Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb212efa-ef90-494e-a67a-aa10ad3c7e15.roa
File:                     cb212efa-ef90-494e-a67a-aa10ad3c7e15.roa (raw, json)
Hash identifier:          fFUb+qQ3mHMBq9kHV4FSmi5mgxOo7LgohtbBlpBOgNM=
Subject key identifier:   FC:9A:F2:D5:57:58:98:2D:51:13:89:04:AC:46:B9:59:FC:83:6E:B1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6F615DF3B9FE2B821E1D36D049113478F431F0BF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb212efa-ef90-494e-a67a-aa10ad3c7e15.roa
Signing time:             Sun 19 Oct 2025 00:10:04 +0000
ROA not before:           Sun 19 Oct 2025 00:10:04 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.190.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:61:5d:f3:b9:fe:2b:82:1e:1d:36:d0:49:11:34:78:f4:31:f0:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 00:10:04 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=93bc9797f3e30ae65a03ebc55525e240694f8a4e80b5e93510aed843fef81b6a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:39:a6:3a:84:79:40:86:93:2c:c6:4c:11:d6:
                    28:67:e0:f8:17:8d:3f:08:3e:cc:90:5d:2c:87:55:
                    06:26:21:0d:f6:bf:88:38:ea:49:25:da:af:39:e0:
                    32:bb:ba:43:ae:52:02:4b:cd:a1:6d:29:17:ff:d8:
                    30:a7:63:cc:58:1c:81:bb:1f:59:73:3b:cb:ef:0a:
                    d0:52:7c:0a:a8:32:cc:b7:5f:c6:49:b8:21:46:af:
                    69:38:e3:02:13:2a:64:09:57:25:27:53:a6:94:99:
                    2b:90:5e:02:58:e5:a7:ae:10:e5:9f:dd:b7:a6:0a:
                    c7:24:06:c0:71:75:1a:dc:3b:e5:1c:e5:d3:a5:48:
                    a0:46:11:d5:41:81:6b:d1:17:d3:c8:a6:74:69:3b:
                    d2:10:ab:34:94:51:eb:79:8d:b2:cf:60:76:90:fb:
                    26:b7:b8:ef:5b:41:e0:8d:67:d4:22:9c:5f:ac:b8:
                    6c:22:86:61:bc:f0:2c:d6:0b:43:de:9b:ef:d1:af:
                    66:d1:6e:47:41:a1:65:c7:34:27:b2:d6:2e:7e:df:
                    6e:86:04:bd:cd:fd:57:f4:92:cd:11:94:ca:ce:80:
                    4a:20:61:f7:d8:74:dc:44:a1:d7:a0:5c:b4:5e:b8:
                    d9:94:5f:c5:e2:15:80:51:dd:7d:48:d3:37:49:b2:
                    91:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9A:F2:D5:57:58:98:2D:51:13:89:04:AC:46:B9:59:FC:83:6E:B1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb212efa-ef90-494e-a67a-aa10ad3c7e15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d4:ae:6c:31:df:ff:0c:8b:16:fa:0c:de:b4:ac:aa:3b:fd:67:
         79:11:69:71:dd:cd:15:20:1f:74:a1:ee:5d:3a:2d:55:8c:02:
         69:18:0a:6a:fb:e2:72:9f:90:56:12:d7:50:19:f3:99:c1:e3:
         57:22:3c:dd:13:cb:95:6e:56:7b:44:7b:52:fe:43:d1:c7:85:
         65:24:9a:b8:b2:b8:6c:dc:fb:e1:1e:1f:c6:d3:c0:e0:37:54:
         bd:d5:ce:1f:5e:2d:14:2f:49:7c:31:98:a6:01:f4:82:b1:29:
         c0:25:37:9d:36:89:5b:54:a6:3e:80:8b:df:fb:79:2f:02:73:
         9b:c6:9e:86:57:9f:e6:a8:86:86:69:48:ce:bd:e2:45:e8:45:
         ab:01:a1:b1:05:db:62:61:91:e5:a3:bd:31:2b:6d:1a:f9:d9:
         8b:e4:c9:ee:f7:0d:24:d3:b6:83:52:6b:68:c4:6d:1d:0a:b9:
         22:39:93:09:22:22:0b:9b:a5:59:fc:d4:60:9a:c8:fa:03:9a:
         9c:2c:cb:9f:49:01:dc:83:f4:a7:91:16:95:1a:75:61:76:b8:
         46:41:7e:85:57:2b:a7:1d:33:d8:fb:2a:b0:90:5e:fd:d0:30:
         0e:50:f5:30:0b:53:e8:c2:74:89:ca:cc:7c:6c:fb:90:8c:c1:
         2e:03:46:e9
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUb2Fd87n+K4IeHTbQSRE0ePQx8L8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDAxMDA0WhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0A5M2JjOTc5N2YzZTMwYWU2NWEwM2ViYzU1NTI1ZTI0MDY5
NGY4YTRlODBiNWU5MzUxMGFlZDg0M2ZlZjgxYjZhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDSOaY6hHlAhpMsxkwR1ihn4PgXjT8IPsyQXSyHVQYmIQ32
v4g46kkl2q854DK7ukOuUgJLzaFtKRf/2DCnY8xYHIG7H1lzO8vvCtBSfAqoMsy3
X8ZJuCFGr2k44wITKmQJVyUnU6aUmSuQXgJY5aeuEOWf3bemCsckBsBxdRrcO+Uc
5dOlSKBGEdVBgWvRF9PIpnRpO9IQqzSUUet5jbLPYHaQ+ya3uO9bQeCNZ9QinF+s
uGwihmG88CzWC0Pem+/Rr2bRbkdBoWXHNCey1i5+326GBL3N/Vf0ks0RlMrOgEog
YffYdNxEodegXLReuNmUX8XiFYBR3X1I0zdJspFvAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU/Jry1VdYmC1RE4kErEa5WfyDbrEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2NiMjEyZWZhLWVmOTAtNDk0ZS1hNjdhLWFhMTBhZDNjN2UxNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFsir4wDQYJKoZIhvcNAQELBQADggEBANSubDHf/wyLFvoM3rSsqjv9Z3kR
aXHdzRUgH3Sh7l06LVWMAmkYCmr74nKfkFYS11AZ85nB41ciPN0Ty5VuVntEe1L+
Q9HHhWUkmriyuGzc++EeH8bTwOA3VL3Vzh9eLRQvSXwxmKYB9IKxKcAlN502iVtU
pj6Ai9/7eS8Cc5vGnoZXn+aohoZpSM694kXoRasBobEF22JhkeWjvTErbRr52Yvk
ye73DSTTtoNSa2jEbR0KuSI5kwkiIgubpVn81GCayPoDmpwsy59JAdyD9KeRFpUa
dWF2uEZBfoVXK6cdM9j7KrCQXv3QMA5Q9TALU+jCdInKzHxs+5CMwS4DRuk=
-----END CERTIFICATE-----