Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/225a370b-b7ff-4d29-8cc6-b57287923a22.roa
File:                     225a370b-b7ff-4d29-8cc6-b57287923a22.roa (raw, json)
Hash identifier:          wAjBDDLymDtReAbw1MmcTwV6XqZMjG/o0kpKb2uLyR0=
Subject key identifier:   56:4A:13:B7:DB:E2:86:BE:90:97:3F:39:E4:75:A4:11:FD:24:10:49
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1777339E9132D049AAFCC0A49AA9B1663FD20904
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/225a370b-b7ff-4d29-8cc6-b57287923a22.roa
Signing time:             Fri 17 Oct 2025 00:12:03 +0000
ROA not before:           Fri 17 Oct 2025 00:12:03 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        1.178.4.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:77:33:9e:91:32:d0:49:aa:fc:c0:a4:9a:a9:b1:66:3f:d2:09:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 00:12:03 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=29a75d0c123ecff8c991a977ae3f4527323da545919885aa411748a932ce331f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bd:da:69:1d:cb:08:c7:8d:b0:ae:22:9b:7f:
                    4c:5b:2d:b4:77:d1:e7:a7:d6:e4:8c:dc:2e:d6:a9:
                    ec:e3:d7:8f:0a:ea:7c:41:3a:f6:00:57:17:f7:8b:
                    db:56:8a:69:13:89:a7:59:5d:3e:93:58:f1:33:2f:
                    2c:7b:2f:98:79:e6:7e:ce:05:60:df:27:e1:26:c5:
                    db:3e:88:cd:7f:d6:eb:a1:c4:ee:65:b9:e4:df:f8:
                    ab:ab:cf:0c:bc:fd:83:90:35:ec:2e:57:40:6a:1b:
                    ec:58:30:0b:4b:6b:0c:0d:e1:2d:37:2e:fa:d1:d6:
                    32:9a:bc:ed:88:32:e3:0b:0f:cd:a4:90:5f:5e:2a:
                    7a:e5:9e:1f:5a:21:7a:d5:fc:ae:a9:f4:c0:cd:ad:
                    e7:7c:1b:2b:00:ab:34:63:f0:06:35:23:2b:33:35:
                    7c:63:e2:09:fb:e3:02:21:12:1f:a9:49:f8:03:df:
                    45:e5:f6:ec:3f:4a:c9:65:fd:61:34:d0:59:92:64:
                    88:81:cb:d0:84:02:95:c7:38:26:b9:67:5b:4f:ab:
                    cb:3a:9d:8c:44:0c:e5:27:1e:65:91:57:0a:73:b6:
                    9e:8b:84:5d:d5:41:21:2a:c3:71:c3:c3:9e:c9:1b:
                    52:b8:f6:00:78:3e:01:aa:5a:a1:0f:fe:75:60:d0:
                    40:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:4A:13:B7:DB:E2:86:BE:90:97:3F:39:E4:75:A4:11:FD:24:10:49
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/225a370b-b7ff-4d29-8cc6-b57287923a22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.178.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:bc:6d:2f:d9:cc:62:0a:f0:df:3b:1b:79:bf:0a:d1:30:d5:
         e1:33:3e:b6:71:5f:fb:b4:c0:d8:22:d1:be:93:0a:74:91:3a:
         0f:9e:0b:9d:6d:1e:05:54:d5:9a:69:9c:54:e1:fe:bb:c3:43:
         f6:9e:98:f8:16:00:33:fb:b9:6c:7c:c6:84:91:87:f4:6a:85:
         d8:ef:35:a5:b2:ae:02:92:01:33:fb:53:30:28:87:f5:52:40:
         79:31:b1:a8:e6:aa:1a:50:a8:2b:97:3e:bf:5b:e4:12:67:d7:
         d8:13:60:61:f9:ec:ff:d4:51:f4:e2:a0:87:56:97:07:56:46:
         1a:20:c7:96:82:5e:43:a1:ef:0d:82:03:b6:03:8f:30:7e:c8:
         90:ba:eb:0a:5f:f6:ce:42:7a:39:0e:dc:f8:fe:fe:70:01:8e:
         1c:25:ee:ae:ef:9d:21:89:92:21:a0:52:c6:f4:ea:de:3c:ae:
         fc:a1:8c:34:b3:5f:64:13:49:94:c7:fd:52:ca:6e:2c:13:d6:
         6f:48:53:63:97:b7:63:f8:d4:d1:d9:ac:7f:fc:4b:92:cf:cc:
         5b:df:8d:04:97:96:62:30:fa:d0:96:ff:dc:41:1c:6b:2f:fd:
         0c:ff:c4:47:f6:4b:2e:e0:e8:c7:56:4a:79:d6:1d:27:f8:a9:
         ef:b9:5d:48
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUF3cznpEy0Emq/MCkmqmxZj/SCQQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE3MDAxMjAzWhcNMjUxMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0AyOWE3NWQwYzEyM2VjZmY4Yzk5MWE5NzdhZTNmNDUyNzMy
M2RhNTQ1OTE5ODg1YWE0MTE3NDhhOTMyY2UzMzFmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDOvdppHcsIx42wriKbf0xbLbR30een1uSM3C7Wqezj148K
6nxBOvYAVxf3i9tWimkTiadZXT6TWPEzLyx7L5h55n7OBWDfJ+Emxds+iM1/1uuh
xO5lueTf+Kurzwy8/YOQNewuV0BqG+xYMAtLawwN4S03LvrR1jKavO2IMuMLD82k
kF9eKnrlnh9aIXrV/K6p9MDNred8GysAqzRj8AY1IyszNXxj4gn74wIhEh+pSfgD
30Xl9uw/Ssll/WE00FmSZIiBy9CEApXHOCa5Z1tPq8s6nYxEDOUnHmWRVwpztp6L
hF3VQSEqw3HDw57JG1K49gB4PgGqWqEP/nVg0EDbAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUVkoTt9vihr6Qlz855HWkEf0kEEkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzIyNWEzNzBiLWI3ZmYtNGQyOS04Y2M2LWI1NzI4NzkyM2EyMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIBsgQwDQYJKoZIhvcNAQELBQADggEBAIq8bS/ZzGIK8N87G3m/CtEw1eEz
PrZxX/u0wNgi0b6TCnSROg+eC51tHgVU1ZppnFTh/rvDQ/aemPgWADP7uWx8xoSR
h/RqhdjvNaWyrgKSATP7UzAoh/VSQHkxsajmqhpQqCuXPr9b5BJn19gTYGH57P/U
UfTioIdWlwdWRhogx5aCXkOh7w2CA7YDjzB+yJC66wpf9s5CejkO3Pj+/nABjhwl
7q7vnSGJkiGgUsb06t48rvyhjDSzX2QTSZTH/VLKbiwT1m9IU2OXt2P41NHZrH/8
S5LPzFvfjQSXlmIw+tCW/9xBHGsv/Qz/xEf2Sy7g6MdWSnnWHSf4qe+5XUg=
-----END CERTIFICATE-----