Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/721aa7be-d4b7-4d44-97d2-6fbc2144f45f.roa
File:                     721aa7be-d4b7-4d44-97d2-6fbc2144f45f.roa (raw, json)
Hash identifier:          QOAofHFXo7JtED5xo5x+24/rDsLV0LzcrK/Vn6LsYe4=
Subject key identifier:   C7:6D:03:77:2B:B5:B7:96:DB:F0:B6:64:E1:D4:D0:94:84:80:92:E1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2534B9754632B7E316E2575A872E8B811B70DA10
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/721aa7be-d4b7-4d44-97d2-6fbc2144f45f.roa
Signing time:             Sat 25 Oct 2025 00:20:41 +0000
ROA not before:           Sat 25 Oct 2025 00:20:41 +0000
ROA not after:            Sat 29 Nov 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        107.176.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:34:b9:75:46:32:b7:e3:16:e2:57:5a:87:2e:8b:81:1b:70:da:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 25 00:20:41 2025 GMT
            Not After : Nov 29 23:59:59 2025 GMT
        Subject: serialNumber=164fa3da7bf4c4a3b6c0ee73b0e1655506fac24ddb807bcfc88f16c1b9c6e4b5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:91:d9:d6:11:a1:ee:5b:87:e7:9f:1a:14:8c:
                    2c:dc:71:42:04:25:d8:4a:bb:b5:d1:2d:15:9a:d9:
                    e2:3d:c1:82:b8:d9:b4:b3:fb:9d:d3:90:d9:75:30:
                    05:d1:39:4b:d0:cc:bc:ad:c5:50:10:41:2f:60:d4:
                    20:e3:75:09:3e:14:f4:36:f1:07:fa:e7:d4:af:39:
                    15:78:5e:72:f5:ab:3d:43:0f:5a:6b:e5:4c:56:7f:
                    51:c7:2a:6b:c2:69:11:93:10:67:67:75:f0:b8:b6:
                    19:63:4e:56:b1:7a:c9:75:ef:f2:4d:38:71:22:94:
                    7d:4c:51:95:a2:fc:2b:39:d2:05:6a:5b:3f:ad:81:
                    2d:c6:2e:a2:13:14:ad:34:d6:6f:89:a1:ec:45:dc:
                    42:5f:92:e1:fa:a8:a8:e8:16:ad:64:47:f3:38:af:
                    f6:c5:60:1e:73:db:c9:dd:5c:6d:02:fc:3f:bf:cd:
                    dc:ff:cf:67:8a:c5:97:50:2c:b2:07:f7:6a:1a:a1:
                    5f:3e:bd:72:4a:81:65:bb:39:f7:82:32:87:7b:22:
                    48:55:45:c1:ee:48:89:a9:0b:4e:9b:f4:75:f6:57:
                    ec:35:81:94:2a:c5:79:68:91:11:9c:3e:64:11:41:
                    af:3e:bd:8a:30:98:8e:67:00:ac:4d:83:b3:0a:6b:
                    8f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6D:03:77:2B:B5:B7:96:DB:F0:B6:64:E1:D4:D0:94:84:80:92:E1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/721aa7be-d4b7-4d44-97d2-6fbc2144f45f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.176.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         0a:e1:0c:85:fc:4f:8d:a9:8d:96:93:06:d3:59:fa:39:4a:80:
         35:47:43:6e:9e:1e:ac:66:56:ae:10:95:f1:f2:29:9c:8b:e1:
         ec:3b:de:50:f9:fe:97:e6:f3:7d:96:af:6c:25:1a:7e:e5:9e:
         56:c0:f8:b1:6d:0d:d8:0a:df:44:e6:08:99:20:c6:ce:92:8f:
         77:6d:97:18:c1:5d:3c:2d:e6:5b:a2:5b:f8:57:e3:fa:44:1b:
         e4:10:f6:36:a6:34:16:21:15:96:ef:ce:52:cc:94:b5:40:37:
         9e:52:e9:a2:7b:75:51:d2:8c:c8:47:a2:f5:b1:6c:e1:d9:03:
         af:58:b5:ce:32:7b:41:eb:b3:03:7b:36:38:18:bf:3a:7a:45:
         c2:b1:19:ca:04:22:54:73:39:61:de:a7:32:36:de:f3:a4:2f:
         9f:d8:48:6f:b1:6f:d3:43:36:ba:0d:93:06:78:4e:fa:a0:0b:
         55:f7:5a:33:bd:b2:55:20:67:b2:b9:34:ae:06:89:62:bb:52:
         49:b4:0e:68:e5:f9:81:94:4e:01:cf:b0:65:dc:1c:5a:ec:bb:
         fd:b1:6c:92:94:30:24:8d:dc:72:f4:91:e3:fd:e0:a3:b5:54:
         f8:00:65:61:76:a9:e3:34:de:54:cc:fc:ee:83:87:93:ab:2b:
         59:a9:a4:a6
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUJTS5dUYyt+MW4ldahy6LgRtw2hAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDI1MDAyMDQxWhcNMjUxMTI5MjM1OTU5
WjB6MUkwRwYDVQQFE0AxNjRmYTNkYTdiZjRjNGEzYjZjMGVlNzNiMGUxNjU1NTA2
ZmFjMjRkZGI4MDdiY2ZjODhmMTZjMWI5YzZlNGI1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC0kdnWEaHuW4fnnxoUjCzccUIEJdhKu7XRLRWa2eI9wYK4
2bSz+53TkNl1MAXROUvQzLytxVAQQS9g1CDjdQk+FPQ28Qf659SvORV4XnL1qz1D
D1pr5UxWf1HHKmvCaRGTEGdndfC4thljTlaxesl17/JNOHEilH1MUZWi/Cs50gVq
Wz+tgS3GLqITFK001m+JoexF3EJfkuH6qKjoFq1kR/M4r/bFYB5z28ndXG0C/D+/
zdz/z2eKxZdQLLIH92oaoV8+vXJKgWW7OfeCMod7IkhVRcHuSImpC06b9HX2V+w1
gZQqxXlokRGcPmQRQa8+vYowmI5nAKxNg7MKa48bAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUx20Ddyu1t5bb8LZk4dTQlISAkuEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzcyMWFhN2JlLWQ0YjctNGQ0NC05N2QyLTZmYmMyMTQ0ZjQ1Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwFrsDANBgkqhkiG9w0BAQsFAAOCAQEACuEMhfxPjamNlpMG01n6OUqANUdD
bp4erGZWrhCV8fIpnIvh7DveUPn+l+bzfZavbCUafuWeVsD4sW0N2ArfROYImSDG
zpKPd22XGMFdPC3mW6Jb+Ffj+kQb5BD2NqY0FiEVlu/OUsyUtUA3nlLpont1UdKM
yEei9bFs4dkDr1i1zjJ7QeuzA3s2OBi/OnpFwrEZygQiVHM5Yd6nMjbe86Qvn9hI
b7Fv00M2ug2TBnhO+qALVfdaM72yVSBnsrk0rgaJYrtSSbQOaOX5gZROAc+wZdwc
Wuy7/bFskpQwJI3ccvSR4/3go7VU+ABlYXap4zTeVMz87oOHk6srWamkpg==
-----END CERTIFICATE-----