Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/748f2f33-3075-416b-84fb-09804fc32e95.roa
File:                     748f2f33-3075-416b-84fb-09804fc32e95.roa (raw, json)
Hash identifier:          HeVGyaKZKZEjdW/vIV9isLZN9tGdkLLUCquOlqbz/BY=
Subject key identifier:   4C:DB:48:84:82:1A:F7:37:9C:84:9F:6C:27:88:15:9F:55:AC:E3:57
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0A3DD78093E94EC50C6DA2C6B4133D579F35EF3B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/748f2f33-3075-416b-84fb-09804fc32e95.roa
Signing time:             Tue 11 Nov 2025 00:41:22 +0000
ROA not before:           Tue 11 Nov 2025 00:41:22 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        107.22.192.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:3d:d7:80:93:e9:4e:c5:0c:6d:a2:c6:b4:13:3d:57:9f:35:ef:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 00:41:22 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=7530ecf3a036771cf022ddc355bb0cd02412931e0becee0fa2adc09160cd53e0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:50:08:19:2d:2f:66:bd:c3:2c:1e:08:93:82:
                    f9:8c:03:5e:1b:90:a8:d2:18:7b:11:82:92:f7:8c:
                    82:df:45:6d:d3:0f:8f:7e:84:01:76:42:a2:2f:54:
                    50:ad:fe:a7:10:0d:49:a0:b9:ad:99:4d:d4:84:b4:
                    63:9c:dc:90:f5:76:de:90:08:c5:61:d8:ea:d9:d2:
                    10:bd:5a:34:bd:5f:cf:e9:7e:d3:8f:7c:bb:e1:be:
                    87:29:48:45:69:55:5d:75:3c:db:42:a0:5e:61:1b:
                    45:ba:36:fe:52:ad:22:37:94:25:9d:69:f4:36:9d:
                    61:ed:c9:5b:f4:c7:fc:e1:4f:a9:9c:72:5e:d2:45:
                    b0:7c:52:4f:9d:11:fe:09:42:61:a6:04:90:a3:cd:
                    68:b3:e6:62:46:01:38:f0:60:07:32:0d:f4:15:31:
                    20:cd:99:a1:34:41:33:f8:b6:d4:a5:d5:a5:a7:6d:
                    d7:f4:81:e1:14:f6:c3:fa:bc:da:04:3a:d8:13:92:
                    cd:f8:ac:de:a2:ea:32:cd:bb:19:28:54:d7:02:8a:
                    aa:d7:97:40:6a:63:c3:62:af:b5:ee:dc:fd:e5:7a:
                    23:34:db:60:90:d6:5e:11:c8:32:b0:c9:f0:8f:33:
                    69:e3:04:4e:24:8f:08:ce:90:fc:e4:b6:5b:76:b8:
                    34:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:DB:48:84:82:1A:F7:37:9C:84:9F:6C:27:88:15:9F:55:AC:E3:57
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/748f2f33-3075-416b-84fb-09804fc32e95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.22.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b1:a5:4d:bc:92:52:a0:a2:30:7c:09:be:08:2d:5f:fb:d6:6c:
         5c:79:9b:a8:a8:24:36:6e:86:65:7d:ab:ee:8b:29:60:f6:ad:
         2e:3a:c4:c7:d1:10:54:49:8d:42:f5:16:05:87:17:6a:3b:57:
         a9:16:e7:d3:49:ca:30:46:6b:f3:96:8f:b4:50:69:ae:a5:63:
         7b:46:c9:ef:d0:9d:da:c2:d7:c8:8c:65:a8:46:cd:0f:af:0e:
         4f:ce:6b:a7:ba:cb:a2:a3:ef:63:a1:0a:0c:79:eb:56:97:1f:
         16:b8:d3:bc:3f:bf:a9:7d:fd:97:24:2e:11:a5:65:cf:4c:59:
         38:9f:92:ac:21:7b:cb:e3:32:6e:99:82:9d:4d:8e:05:4f:80:
         48:3a:c5:85:79:d0:46:22:67:a6:fe:60:82:b0:5b:de:dd:6d:
         c7:1d:a4:3e:c8:51:94:f8:a5:5c:68:3c:b8:a7:76:60:d0:d4:
         ce:32:50:07:e8:60:00:8d:24:7d:ee:8b:e7:cf:ee:b9:70:5c:
         8c:ad:ec:31:59:17:37:77:b7:57:ba:4b:96:99:7d:08:da:3c:
         d3:2f:d8:46:51:fc:23:be:25:c5:09:ef:b9:41:d4:1a:ba:95:
         bb:a2:ab:73:be:dc:15:12:43:81:df:d3:25:b0:60:d1:b4:05:
         90:c5:c5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----