Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd225b3a-b275-4f6c-b8e1-94171ec2bcda.roa
File:                     fd225b3a-b275-4f6c-b8e1-94171ec2bcda.roa (raw, json)
Hash identifier:          ExZ/DB7fpQVPkJY+7sljmFD8um6s79PF/Tgy/WNkWus=
Subject key identifier:   1F:72:4F:13:76:56:4A:22:34:37:3C:52:DA:AB:35:A3:C6:E0:59:60
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6220962BDF2362C07E28B610FACA58A5609DD2A8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd225b3a-b275-4f6c-b8e1-94171ec2bcda.roa
Signing time:             Mon 20 Oct 2025 01:11:57 +0000
ROA not before:           Mon 20 Oct 2025 01:11:57 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.139.128.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:20:96:2b:df:23:62:c0:7e:28:b6:10:fa:ca:58:a5:60:9d:d2:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 01:11:57 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=cc726e4835a5f814fd191566d37bb29de50b4c3b5bc608f8afdf1081f3baae48, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0f:70:3e:15:f5:72:f3:32:c9:06:b7:7e:9e:
                    ae:65:35:3c:b8:26:b7:76:76:6b:65:26:bf:82:c8:
                    76:28:51:47:f7:75:66:c5:71:2d:55:9d:73:57:57:
                    55:67:ce:f1:4a:0b:e6:5d:29:8b:ca:5c:f0:44:c6:
                    ac:7d:bc:40:3e:1e:17:78:7b:53:98:80:b8:cb:45:
                    9b:bb:2b:39:cf:cb:82:2d:0a:99:a2:63:ce:b1:8c:
                    1b:d8:7c:15:05:cd:c8:7d:9d:a9:a2:ef:29:28:d1:
                    95:41:19:2d:f8:68:44:6f:cb:93:a7:a4:90:62:87:
                    3e:d3:53:52:a4:dd:2e:5a:4d:7f:5d:8f:a4:b4:20:
                    c0:49:14:ee:1c:99:d3:8e:7b:3d:c9:84:14:1e:5d:
                    0b:fd:58:49:13:e4:0f:e3:e3:70:8b:4c:6c:a5:fc:
                    18:86:3e:f0:e3:4a:19:05:82:f7:29:50:41:5c:b4:
                    3e:d6:09:56:bc:dd:0b:ce:0a:59:c4:77:8e:99:38:
                    22:fc:24:8b:8d:4c:71:3a:61:0f:29:04:d3:9e:72:
                    1d:9d:ad:18:6c:d8:3d:c0:e4:60:03:eb:09:a8:dc:
                    23:1b:17:3f:09:95:c3:35:7f:8c:67:ff:72:06:2e:
                    50:e4:6a:92:4a:8b:36:5d:68:68:f9:6d:de:f7:87:
                    b1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:72:4F:13:76:56:4A:22:34:37:3C:52:DA:AB:35:A3:C6:E0:59:60
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd225b3a-b275-4f6c-b8e1-94171ec2bcda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.139.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6e:fe:d0:c9:d8:cc:3c:c1:89:39:8e:17:81:a8:0d:41:39:b5:
         60:77:f9:c2:c5:ac:01:bd:9b:bc:42:f8:16:44:b4:a4:a8:98:
         a4:1e:fc:cb:4d:a3:a8:cc:30:7c:d0:35:0f:b9:ee:17:3b:d3:
         e8:8b:cc:82:29:64:e9:64:ad:92:8b:36:91:6a:0a:23:88:2f:
         a3:79:5c:86:bf:00:53:85:4e:bb:3a:47:16:8b:a2:47:6f:59:
         5f:d3:4a:0d:82:af:be:7e:eb:67:49:e4:1a:30:c8:e9:ba:20:
         8a:48:6d:c8:ac:00:a7:78:e3:3c:8c:6b:43:8d:7e:28:ae:43:
         56:17:49:2d:50:c1:61:2d:ff:60:87:a2:93:0c:d2:e8:61:5d:
         2c:7a:27:38:6d:92:b0:fd:87:3b:d4:73:6c:5c:9a:24:87:e2:
         7d:49:e4:82:c9:5f:5a:5f:71:4e:60:6b:a4:5e:6f:b5:91:4b:
         f4:c1:da:21:b2:19:01:4f:d6:78:3d:04:45:3d:ea:7e:e5:9a:
         b5:65:18:f2:f1:bb:80:cd:61:bc:2e:5f:f8:70:aa:88:b7:af:
         23:6f:92:08:4a:ec:16:51:2b:0d:6d:11:7d:46:6b:5a:ee:54:
         56:b0:a6:40:de:6a:78:2a:6e:83:48:9c:22:57:2f:00:5c:67:
         67:62:d5:72
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYiCWK98jYsB+KLYQ+spYpWCd0qgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDExMTU3WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BjYzcyNmU0ODM1YTVmODE0ZmQxOTE1NjZkMzdiYjI5ZGU1
MGI0YzNiNWJjNjA4ZjhhZmRmMTA4MWYzYmFhZTQ4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC/D3A+FfVy8zLJBrd+nq5lNTy4Jrd2dmtlJr+CyHYoUUf3
dWbFcS1VnXNXV1VnzvFKC+ZdKYvKXPBExqx9vEA+Hhd4e1OYgLjLRZu7KznPy4It
CpmiY86xjBvYfBUFzch9nami7yko0ZVBGS34aERvy5OnpJBihz7TU1Kk3S5aTX9d
j6S0IMBJFO4cmdOOez3JhBQeXQv9WEkT5A/j43CLTGyl/BiGPvDjShkFgvcpUEFc
tD7WCVa83QvOClnEd46ZOCL8JIuNTHE6YQ8pBNOech2drRhs2D3A5GAD6wmo3CMb
Fz8JlcM1f4xn/3IGLlDkapJKizZdaGj5bd73h7EbAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUH3JPE3ZWSiI0NzxS2qs1o8bgWWAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2ZkMjI1YjNhLWIyNzUtNGY2Yy1iOGUxLTk0MTcxZWMyYmNkYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAdsi4AwDQYJKoZIhvcNAQELBQADggEBAG7+0MnYzDzBiTmOF4GoDUE5tWB3
+cLFrAG9m7xC+BZEtKSomKQe/MtNo6jMMHzQNQ+57hc70+iLzIIpZOlkrZKLNpFq
CiOIL6N5XIa/AFOFTrs6RxaLokdvWV/TSg2Cr75+62dJ5BowyOm6IIpIbcisAKd4
4zyMa0ONfiiuQ1YXSS1QwWEt/2CHopMM0uhhXSx6JzhtkrD9hzvUc2xcmiSH4n1J
5ILJX1pfcU5ga6Reb7WRS/TB2iGyGQFP1ng9BEU96n7lmrVlGPLxu4DNYbwuX/hw
qoi3ryNvkghK7BZRKw1tEX1Ga1ruVFawpkDeangqboNInCJXLwBcZ2di1XI=
-----END CERTIFICATE-----