8iUrnK6gVzag
+dWnHGSSZmyTwg0lbirVHTFLrE59ahF9XCibUzjJEwyXZ4WdcKqGlCgCB/WCZ8gd
O/DAMq3KbT/Kh9Z2daW/O4CZ0DKQfSoHQ8ExQjJCpg/K+pxxF7Fzo0ZN6MnehO8A
OYyQDfKt1jbpXC7WS4eN4RyILsUTxgSXP+1CWUmq/D27GS2rxNd6rdTJj5gw/vS5
n5+QfHYmQ135rnVnEucAm25jmT9aLxYmyL90zfWNR6fFikiXlVlFaJrTrzjPTOcD
sE2HbuPNggcN4cGqYsGnrSE9Zf3dnjkx5V34l2H5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUuH6wNTFO7HhzfBeuQvPOHLnL/CMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzhjN2FkODE4LWU0ODYtNDY3Zi04YmRjLWEwMDk5OTMxOWU3Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJsnzQwDQYJKoZIhvcNAQELBQADggEBALwHW7pTlAjSKz9lUy1rIjbC5hWa
+j7QmxY2nb4oNlrXMoLRjnwu4zVegwEqFtS/M9u3U19JygNvjzPRiK391zLDHVjs
IIvqp8IZE6HlfjH8j8V6cn2eS8LzTFohUqPA5KhDLz8tmVqn+/JC8wNC6tQ1H0/j
M18lDl0JmP6OHChpaTehPu4WCt7LdzOop/fiRSFCXL1mNZ4349AgU5+cSw79cW5q
xbHE2dIv6DzHuTqTjsEQsrcbDGq7t0qhMu3nSBLPyUb7Xk7fbRlxi1OiivwAl/ne
NiuY5nFI3HapMmB2IOFTbFWNJxptLhMN7GLWcjdNXTCZi+2K72/NqM1e7FA=
-----END CERTIFICATE-----