Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a8357c5-2061-4be3-ac67-125affdd13bb.roa
File:                     4a8357c5-2061-4be3-ac67-125affdd13bb.roa (raw, json)
Hash identifier:          5uGduP5r/+rilDIeGSCwS3prNXLkXKbDjUWSv5DkaMs=
Subject key identifier:   35:E5:13:48:A3:8D:D0:53:6B:F3:39:A4:E2:14:EC:22:D1:81:65:96
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       24DCDEEE46A0F8F160597C7CDF83B14B1929673F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a8357c5-2061-4be3-ac67-125affdd13bb.roa
Signing time:             Tue 04 Nov 2025 00:21:38 +0000
ROA not before:           Tue 04 Nov 2025 00:21:38 +0000
ROA not after:            Tue 09 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        75.22.192.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:dc:de:ee:46:a0:f8:f1:60:59:7c:7c:df:83:b1:4b:19:29:67:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:21:38 2025 GMT
            Not After : Dec  9 23:59:59 2025 GMT
        Subject: serialNumber=7c2875425024194fc259a3826675fdfcd0986630950755c093288463e1c4b70c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b6:18:25:0e:67:7b:8e:93:99:ec:45:ec:b0:
                    2b:63:ea:7b:a9:ae:b8:dd:aa:33:ec:a5:d7:69:3a:
                    7c:d7:34:e8:a1:89:1a:77:5d:64:29:89:07:01:c4:
                    88:76:ea:c1:a1:17:97:3f:bb:d5:63:e0:07:9c:43:
                    56:07:0c:a5:64:65:ab:c6:da:22:7a:a0:68:51:43:
                    52:d8:a8:25:4a:5e:f6:b4:3e:07:89:3f:95:8d:64:
                    76:ae:97:f0:0a:1f:8d:10:c4:eb:0e:78:c4:27:5c:
                    5d:ab:7b:9c:1c:8e:61:7e:c3:49:0c:52:f5:31:af:
                    fb:18:85:e7:42:51:a0:21:6c:64:e0:87:af:45:26:
                    8c:37:81:9c:80:4f:5e:a6:9a:df:2d:c8:98:ae:54:
                    32:c2:27:7b:ee:a5:0a:36:dc:fc:0d:b0:4a:20:75:
                    c3:ee:df:27:39:a6:c3:0b:80:65:86:1d:aa:37:e6:
                    3e:36:45:c8:a4:88:cb:6b:53:31:71:1c:ac:2b:9d:
                    a0:ea:8b:16:bc:1e:12:67:7e:91:49:64:45:31:3b:
                    fe:25:3f:53:4d:7c:5f:c3:95:f6:24:a0:0b:5d:56:
                    dc:60:7c:9f:c7:d0:13:61:3b:f0:5c:96:a8:91:03:
                    92:be:ea:53:9b:02:ea:31:1d:0e:f1:ad:8f:ae:da:
                    e0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E5:13:48:A3:8D:D0:53:6B:F3:39:A4:E2:14:EC:22:D1:81:65:96
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a8357c5-2061-4be3-ac67-125affdd13bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.22.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b5:51:fb:ff:56:57:7d:cd:8c:22:5f:32:50:4a:b1:3a:3f:cf:
         a2:6c:ad:91:9f:89:2e:2c:3b:fe:f7:e9:e8:fa:67:9a:a3:85:
         ad:d0:b2:eb:27:b3:cb:f8:63:01:a7:0c:a5:a8:5e:f4:35:79:
         11:c5:10:e3:c0:77:1a:f7:c9:43:e5:99:7a:e1:7b:f7:c8:97:
         60:42:b7:4b:21:9e:8c:45:64:b7:70:84:35:94:f1:ad:9a:38:
         ac:17:00:4c:7f:c8:ff:68:56:e5:ac:2b:cb:e9:ed:30:60:5a:
         9e:9d:c6:08:70:b8:a5:f3:df:0c:f7:be:4d:67:66:dc:9f:3c:
         60:6b:7d:aa:7e:8c:16:32:9d:95:a1:19:c1:6b:9c:d4:f7:b9:
         2b:31:5e:32:99:a9:78:b1:2f:3c:fb:b6:52:7e:22:e7:ae:d8:
         75:fd:ca:84:d4:de:fd:c6:1f:69:b6:72:4c:9a:2f:5f:5b:50:
         e1:f2:36:08:b2:0b:66:47:32:4c:6f:05:b6:24:d5:41:80:be:
         8f:e6:84:f6:0e:9c:c1:6a:22:c1:2b:05:c1:9b:4b:59:39:d2:
         d2:44:87:f3:9b:07:bf:06:67:40:9b:21:a5:00:cc:dd:00:60:
         99:88:0e:9b:e8:f6:5d:80:27:33:7e:70:2e:42:53:72:27:40:
         1b:12:11:a3
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJNze7kag+PFgWXx834OxSxkpZz8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTA0MDAyMTM4WhcNMjUxMjA5MjM1OTU5
WjB6MUkwRwYDVQQFE0A3YzI4NzU0MjUwMjQxOTRmYzI1OWEzODI2Njc1ZmRmY2Qw
OTg2NjMwOTUwNzU1YzA5MzI4ODQ2M2UxYzRiNzBjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCmthglDmd7jpOZ7EXssCtj6nuprrjdqjPspddpOnzXNOih
iRp3XWQpiQcBxIh26sGhF5c/u9Vj4AecQ1YHDKVkZavG2iJ6oGhRQ1LYqCVKXva0
PgeJP5WNZHaul/AKH40QxOsOeMQnXF2re5wcjmF+w0kMUvUxr/sYhedCUaAhbGTg
h69FJow3gZyAT16mmt8tyJiuVDLCJ3vupQo23PwNsEogdcPu3yc5psMLgGWGHao3
5j42RcikiMtrUzFxHKwrnaDqixa8HhJnfpFJZEUxO/4lP1NNfF/DlfYkoAtdVtxg
fJ/H0BNhO/BclqiRA5K+6lObAuoxHQ7xrY+u2uA5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUNeUTSKON0FNr8zmk4hTsItGBZZYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzRhODM1N2M1LTIwNjEtNGJlMy1hYzY3LTEyNWFmZmRkMTNiYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZLFsAwDQYJKoZIhvcNAQELBQADggEBALVR+/9WV33NjCJfMlBKsTo/z6Js
rZGfiS4sO/736ej6Z5qjha3Qsusns8v4YwGnDKWoXvQ1eRHFEOPAdxr3yUPlmXrh
e/fIl2BCt0shnoxFZLdwhDWU8a2aOKwXAEx/yP9oVuWsK8vp7TBgWp6dxghwuKXz
3wz3vk1nZtyfPGBrfap+jBYynZWhGcFrnNT3uSsxXjKZqXixLzz7tlJ+Iueu2HX9
yoTU3v3GH2m2ckyaL19bUOHyNgiyC2ZHMkxvBbYk1UGAvo/mhPYOnMFqIsErBcGb
S1k50tJEh/ObB78GZ0CbIaUAzN0AYJmIDpvo9l2AJzN+cC5CU3InQBsSEaM=
-----END CERTIFICATE-----