Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c66e7983-4478-40fb-b430-f0e165cf59ac.roa
File:                     c66e7983-4478-40fb-b430-f0e165cf59ac.roa (raw, json)
Hash identifier:          7ZHisPSainkas1Cvuw4ZuNIOgXfcwP22c1FbNy6FRmA=
Subject key identifier:   14:7B:CD:B3:DF:B7:32:B7:FC:A4:93:32:4C:8B:11:3D:40:FF:43:BC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       011A53F9CA5FAD11719AB4109FD2595B7E2B444B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c66e7983-4478-40fb-b430-f0e165cf59ac.roa
Signing time:             Tue 11 Nov 2025 02:31:14 +0000
ROA not before:           Tue 11 Nov 2025 02:31:14 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        107.22.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:1a:53:f9:ca:5f:ad:11:71:9a:b4:10:9f:d2:59:5b:7e:2b:44:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 02:31:14 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=a60e47082b6ca9190bf6aa558ef8c9fb7f364cee266602f24a10ab5cad0ce781, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:50:a6:b9:e7:76:0a:33:70:22:96:e7:3e:d3:
                    dc:f3:60:11:bd:44:29:d8:b4:9a:59:b8:1f:4f:ad:
                    6a:8c:8b:0c:a1:c9:29:e5:51:88:ad:6c:be:12:71:
                    4c:8f:05:01:e8:3a:d4:87:2f:81:ff:eb:2f:dd:08:
                    e2:95:0f:51:7a:f2:cb:64:24:55:36:38:55:0f:36:
                    17:84:30:2a:0f:01:46:c5:95:03:aa:63:97:9e:19:
                    5a:f5:9b:86:9b:ae:00:33:de:5c:f5:7a:bf:84:77:
                    10:f3:7c:10:16:18:93:65:df:ef:20:fe:32:9d:e9:
                    96:f9:13:de:38:6d:84:1e:fb:ab:80:f5:2b:21:18:
                    52:7b:ff:8f:20:8f:07:40:10:92:20:0c:79:9e:55:
                    44:a3:47:0d:2b:6c:e3:c9:ae:93:5c:6b:88:60:3f:
                    e9:4a:ad:ad:d7:67:46:df:5a:86:5a:3f:bb:1f:a6:
                    e7:ce:ae:7d:a1:c0:64:f0:c6:10:78:68:f3:b2:16:
                    7c:44:f3:da:9b:12:a0:b0:b6:2e:5b:86:79:53:a3:
                    15:47:26:76:1d:c1:13:70:55:e5:fc:68:6d:ca:67:
                    81:de:85:68:c3:cb:f3:ff:e3:47:6a:4a:d6:36:0f:
                    d4:db:f0:5d:a4:e0:1d:86:e8:18:03:5e:71:ce:69:
                    19:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:7B:CD:B3:DF:B7:32:B7:FC:A4:93:32:4C:8B:11:3D:40:FF:43:BC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c66e7983-4478-40fb-b430-f0e165cf59ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.22.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         81:ab:a3:09:51:ef:ed:71:3d:71:b7:93:3e:bd:18:aa:dc:78:
         50:f9:93:c1:fd:0d:24:2f:6d:57:27:8c:c5:b7:69:eb:53:e2:
         c6:5d:cc:c8:bb:f5:b0:79:2e:14:cb:cc:03:db:93:9f:37:cd:
         41:7c:9c:48:0a:98:43:88:0a:ce:a3:d3:46:2a:4a:0a:f2:be:
         8a:7f:60:ba:72:a7:5e:5b:01:af:74:c5:73:2d:9b:bf:7c:a3:
         30:9a:2a:1a:a5:c6:28:d9:87:3d:0a:f7:96:ac:bf:11:2a:b6:
         7d:31:b2:53:45:c8:13:f9:e2:0e:44:63:18:69:0a:70:fb:32:
         91:9c:f2:1b:20:4f:3c:63:05:05:ff:37:34:9f:69:dd:f9:ef:
         53:0a:db:2b:9f:07:db:5b:d3:d8:9d:22:eb:fd:4b:ae:7a:e5:
         cc:49:98:61:33:53:0d:0c:07:68:51:5c:ad:52:6a:44:6e:be:
         d6:15:a8:08:5b:2f:61:10:c1:49:55:09:87:06:e3:6c:ad:cc:
         79:fd:40:6a:00:bc:fc:a1:f1:0d:f7:ec:a7:bb:74:05:2d:2a:
         00:59:f0:4b:74:26:74:24:e1:ea:95:31:ff:4f:63:9c:67:d7:
         0a:6d:a0:83:d3:6d:c8:9e:14:c0:33:76:4b:e0:b8:06:19:d0:
         4d:90:30:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----