Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db15fac3-0fab-4f4d-9dff-ea66adf157f3.roa
File:                     db15fac3-0fab-4f4d-9dff-ea66adf157f3.roa (raw, json)
Hash identifier:          p8XWYAmbh7kBINM5UrNZ21aTvwhWwCSGJicrhTSITi8=
Subject key identifier:   CC:DF:3B:F9:97:F3:E4:26:57:B8:CE:19:40:36:70:7B:5D:75:70:50
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       50442C20F1075ED8DA5B7E3B35CBFF94B653DFB0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db15fac3-0fab-4f4d-9dff-ea66adf157f3.roa
Signing time:             Mon 20 Oct 2025 06:10:50 +0000
ROA not before:           Mon 20 Oct 2025 06:10:50 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.159.106.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:44:2c:20:f1:07:5e:d8:da:5b:7e:3b:35:cb:ff:94:b6:53:df:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 06:10:50 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=a32255b06c9463f0d72122ccac19c62ad96e7330675bc335f5afc67df10c610e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:40:59:5f:78:b0:3f:8a:66:fb:c7:05:f2:ce:
                    7f:f7:3f:76:e1:87:47:1d:4d:62:00:cb:93:4b:f0:
                    86:8f:a2:27:27:c2:51:fc:cc:03:73:bf:15:94:73:
                    07:92:01:af:b1:ad:35:1d:d0:1e:f6:9c:df:26:df:
                    05:05:63:e4:c5:6e:f2:84:84:31:9c:0b:62:12:61:
                    4e:72:5e:89:e8:68:c8:49:77:1d:54:40:df:15:ed:
                    7f:80:ed:20:6b:34:52:4d:8b:03:b5:a2:ca:2a:5b:
                    47:cc:de:e8:b3:96:1a:3b:d1:88:18:82:3c:f6:35:
                    f0:3f:15:97:49:7b:9e:06:c6:e3:82:f4:15:a9:ac:
                    09:f6:dd:91:18:62:a7:6f:c0:9c:b2:f6:17:a6:dd:
                    50:1c:27:c5:1b:89:71:2a:c5:52:a3:1e:40:d0:da:
                    d8:b4:01:1f:a3:05:fc:c2:8a:06:ca:6f:11:16:6d:
                    de:2e:76:05:96:61:41:f6:d6:5c:95:71:7a:6c:a8:
                    08:c1:bb:89:3f:7c:fa:4e:c0:dd:53:f5:05:33:59:
                    e5:77:e6:53:bd:5f:9d:39:c7:be:09:31:8e:48:ca:
                    da:e2:ec:e2:36:ad:58:24:84:cd:2a:46:6b:38:10:
                    d3:19:58:7c:59:ed:36:a4:f2:c0:95:b6:ac:0f:e4:
                    e8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:DF:3B:F9:97:F3:E4:26:57:B8:CE:19:40:36:70:7B:5D:75:70:50
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db15fac3-0fab-4f4d-9dff-ea66adf157f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.159.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:23:cd:75:d0:1a:7d:00:fb:4b:8b:20:a4:6b:f1:b1:85:9e:
         5b:dc:33:57:87:80:47:2c:10:8d:90:d8:8b:14:94:62:2d:72:
         37:ea:ec:cc:de:1b:16:af:c9:4c:3d:fc:0f:83:02:a7:6d:24:
         fb:e1:ee:74:c4:fb:0c:a4:3d:2d:4e:51:9b:8c:4c:7b:80:78:
         a0:06:a2:0b:77:3d:37:62:ea:dd:e6:ae:b6:5a:df:be:03:f8:
         73:89:a8:8e:fa:3e:67:a2:a9:1a:6e:29:68:b7:7f:e7:21:65:
         d3:4c:61:ae:48:37:bc:a6:dd:bd:7c:fb:60:b2:da:b0:e1:f5:
         67:4e:35:03:99:d6:6c:f4:12:f2:11:34:87:2f:72:48:d3:38:
         d6:9d:10:3c:d5:1b:69:f9:bb:42:a5:ac:bc:43:ae:27:d8:9a:
         f4:db:cf:6e:0e:d2:2b:51:e9:9a:9f:29:9d:8e:99:d3:69:af:
         0e:21:ed:c1:6a:40:8c:1a:dd:db:df:d3:7e:14:32:75:3d:de:
         c3:15:e1:ec:c9:24:43:ce:65:4a:78:67:24:c4:06:f1:10:70:
         e3:13:b6:7d:2a:a4:ba:58:e3:6c:6c:86:3a:69:9b:04:6d:93:
         8f:a3:74:5c:06:f6:66:c0:ca:be:86:89:2f:92:8e:39:45:95:
         1e:0d:b5:03
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUUEQsIPEHXtjaW347Ncv/lLZT37AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDYxMDUwWhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BhMzIyNTViMDZjOTQ2M2YwZDcyMTIyY2NhYzE5YzYyYWQ5
NmU3MzMwNjc1YmMzMzVmNWFmYzY3ZGYxMGM2MTBlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCUQFlfeLA/imb7xwXyzn/3P3bhh0cdTWIAy5NL8IaPoicn
wlH8zANzvxWUcweSAa+xrTUd0B72nN8m3wUFY+TFbvKEhDGcC2ISYU5yXonoaMhJ
dx1UQN8V7X+A7SBrNFJNiwO1osoqW0fM3uizlho70YgYgjz2NfA/FZdJe54GxuOC
9BWprAn23ZEYYqdvwJyy9hem3VAcJ8UbiXEqxVKjHkDQ2ti0AR+jBfzCigbKbxEW
bd4udgWWYUH21lyVcXpsqAjBu4k/fPpOwN1T9QUzWeV35lO9X505x74JMY5Iytri
7OI2rVgkhM0qRms4ENMZWHxZ7Tak8sCVtqwP5OghAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUzN87+Zfz5CZXuM4ZQDZwe111cFAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2RiMTVmYWMzLTBmYWItNGY0ZC05ZGZmLWVhNjZhZGYxNTdmMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsn2owDQYJKoZIhvcNAQELBQADggEBAE0jzXXQGn0A+0uLIKRr8bGFnlvc
M1eHgEcsEI2Q2IsUlGItcjfq7MzeGxavyUw9/A+DAqdtJPvh7nTE+wykPS1OUZuM
THuAeKAGogt3PTdi6t3mrrZa374D+HOJqI76PmeiqRpuKWi3f+chZdNMYa5IN7ym
3b18+2Cy2rDh9WdONQOZ1mz0EvIRNIcvckjTONadEDzVG2n5u0KlrLxDrifYmvTb
z24O0itR6ZqfKZ2OmdNprw4h7cFqQIwa3dvf034UMnU93sMV4ezJJEPOZUp4ZyTE
BvEQcOMTtn0qpLpY42xshjppmwRtk4+jdFwG9mbAyr6GiS+SjjlFlR4NtQM=
-----END CERTIFICATE-----