Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f263f9fd-d770-4d0e-b18e-c03237b7c99e.roa
File:                     f263f9fd-d770-4d0e-b18e-c03237b7c99e.roa (raw, json)
Hash identifier:          zeJSjEklNkFFMw2Vq9skJPogWv+yQUWBqwO0nHkzRPs=
Subject key identifier:   72:68:BD:D0:20:B8:36:D9:4B:54:D2:50:64:85:09:3E:F5:8B:3D:91
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       73E3830CBE837890D788BF04C03C6BECA38E55C3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f263f9fd-d770-4d0e-b18e-c03237b7c99e.roa
Signing time:             Sun 19 Oct 2025 02:11:01 +0000
ROA not before:           Sun 19 Oct 2025 02:11:01 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.139.71.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e3:83:0c:be:83:78:90:d7:88:bf:04:c0:3c:6b:ec:a3:8e:55:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 02:11:01 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=e084634eda6e26c31c13549ae4e5f66a645b293aa77dac577ce1c48157a5eb6d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a3:eb:33:fc:9d:ed:ec:9d:d9:41:29:bd:63:
                    1c:03:2e:36:9c:98:2b:c7:b0:4e:8d:e9:af:a6:f1:
                    5a:17:1d:d8:da:7c:03:ea:50:0f:f6:d9:58:26:9a:
                    35:18:b3:20:0e:a6:09:66:f6:55:0f:6b:91:3f:c2:
                    df:35:63:3a:e4:a4:7b:12:44:4f:36:70:a4:f4:e9:
                    b5:0b:f6:41:73:b8:11:51:fd:23:e5:a3:e5:b0:51:
                    3a:27:06:19:5f:7b:71:cc:75:84:f3:7e:58:20:f1:
                    46:c1:85:d5:87:da:6d:c1:4f:83:84:eb:e7:61:2d:
                    5c:ff:a5:b3:ac:eb:b4:6d:1a:12:05:59:5d:d0:1a:
                    16:0a:0b:52:75:7a:a2:ef:21:11:ba:17:30:68:7c:
                    3f:c9:aa:42:5d:76:50:cb:fa:ff:ce:0a:0c:8b:23:
                    6a:ac:5e:31:3a:4a:33:58:2a:33:70:3f:9a:b4:7b:
                    22:e5:8a:28:eb:67:05:a5:ee:5f:c6:bd:7f:49:fd:
                    de:19:02:7a:50:0f:c3:58:dc:f4:5e:26:82:2a:3c:
                    e1:c8:13:4d:a3:df:20:38:ba:a7:29:a3:bb:d6:39:
                    6f:45:46:8f:19:80:a1:b0:cd:7f:4c:7d:af:91:60:
                    56:b7:13:c8:ba:da:f1:51:ef:24:3b:a2:2d:3e:29:
                    24:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:68:BD:D0:20:B8:36:D9:4B:54:D2:50:64:85:09:3E:F5:8B:3D:91
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f263f9fd-d770-4d0e-b18e-c03237b7c99e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.139.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:e5:72:16:b6:32:66:a9:e1:7a:c7:7b:73:d6:aa:c1:b2:09:
         f4:75:4f:f4:7e:dc:11:f2:d3:40:14:ef:3e:b7:3c:16:55:94:
         8e:7c:57:0c:91:42:7f:a9:4d:23:5e:21:3d:f7:c0:77:7b:e8:
         bf:29:9c:98:6b:a4:0b:bc:e6:97:8d:bf:59:9a:d7:e9:3f:c1:
         41:8e:02:ed:95:78:8b:23:01:a7:5f:99:23:42:55:eb:b2:9d:
         78:5a:9a:e6:c6:fc:d3:16:82:e8:ac:64:72:d4:01:6c:86:cb:
         51:ff:51:76:e9:df:f9:ab:5d:ba:da:c0:fa:73:7b:c8:ba:2b:
         a7:94:e9:fd:f9:92:61:c7:5b:19:9e:b8:3a:1b:5a:6f:fa:0c:
         9f:8a:19:f3:42:85:90:2b:37:78:8e:3d:4b:08:0d:15:44:9c:
         4a:4d:de:82:fe:02:20:41:a7:f3:2f:8b:f5:ef:c9:f4:d9:6c:
         c8:2b:67:87:6a:4f:a7:c9:cc:d9:cf:e4:89:2d:31:98:8f:4c:
         a8:d9:b3:38:7f:aa:8e:15:7b:7b:3a:b2:36:d9:da:ee:4b:11:
         13:93:df:9e:b5:73:a1:c7:d2:c6:c4:85:81:bf:04:4f:2e:95:
         7c:d1:34:d9:5a:2c:9c:75:a1:98:3c:8b:b7:82:9d:57:39:30:
         ad:e0:9a:c1
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUc+ODDL6DeJDXiL8EwDxr7KOOVcMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDIxMTAxWhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BlMDg0NjM0ZWRhNmUyNmMzMWMxMzU0OWFlNGU1ZjY2YTY0
NWIyOTNhYTc3ZGFjNTc3Y2UxYzQ4MTU3YTVlYjZkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC/o+sz/J3t7J3ZQSm9YxwDLjacmCvHsE6N6a+m8VoXHdja
fAPqUA/22VgmmjUYsyAOpglm9lUPa5E/wt81YzrkpHsSRE82cKT06bUL9kFzuBFR
/SPlo+WwUTonBhlfe3HMdYTzflgg8UbBhdWH2m3BT4OE6+dhLVz/pbOs67RtGhIF
WV3QGhYKC1J1eqLvIRG6FzBofD/JqkJddlDL+v/OCgyLI2qsXjE6SjNYKjNwP5q0
eyLliijrZwWl7l/GvX9J/d4ZAnpQD8NY3PReJoIqPOHIE02j3yA4uqcpo7vWOW9F
Ro8ZgKGwzX9Mfa+RYFa3E8i62vFR7yQ7oi0+KSSVAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUcmi90CC4NtlLVNJQZIUJPvWLPZEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2YyNjNmOWZkLWQ3NzAtNGQwZS1iMThlLWMwMzIzN2I3Yzk5ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsi0cwDQYJKoZIhvcNAQELBQADggEBAG3lcha2Mmap4XrHe3PWqsGyCfR1
T/R+3BHy00AU7z63PBZVlI58VwyRQn+pTSNeIT33wHd76L8pnJhrpAu85peNv1ma
1+k/wUGOAu2VeIsjAadfmSNCVeuynXhamubG/NMWguisZHLUAWyGy1H/UXbp3/mr
XbrawPpze8i6K6eU6f35kmHHWxmeuDobWm/6DJ+KGfNChZArN3iOPUsIDRVEnEpN
3oL+AiBBp/Mvi/XvyfTZbMgrZ4dqT6fJzNnP5IktMZiPTKjZszh/qo4Ve3s6sjbZ
2u5LEROT3561c6HH0sbEhYG/BE8ulXzRNNlaLJx1oZg8i7eCnVc5MK3gmsE=
-----END CERTIFICATE-----