Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc0f44c1-ac86-4df9-b5a5-07a10dda03a0.roa
File:                     cc0f44c1-ac86-4df9-b5a5-07a10dda03a0.roa (raw, json)
Hash identifier:          uQG51KOxjI7SBKVUHys37wvdX+2mvNxymkse+05+m9w=
Subject key identifier:   AE:B2:C6:25:6C:A7:36:F1:7C:1B:B2:53:B4:5B:CC:1B:3A:2A:D3:80
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       24703731F8B9746CFFFED363A276E0B4F227CA35
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc0f44c1-ac86-4df9-b5a5-07a10dda03a0.roa
Signing time:             Mon 20 Oct 2025 06:22:08 +0000
ROA not before:           Mon 20 Oct 2025 06:22:08 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.156.251.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:70:37:31:f8:b9:74:6c:ff:fe:d3:63:a2:76:e0:b4:f2:27:ca:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 06:22:08 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=a541fc9994b427ad4713f07bbb0970fbb8851d18b67f2413d5976d206535f4a5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fd:47:4a:ab:f5:c2:00:80:b7:99:7b:ee:f2:
                    bc:ce:57:7a:52:d0:10:dc:82:cc:d7:47:31:3f:91:
                    6b:bb:41:5b:70:66:2f:bf:aa:bf:ff:fd:4b:92:b9:
                    ef:99:fc:4f:25:5a:98:b8:99:9b:93:72:c2:1c:d2:
                    86:c6:aa:3e:8d:8f:bf:25:eb:c2:89:11:63:cc:64:
                    f9:e6:cc:9a:28:ab:a8:64:2d:7e:20:eb:3e:e6:e5:
                    b0:54:59:a2:3d:32:17:1a:ba:34:2f:18:e5:e1:62:
                    b3:60:0a:10:a1:9a:a2:ac:a6:80:84:09:50:aa:56:
                    8f:28:19:11:56:96:fe:24:d8:ec:8e:60:9a:4f:8a:
                    d1:b8:64:aa:02:05:76:fb:eb:70:b4:35:8f:1b:04:
                    26:30:c7:f1:0e:9b:12:cb:6d:85:d2:ad:c2:1f:af:
                    6f:dc:a2:25:13:a8:e2:40:2a:4e:5d:3e:59:45:bb:
                    b2:9d:37:cb:ec:35:b7:2c:e1:6a:fa:24:ad:1c:9c:
                    c6:a7:82:d0:fb:cc:e2:d6:dd:f9:2c:0d:de:e9:90:
                    6a:d4:17:f4:41:68:85:3b:32:a5:1e:0b:cb:8d:af:
                    db:88:3f:03:72:84:e4:30:5b:fc:62:c1:bd:92:be:
                    f0:4d:39:46:5f:6f:b1:97:8d:73:68:59:f3:a4:29:
                    15:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B2:C6:25:6C:A7:36:F1:7C:1B:B2:53:B4:5B:CC:1B:3A:2A:D3:80
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc0f44c1-ac86-4df9-b5a5-07a10dda03a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:13:9c:d5:bf:a0:dc:fc:0b:2a:50:c6:97:c2:8b:f2:c7:0c:
         c8:54:ee:fa:5a:70:9b:8a:96:f8:b9:68:33:7a:c6:da:9e:b6:
         1d:7d:3e:b6:8b:bc:7b:16:5a:67:dc:16:c7:4c:0d:dd:48:51:
         11:e4:d3:f1:0f:e5:27:9f:2f:2b:0e:ea:d1:db:d5:e6:5f:b9:
         31:97:b9:4e:e0:26:e3:aa:19:29:fc:cf:fa:ac:56:36:ec:14:
         8d:94:32:c1:59:9f:09:c2:1f:04:47:aa:29:63:a9:72:48:fb:
         0d:d3:93:7b:96:67:d1:02:87:0b:a4:ff:c9:fa:ab:82:80:3f:
         b7:c5:c8:cf:16:22:8f:7e:4d:0b:f6:cf:27:a0:d1:59:7f:87:
         e7:cf:ea:d7:88:4c:6e:c2:87:95:0c:31:1c:47:1f:10:62:ce:
         96:81:a6:ef:54:eb:91:38:55:cd:e0:0b:12:1d:9e:52:b8:2f:
         6d:b8:a0:ca:52:37:64:8a:ab:75:42:40:75:11:b1:57:ff:9d:
         c2:75:95:37:59:bb:f6:84:c2:53:13:3a:ff:01:2c:78:15:c8:
         be:17:c9:27:d0:72:c3:f3:f8:a2:f4:7c:90:16:f3:a8:c4:d6:
         9a:03:16:06:71:65:f8:c9:16:75:8e:5f:09:a7:29:38:b8:2f:
         51:b0:15:ec
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJHA3Mfi5dGz//tNjonbgtPInyjUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDYyMjA4WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BhNTQxZmM5OTk0YjQyN2FkNDcxM2YwN2JiYjA5NzBmYmI4
ODUxZDE4YjY3ZjI0MTNkNTk3NmQyMDY1MzVmNGE1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC2/UdKq/XCAIC3mXvu8rzOV3pS0BDcgszXRzE/kWu7QVtw
Zi+/qr///UuSue+Z/E8lWpi4mZuTcsIc0obGqj6Nj78l68KJEWPMZPnmzJooq6hk
LX4g6z7m5bBUWaI9MhcaujQvGOXhYrNgChChmqKspoCECVCqVo8oGRFWlv4k2OyO
YJpPitG4ZKoCBXb763C0NY8bBCYwx/EOmxLLbYXSrcIfr2/coiUTqOJAKk5dPllF
u7KdN8vsNbcs4Wr6JK0cnMangtD7zOLW3fksDd7pkGrUF/RBaIU7MqUeC8uNr9uI
PwNyhOQwW/xiwb2SvvBNOUZfb7GXjXNoWfOkKRVpAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUrrLGJWynNvF8G7JTtFvMGzoq04AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2NjMGY0NGMxLWFjODYtNGRmOS1iNWE1LTA3YTEwZGRhMDNhMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsnPswDQYJKoZIhvcNAQELBQADggEBAKITnNW/oNz8CypQxpfCi/LHDMhU
7vpacJuKlvi5aDN6xtqeth19PraLvHsWWmfcFsdMDd1IURHk0/EP5SefLysO6tHb
1eZfuTGXuU7gJuOqGSn8z/qsVjbsFI2UMsFZnwnCHwRHqiljqXJI+w3Tk3uWZ9EC
hwuk/8n6q4KAP7fFyM8WIo9+TQv2zyeg0Vl/h+fP6teITG7Ch5UMMRxHHxBizpaB
pu9U65E4Vc3gCxIdnlK4L224oMpSN2SKq3VCQHURsVf/ncJ1lTdZu/aEwlMTOv8B
LHgVyL4XySfQcsPz+KL0fJAW86jE1poDFgZxZfjJFnWOXwmnKTi4L1GwFew=
-----END CERTIFICATE-----