Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f55e7a6b-7c85-4d01-90aa-bd7d5ffecf54.roa
File:                     f55e7a6b-7c85-4d01-90aa-bd7d5ffecf54.roa (raw, json)
Hash identifier:          tHJdmDCroagJcTi4vCJ7Ouk8Ct0iI0KuX84ABAy+/G4=
Subject key identifier:   0D:5D:BA:0B:AE:75:EF:8D:C3:CF:55:D7:EC:B3:12:8D:5A:81:6E:4D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0DE791A8512C65F98DF14ED0311517EB5F78CF51
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f55e7a6b-7c85-4d01-90aa-bd7d5ffecf54.roa
Signing time:             Sun 19 Oct 2025 00:30:13 +0000
ROA not before:           Sun 19 Oct 2025 00:30:13 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.218.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e7:91:a8:51:2c:65:f9:8d:f1:4e:d0:31:15:17:eb:5f:78:cf:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 00:30:13 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=d5718124da19a603b1deb64d32da52991221a9a333bb483a0bc1ebbed8213f72, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4e:91:74:72:d3:b5:9b:35:69:73:6d:10:09:
                    5e:b9:f0:3b:e6:ba:2e:ba:5a:2a:87:90:a7:be:9a:
                    c3:60:4e:da:5f:af:6e:0a:24:8c:b5:c5:07:9b:9e:
                    20:ae:41:ba:75:e4:4b:6f:9f:fd:74:d9:18:e7:36:
                    88:6d:ce:0e:f1:c2:39:fd:7d:58:d2:52:79:b4:48:
                    a0:19:1b:e4:e0:03:5d:d5:d1:d7:22:06:55:cd:65:
                    ed:fb:c2:ed:bf:5e:f4:cd:62:a8:63:b0:18:c3:52:
                    58:62:68:0f:d2:33:b2:fa:26:25:fe:b8:fe:4b:37:
                    4a:e1:9c:6c:ba:03:d9:d9:f1:e5:6e:cd:27:6c:fc:
                    11:e9:50:d5:22:18:41:4b:2f:d0:ee:76:fc:ae:65:
                    f0:3a:25:4b:e4:c0:0f:19:7b:39:45:74:d4:0e:af:
                    ec:27:e9:07:14:29:e4:5c:e8:dd:e0:0b:77:64:28:
                    ea:61:c6:84:4b:66:05:a3:c7:af:a1:68:67:b2:9d:
                    d5:7f:24:de:7b:7b:61:3e:6d:f9:e9:6f:fe:82:d0:
                    a4:21:9b:03:ec:fd:12:dd:52:df:4c:22:ca:5e:08:
                    12:e0:3d:4e:be:40:6b:15:12:db:a7:dd:97:1e:5d:
                    4f:e7:02:82:48:6b:d5:2f:db:78:d9:04:a4:90:7b:
                    5e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5D:BA:0B:AE:75:EF:8D:C3:CF:55:D7:EC:B3:12:8D:5A:81:6E:4D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f55e7a6b-7c85-4d01-90aa-bd7d5ffecf54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:8c:2f:41:af:4f:58:79:3c:e8:e4:57:94:e2:b6:dd:aa:9e:
         25:ff:b6:d7:ca:a4:36:66:a7:ac:b1:2d:a2:27:13:81:fd:96:
         ff:1b:5c:32:70:18:05:8e:f7:09:22:a9:e0:b2:13:e5:48:8a:
         87:a0:75:58:55:31:af:9c:1c:ee:c5:10:42:10:3d:89:13:ab:
         77:03:a9:ed:af:b9:b8:9f:e2:4f:56:ea:9f:c3:79:79:74:2c:
         27:47:7c:f9:93:e0:fa:33:d8:13:2e:75:b0:4d:ff:2f:ff:46:
         a2:eb:df:a7:b7:ac:bb:4c:73:b7:77:19:90:43:03:f3:5a:62:
         3b:a7:f8:10:dc:0f:e0:6b:f3:66:f4:54:a7:b5:db:5d:be:77:
         da:c1:22:31:b3:d4:34:94:f2:5b:ba:c3:15:d6:f3:5c:1b:71:
         d0:c4:ab:ac:06:ad:c3:f8:0d:81:3e:5b:fb:6d:cf:ef:96:ec:
         b1:ff:bd:5d:38:67:45:0e:74:59:d4:f4:3d:05:25:18:e5:1c:
         e4:94:8c:50:fb:fc:ce:f8:49:12:c7:3e:da:11:87:07:34:7b:
         95:20:2b:c2:ed:db:57:68:03:fd:dd:8c:8b:75:01:62:0c:7f:
         2c:58:bf:51:90:0b:93:9e:c0:a7:8d:81:5a:91:2e:21:54:6f:
         d2:b1:8a:07
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUDeeRqFEsZfmN8U7QMRUX6194z1EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDAzMDEzWhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BkNTcxODEyNGRhMTlhNjAzYjFkZWI2NGQzMmRhNTI5OTEy
MjFhOWEzMzNiYjQ4M2EwYmMxZWJiZWQ4MjEzZjcyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCgTpF0ctO1mzVpc20QCV658Dvmui66WiqHkKe+msNgTtpf
r24KJIy1xQebniCuQbp15Etvn/102RjnNohtzg7xwjn9fVjSUnm0SKAZG+TgA13V
0dciBlXNZe37wu2/XvTNYqhjsBjDUlhiaA/SM7L6JiX+uP5LN0rhnGy6A9nZ8eVu
zSds/BHpUNUiGEFLL9DudvyuZfA6JUvkwA8ZezlFdNQOr+wn6QcUKeRc6N3gC3dk
KOphxoRLZgWjx6+haGeyndV/JN57e2E+bfnpb/6C0KQhmwPs/RLdUt9MIspeCBLg
PU6+QGsVEtun3ZceXU/nAoJIa9Uv23jZBKSQe16BAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUDV26C651743Dz1XX7LMSjVqBbk0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y1NWU3YTZiLTdjODUtNGQwMS05MGFhLWJkN2Q1ZmZlY2Y1NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFsitowDQYJKoZIhvcNAQELBQADggEBABaML0GvT1h5POjkV5Titt2qniX/
ttfKpDZmp6yxLaInE4H9lv8bXDJwGAWO9wkiqeCyE+VIioegdVhVMa+cHO7FEEIQ
PYkTq3cDqe2vubif4k9W6p/DeXl0LCdHfPmT4Poz2BMudbBN/y//RqLr36e3rLtM
c7d3GZBDA/NaYjun+BDcD+Br82b0VKe1212+d9rBIjGz1DSU8lu6wxXW81wbcdDE
q6wGrcP4DYE+W/ttz++W7LH/vV04Z0UOdFnU9D0FJRjlHOSUjFD7/M74SRLHPtoR
hwc0e5UgK8Lt21doA/3djIt1AWIMfyxYv1GQC5OewKeNgVqRLiFUb9Kxigc=
-----END CERTIFICATE-----