Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1b28f34-db3a-4018-b1b3-4e9fc83f4612.roa
File:                     d1b28f34-db3a-4018-b1b3-4e9fc83f4612.roa (raw, json)
Hash identifier:          kYLFfCDHZElIa8OwAWme0mZ4lR+e5g7TfzfsqPTUadQ=
Subject key identifier:   CD:E2:87:A5:FB:79:B7:CB:6B:3A:4F:54:FC:58:9C:66:33:21:C4:D6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1060D4BFB916A7445D14E988EF266A881F249027
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1b28f34-db3a-4018-b1b3-4e9fc83f4612.roa
Signing time:             Mon 20 Oct 2025 04:50:50 +0000
ROA not before:           Mon 20 Oct 2025 04:50:50 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.139.18.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:60:d4:bf:b9:16:a7:44:5d:14:e9:88:ef:26:6a:88:1f:24:90:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 04:50:50 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=0cf0e26a58e985759af0b68b4715b22344cc7433e9dcaa4d1964bd56b217b77c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a2:f9:36:ee:58:c4:8a:79:58:6d:76:ec:78:
                    c0:c0:38:30:3c:c7:c8:81:6c:44:13:a5:39:63:15:
                    8d:ba:0e:12:67:61:40:a3:90:a2:7a:81:58:51:75:
                    a8:e2:67:72:f8:cd:d5:95:39:23:b2:eb:2b:c5:1a:
                    83:34:47:30:40:f7:78:e4:fd:27:55:36:27:49:ed:
                    4e:06:f0:92:d5:37:1c:4c:54:68:62:93:40:0f:56:
                    b1:86:57:87:d6:19:ca:17:11:c7:cd:74:38:2d:db:
                    07:9b:0f:8a:00:bf:a0:3e:be:0a:27:59:fa:d9:73:
                    20:e3:92:e7:33:2b:1c:29:03:94:43:5e:d7:7f:0b:
                    b5:d7:ea:a8:bf:e5:16:e6:85:b4:a7:73:15:ea:0d:
                    3b:9a:d4:4d:12:d1:37:c6:14:59:10:56:76:1b:c9:
                    14:20:6b:88:cb:e7:87:c8:f5:2b:82:d9:46:47:86:
                    15:45:3c:52:4c:fd:a3:3f:8c:d1:f3:27:b2:71:92:
                    88:cb:91:70:e0:93:3a:bd:9c:62:1f:f7:98:a0:77:
                    76:db:47:bf:9d:90:59:36:aa:f5:6c:36:89:af:3e:
                    30:7e:8c:07:7d:53:a0:2b:e7:12:a0:46:42:17:ca:
                    d2:f1:c8:c7:df:07:96:b1:c8:d5:94:ea:79:7d:c3:
                    4c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E2:87:A5:FB:79:B7:CB:6B:3A:4F:54:FC:58:9C:66:33:21:C4:D6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1b28f34-db3a-4018-b1b3-4e9fc83f4612.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.139.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:f6:e7:89:27:a8:c1:63:a2:c6:d8:12:49:5b:27:9b:b3:36:
         ce:29:4c:27:0c:e4:ae:57:36:84:58:0a:a7:01:eb:8c:56:17:
         a6:fa:fe:45:ef:31:dd:c3:b4:04:f4:f5:1b:18:b5:5f:49:72:
         8f:9f:0b:9a:0b:00:3f:ee:a2:7a:d7:d7:0c:ba:05:69:0b:29:
         cf:88:de:4e:88:0e:ed:4f:d9:a2:cb:6a:96:45:cf:1c:50:20:
         04:7a:72:69:4b:f5:71:a9:c5:89:1a:c8:f7:94:e7:e3:c9:21:
         52:5b:84:1c:46:f7:9e:fa:94:a5:34:35:d3:70:99:e3:3d:be:
         4d:4c:7d:17:60:9f:ba:ef:96:db:58:64:19:79:0e:10:cf:4b:
         4a:47:ca:70:d0:5f:7d:e9:80:b8:62:95:28:a0:0f:1f:4e:91:
         23:00:a6:5c:0b:b8:fc:fc:77:c5:41:27:8e:9e:bd:ec:95:44:
         d4:4f:e5:5f:52:d9:7b:cc:e4:a2:f6:64:0f:c7:cd:5a:4d:68:
         ca:77:cb:21:fb:b3:82:10:0f:40:c2:ac:3f:31:4a:57:2a:f0:
         f7:ea:48:ae:8f:a2:56:bd:7f:05:c5:02:d0:14:2a:97:1d:8a:
         5d:2b:de:e5:ad:cb:52:62:e3:c1:9c:4a:50:1d:04:26:5d:47:
         d4:10:72:07
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEGDUv7kWp0RdFOmI7yZqiB8kkCcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDQ1MDUwWhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0AwY2YwZTI2YTU4ZTk4NTc1OWFmMGI2OGI0NzE1YjIyMzQ0
Y2M3NDMzZTlkY2FhNGQxOTY0YmQ1NmIyMTdiNzdjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJovk27ljEinlYbXbseMDAODA8x8iBbEQTpTljFY26DhJn
YUCjkKJ6gVhRdajiZ3L4zdWVOSOy6yvFGoM0RzBA93jk/SdVNidJ7U4G8JLVNxxM
VGhik0APVrGGV4fWGcoXEcfNdDgt2webD4oAv6A+vgonWfrZcyDjkuczKxwpA5RD
Xtd/C7XX6qi/5RbmhbSncxXqDTua1E0S0TfGFFkQVnYbyRQga4jL54fI9SuC2UZH
hhVFPFJM/aM/jNHzJ7JxkojLkXDgkzq9nGIf95igd3bbR7+dkFk2qvVsNomvPjB+
jAd9U6Ar5xKgRkIXytLxyMffB5axyNWU6nl9w0yHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUzeKHpft5t8trOk9U/FicZjMhxNYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2QxYjI4ZjM0LWRiM2EtNDAxOC1iMWIzLTRlOWZjODNmNDYxMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFsixIwDQYJKoZIhvcNAQELBQADggEBAJ3254knqMFjosbYEklbJ5uzNs4p
TCcM5K5XNoRYCqcB64xWF6b6/kXvMd3DtAT09RsYtV9Jco+fC5oLAD/uonrX1wy6
BWkLKc+I3k6IDu1P2aLLapZFzxxQIAR6cmlL9XGpxYkayPeU5+PJIVJbhBxG9576
lKU0NdNwmeM9vk1MfRdgn7rvlttYZBl5DhDPS0pHynDQX33pgLhilSigDx9OkSMA
plwLuPz8d8VBJ46eveyVRNRP5V9S2XvM5KL2ZA/HzVpNaMp3yyH7s4IQD0DCrD8x
Slcq8PfqSK6Pola9fwXFAtAUKpcdil0r3uWty1Ji48GcSlAdBCZdR9QQcgc=
-----END CERTIFICATE-----