Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04f66d57-bab4-4fce-9d9f-8a8e28b4bb23.roa
File:                     04f66d57-bab4-4fce-9d9f-8a8e28b4bb23.roa (raw, json)
Hash identifier:          iBrnx5EZZlGqwvUYJk7KPb9JwQxwGXGGuNKYBMAR7bo=
Subject key identifier:   5D:02:97:80:B9:B8:C2:17:68:60:94:82:0F:A5:74:4F:CA:DA:73:C1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3EFA921058984C7DF9CEB914BA84E09911FC1DF4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04f66d57-bab4-4fce-9d9f-8a8e28b4bb23.roa
Signing time:             Sun 19 Oct 2025 00:31:12 +0000
ROA not before:           Sun 19 Oct 2025 00:31:12 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        75.101.164.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:fa:92:10:58:98:4c:7d:f9:ce:b9:14:ba:84:e0:99:11:fc:1d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 00:31:12 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=4aaeab138fed4021f3fa32c5a707f50c5d90a70d96eaa23ce69759e0d867b068, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5b:8d:b1:02:e2:a4:95:12:35:74:ec:3f:29:
                    f2:bb:41:66:80:be:25:49:ee:8f:4e:50:54:b1:ab:
                    eb:f4:a8:33:8f:6f:2c:0e:3f:1e:5b:7a:d6:20:9d:
                    23:db:38:f1:e8:fc:97:81:87:d7:49:c6:e7:32:3b:
                    a5:84:e8:f8:ad:46:66:a0:e1:bc:33:36:d5:95:68:
                    11:29:d3:a6:7c:ee:46:65:e1:e2:88:7a:10:c6:2e:
                    78:5d:db:34:99:e7:5f:64:bf:fa:ea:64:e6:41:70:
                    2a:5b:5d:4b:9d:45:ad:60:42:ae:6c:f5:86:29:6d:
                    0c:05:59:c1:aa:6a:1f:62:e4:62:6a:01:11:11:31:
                    66:1b:cf:34:b3:5e:25:59:1d:10:06:7e:eb:57:5f:
                    88:62:e7:d3:73:f3:19:a3:c6:34:85:12:bc:29:30:
                    ba:d4:bf:94:a2:18:26:2f:3e:ca:1e:51:c8:fe:9f:
                    a7:b0:33:e2:db:d9:a8:ab:3c:87:06:65:57:ae:56:
                    25:84:38:00:18:55:6d:e8:ef:38:9a:d4:2a:02:d8:
                    04:ae:47:8a:65:a9:31:c8:84:5d:7f:eb:a1:de:3a:
                    9b:e6:a1:2b:68:5c:a0:31:13:6f:74:d1:36:b8:c5:
                    6d:55:c8:d3:eb:f1:b9:87:58:8a:98:2c:67:86:d1:
                    c1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:02:97:80:B9:B8:C2:17:68:60:94:82:0F:A5:74:4F:CA:DA:73:C1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04f66d57-bab4-4fce-9d9f-8a8e28b4bb23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.101.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d5:10:21:6b:a1:6b:b6:8c:63:9d:cf:1e:b0:b9:bc:c2:c5:0e:
         24:44:dc:50:91:f9:32:82:2e:a4:91:7e:81:b6:e6:1f:3f:aa:
         48:a4:da:5c:48:2e:5b:d2:14:f2:da:da:50:22:0f:f4:39:14:
         09:4e:36:c8:3a:00:88:44:7a:85:0b:9a:86:56:b5:ef:1a:35:
         87:9d:44:af:e0:4d:33:85:fe:84:c8:11:f7:5e:d5:2c:f0:76:
         94:9b:eb:a1:8d:91:de:10:cb:66:24:bf:e7:c0:03:a4:75:71:
         42:86:19:17:bd:7e:c4:77:ab:77:3c:e7:84:64:f8:70:05:59:
         34:92:e2:52:b1:f3:ec:1d:e6:5c:32:b0:d3:e5:ba:94:e3:3e:
         f7:68:f4:c7:fc:07:54:35:78:ff:e4:89:be:dc:95:66:a6:ee:
         31:7c:8e:dc:bc:eb:18:98:2e:ba:c6:bf:e8:c2:15:0b:9d:bc:
         f3:da:a1:d2:12:c5:fb:b1:3f:a9:56:83:5c:b5:31:c5:f5:a0:
         ec:64:42:d7:87:b7:39:0b:8b:03:24:33:06:5c:90:59:09:55:
         e5:d0:64:2d:78:c0:47:cb:f9:84:31:83:5e:31:15:c5:43:0e:
         7f:94:9d:38:cf:4b:c0:89:67:15:90:8e:52:2c:0c:09:fd:09:
         81:d1:af:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----