Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab700719-f9a7-4c6b-b6f1-29388ba3e7c8.roa
File:                     ab700719-f9a7-4c6b-b6f1-29388ba3e7c8.roa (raw, json)
Hash identifier:          zaB3Gp+Nju7BUg7r6qO1wPBdJYt0wN3u1AC3z+l1R/k=
Subject key identifier:   C5:D2:EF:0C:BC:C8:3F:54:76:44:EF:19:15:3E:D9:37:1F:CA:37:2B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6DFF3873152E365FC6411D314B2BD339BD91A8BD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab700719-f9a7-4c6b-b6f1-29388ba3e7c8.roa
Signing time:             Mon 20 Oct 2025 01:20:50 +0000
ROA not before:           Mon 20 Oct 2025 01:20:50 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.159.120.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ff:38:73:15:2e:36:5f:c6:41:1d:31:4b:2b:d3:39:bd:91:a8:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 01:20:50 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=79d7fa679663f9b1377c9561b21a805a0395d90be770ef4383e72a24f5efe2b9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5c:4e:70:a3:ad:37:cd:ce:09:4a:c5:26:82:
                    cc:6c:6d:6e:f0:6f:43:69:b5:91:31:d2:95:3a:aa:
                    dd:e4:0d:a0:14:c7:a1:de:ce:7e:ac:90:5e:6f:8a:
                    c3:f0:ab:71:10:61:7a:9b:d7:49:16:06:6d:94:32:
                    78:78:0d:f4:fb:b4:9b:16:2e:d8:7e:3c:64:f2:c3:
                    45:12:c5:64:57:4a:e1:56:8a:87:17:60:da:12:1e:
                    ce:85:f0:70:cf:3a:7a:7f:b9:2b:e6:81:65:35:87:
                    73:84:d2:b0:e7:f4:26:2b:82:ab:09:ba:b9:55:7d:
                    2d:b3:ff:17:88:66:8b:31:e5:88:79:f4:47:e9:bb:
                    e6:c5:09:6f:e3:d7:c0:4b:77:75:56:42:44:89:c6:
                    1a:8a:b2:c1:44:7a:c8:b8:12:77:59:3e:88:41:5f:
                    57:70:ca:88:1f:13:c0:76:cb:7b:9e:1b:7e:1d:dd:
                    9c:3b:5d:3b:4b:38:79:9e:dc:63:e1:ef:69:d5:ec:
                    c8:8d:f1:48:95:1e:64:77:0f:bd:cf:48:92:62:04:
                    d5:69:fc:e2:cd:bf:fb:e4:8c:56:2d:ea:d4:1b:0d:
                    e4:c3:1b:d2:44:09:60:79:a1:75:62:46:c5:0e:ec:
                    7d:d3:22:8f:02:2d:0f:4e:23:e4:01:65:bd:67:60:
                    57:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D2:EF:0C:BC:C8:3F:54:76:44:EF:19:15:3E:D9:37:1F:CA:37:2B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab700719-f9a7-4c6b-b6f1-29388ba3e7c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.159.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         be:27:a5:b6:49:eb:27:37:fb:e5:bc:eb:f6:0d:02:8e:9d:60:
         94:c1:05:04:13:3d:d3:f0:83:d5:fb:70:a5:28:0c:1c:1c:3f:
         78:84:eb:51:82:7e:0a:0d:bc:1d:30:6a:d9:96:f4:f5:f5:cf:
         d2:75:6a:9f:1d:fe:11:cc:43:21:13:43:ae:3e:4f:7f:48:e0:
         85:0a:46:64:c9:46:2a:45:0a:34:a1:71:70:e8:a2:7f:54:32:
         6e:cd:8c:d4:ff:d3:6b:ad:59:dd:94:f7:65:70:f2:f3:0d:a8:
         aa:26:d6:00:0d:51:20:c7:fd:58:8d:c5:35:15:b1:23:1c:93:
         0c:2c:7e:d0:47:14:6b:4d:ee:d0:ab:13:ea:ad:bb:ad:f1:1b:
         8c:07:96:d2:5d:92:c3:27:9a:6a:ce:d6:ac:37:47:ff:f1:d2:
         9e:2e:68:b2:51:3c:d5:a8:ae:4b:9c:46:f1:f7:e9:a0:17:d7:
         a7:4c:d7:c0:ae:0c:00:0e:55:95:b6:01:d4:87:0b:51:51:a8:
         1c:8b:91:dc:37:28:83:4f:fa:23:7b:1d:2a:a7:7a:55:d6:a4:
         80:cc:c9:2a:0c:45:7f:d7:45:26:e6:bb:67:e0:f8:fe:20:4a:
         82:5e:e9:b5:65:de:50:72:fd:30:e1:0f:e7:69:fc:ad:f1:c9:
         39:0f:5d:fa
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUbf84cxUuNl/GQR0xSyvTOb2RqL0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDEyMDUwWhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A3OWQ3ZmE2Nzk2NjNmOWIxMzc3Yzk1NjFiMjFhODA1YTAz
OTVkOTBiZTc3MGVmNDM4M2U3MmEyNGY1ZWZlMmI5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDKXE5wo603zc4JSsUmgsxsbW7wb0NptZEx0pU6qt3kDaAU
x6Hezn6skF5visPwq3EQYXqb10kWBm2UMnh4DfT7tJsWLth+PGTyw0USxWRXSuFW
iocXYNoSHs6F8HDPOnp/uSvmgWU1h3OE0rDn9CYrgqsJurlVfS2z/xeIZosx5Yh5
9Efpu+bFCW/j18BLd3VWQkSJxhqKssFEesi4EndZPohBX1dwyogfE8B2y3ueG34d
3Zw7XTtLOHme3GPh72nV7MiN8UiVHmR3D73PSJJiBNVp/OLNv/vkjFYt6tQbDeTD
G9JECWB5oXViRsUO7H3TIo8CLQ9OI+QBZb1nYFdJAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUxdLvDLzIP1R2RO8ZFT7ZNx/KNyswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FiNzAwNzE5LWY5YTctNGM2Yi1iNmYxLTI5Mzg4YmEzZTdjOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBANsn3gwDQYJKoZIhvcNAQELBQADggEBAL4npbZJ6yc3++W86/YNAo6dYJTB
BQQTPdPwg9X7cKUoDBwcP3iE61GCfgoNvB0watmW9PX1z9J1ap8d/hHMQyETQ64+
T39I4IUKRmTJRipFCjShcXDoon9UMm7NjNT/02utWd2U92Vw8vMNqKom1gANUSDH
/ViNxTUVsSMckwwsftBHFGtN7tCrE+qtu63xG4wHltJdksMnmmrO1qw3R//x0p4u
aLJRPNWorkucRvH36aAX16dM18CuDAAOVZW2AdSHC1FRqByLkdw3KINP+iN7HSqn
elXWpIDMySoMRX/XRSbmu2fg+P4gSoJe6bVl3lBy/TDhD+dp/K3xyTkPXfo=
-----END CERTIFICATE-----