Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee2bdbae-2ee4-4e26-9387-1e86af4f3b89.roa
File:                     ee2bdbae-2ee4-4e26-9387-1e86af4f3b89.roa (raw, json)
Hash identifier:          rjR+PULujpdsrA1eEdiv4Q6QfXGdJeQVer8Kf1oJpd4=
Subject key identifier:   75:61:55:02:06:48:5D:43:02:0E:ED:12:9E:AD:EA:E7:84:FD:69:D7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2A6DA045439E54E8D93267E90B9FC80DA025D346
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee2bdbae-2ee4-4e26-9387-1e86af4f3b89.roa
Signing time:             Sun 19 Oct 2025 01:50:03 +0000
ROA not before:           Sun 19 Oct 2025 01:50:03 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.188.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:6d:a0:45:43:9e:54:e8:d9:32:67:e9:0b:9f:c8:0d:a0:25:d3:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 01:50:03 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=5fb52442af6b7a32bc28464ac92d6bca8caf5dcb59ad82195eaa6bfff7a03ded, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:10:37:04:81:04:9a:eb:28:2e:03:bb:01:03:
                    1f:36:55:8c:5f:fe:45:64:4b:ba:ce:7a:ac:df:69:
                    37:95:b2:4d:8a:37:00:49:97:6a:08:19:99:c7:76:
                    83:de:b7:d8:75:09:b3:de:2c:29:0f:11:db:ce:fd:
                    b1:a5:dd:50:83:8c:6d:39:fe:32:8d:bb:96:44:bb:
                    a6:7d:0e:52:a2:93:e0:95:b3:86:d2:b3:ac:d3:b8:
                    55:c5:b9:59:ac:b2:75:26:50:5f:91:63:b3:67:73:
                    fb:50:ba:f7:10:3f:8f:53:83:07:4c:e6:39:91:cd:
                    bb:9b:a6:56:86:31:e1:24:17:c2:3c:7c:51:4d:c1:
                    bd:84:f7:ed:75:93:b9:b9:f7:20:eb:02:29:46:58:
                    ce:05:b4:51:ee:7b:40:ba:13:c2:58:56:ab:47:9c:
                    5d:f3:1f:2a:b2:64:1f:93:7f:58:2d:63:de:23:fe:
                    82:35:61:53:3e:ba:9c:32:d3:e2:ee:59:be:b7:6f:
                    52:8b:a5:a0:52:5b:2b:17:0d:25:f9:83:09:99:65:
                    94:97:ae:28:51:0a:57:92:4e:d0:ea:92:b2:04:06:
                    84:9b:f6:8c:b3:10:0a:3c:17:87:3c:aa:df:8e:7c:
                    c2:e3:b1:89:e3:39:7a:9e:da:90:a5:25:c8:00:ac:
                    81:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:61:55:02:06:48:5D:43:02:0E:ED:12:9E:AD:EA:E7:84:FD:69:D7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee2bdbae-2ee4-4e26-9387-1e86af4f3b89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:19:90:6d:7c:0c:96:9f:fa:ac:7d:0d:21:3e:9f:2e:01:f1:
         b1:9c:44:90:7a:a1:a5:bf:72:59:b0:fe:05:ff:7d:98:ca:46:
         d0:19:21:93:38:85:07:1c:81:93:a7:2e:df:9c:53:6d:bc:1e:
         f3:e0:65:c2:7f:90:31:82:9d:b0:42:62:51:4e:94:46:d1:5e:
         39:1e:43:42:d3:61:8a:59:04:6f:0f:aa:ad:a0:4e:60:a4:f7:
         ad:61:ea:ec:dc:80:6e:ae:e1:d3:62:07:65:31:a9:99:17:ab:
         4b:0d:56:0a:67:7b:d4:3f:bd:f2:ca:da:1a:2c:ae:82:bd:a2:
         12:61:47:7c:5c:b8:3e:f7:ee:0b:af:fa:22:3b:09:75:96:6f:
         ff:ae:ef:f1:2c:17:c1:46:3f:f9:f8:3d:ac:e9:70:b9:e4:25:
         67:0e:d9:1e:c5:be:62:c5:36:1e:65:7f:87:5c:9c:38:e7:a8:
         50:e0:b2:b0:dc:3c:e5:f1:4e:ea:cf:1f:55:0c:51:0a:98:d5:
         32:f2:04:a8:34:05:54:e4:2c:c4:c0:1d:22:c0:69:04:13:50:
         46:b7:61:5f:44:79:7d:b8:74:e8:11:97:ce:c7:82:89:7f:e0:
         97:d7:a2:c5:d5:0f:f3:75:93:b2:2c:78:0d:49:8a:3e:4f:d3:
         d7:26:d3:89
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUKm2gRUOeVOjZMmfpC5/IDaAl00YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDE1MDAzWhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0A1ZmI1MjQ0MmFmNmI3YTMyYmMyODQ2NGFjOTJkNmJjYThj
YWY1ZGNiNTlhZDgyMTk1ZWFhNmJmZmY3YTAzZGVkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCMEDcEgQSa6yguA7sBAx82VYxf/kVkS7rOeqzfaTeVsk2K
NwBJl2oIGZnHdoPet9h1CbPeLCkPEdvO/bGl3VCDjG05/jKNu5ZEu6Z9DlKik+CV
s4bSs6zTuFXFuVmssnUmUF+RY7Nnc/tQuvcQP49TgwdM5jmRzbubplaGMeEkF8I8
fFFNwb2E9+11k7m59yDrAilGWM4FtFHue0C6E8JYVqtHnF3zHyqyZB+Tf1gtY94j
/oI1YVM+upwy0+LuWb63b1KLpaBSWysXDSX5gwmZZZSXrihRCleSTtDqkrIEBoSb
9oyzEAo8F4c8qt+OfMLjsYnjOXqe2pClJcgArIHZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUdWFVAgZIXUMCDu0Snq3q54T9adcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2VlMmJkYmFlLTJlZTQtNGUyNi05Mzg3LTFlODZhZjRmM2I4OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsirwwDQYJKoZIhvcNAQELBQADggEBAGsZkG18DJaf+qx9DSE+ny4B8bGc
RJB6oaW/clmw/gX/fZjKRtAZIZM4hQccgZOnLt+cU228HvPgZcJ/kDGCnbBCYlFO
lEbRXjkeQ0LTYYpZBG8Pqq2gTmCk961h6uzcgG6u4dNiB2UxqZkXq0sNVgpne9Q/
vfLK2hosroK9ohJhR3xcuD737guv+iI7CXWWb/+u7/EsF8FGP/n4PazpcLnkJWcO
2R7FvmLFNh5lf4dcnDjnqFDgsrDcPOXxTurPH1UMUQqY1TLyBKg0BVTkLMTAHSLA
aQQTUEa3YV9EeX24dOgRl87Hgol/4JfXosXVD/N1k7IseA1Jij5P09cm04k=
-----END CERTIFICATE-----