Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d0d6a5a-16aa-4b09-a02b-98190290d009.roa
File:                     5d0d6a5a-16aa-4b09-a02b-98190290d009.roa (raw, json)
Hash identifier:          EiO52SOsstuxIHrulT5Ch7Vq81XPp0YeyYTx3SwHipQ=
Subject key identifier:   04:53:25:2B:DF:37:F2:E5:D0:37:C0:65:96:6A:C5:95:59:F9:47:2F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2CF2FF3B1F95BDA2904B83AEC65416B6A76E480E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d0d6a5a-16aa-4b09-a02b-98190290d009.roa
Signing time:             Fri 17 Oct 2025 00:22:45 +0000
ROA not before:           Fri 17 Oct 2025 00:22:45 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        107.22.152.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f2:ff:3b:1f:95:bd:a2:90:4b:83:ae:c6:54:16:b6:a7:6e:48:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 00:22:45 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=f83678d1a18f33dedec4b0e4357d4c1acfbfdb928692272637747b399ee4288d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b5:c3:e5:8c:b0:7e:b4:ac:3c:f1:02:55:a0:
                    20:55:d3:14:e4:a3:55:95:8a:02:ee:bc:e7:27:0c:
                    39:17:fc:3f:ef:c3:83:58:24:65:26:7c:b0:d3:1c:
                    e0:99:48:18:03:b7:86:5f:87:94:07:29:a2:0d:f9:
                    5d:59:df:ef:c4:01:0f:4b:94:e6:fe:b8:a8:39:d5:
                    08:b9:11:7f:29:6b:a8:04:cd:97:49:2b:f6:2f:be:
                    ff:8c:84:ea:52:ae:99:84:0c:07:97:da:d5:33:39:
                    81:c1:b5:1f:c1:79:a3:97:e4:3c:6e:31:96:8b:9b:
                    64:1a:3b:47:40:70:93:75:b4:6b:58:38:7e:7a:9e:
                    54:a7:65:02:47:b2:b4:9a:21:8b:04:e5:3e:b8:65:
                    ff:7c:cf:18:f4:29:f3:cc:1f:2c:1f:37:08:d9:43:
                    b4:2a:c6:35:96:d1:56:c0:51:19:ed:33:36:1e:eb:
                    52:29:47:9a:6e:5a:85:18:f6:bd:02:19:f8:a4:ba:
                    17:18:86:8d:90:9e:f5:d2:fa:34:f3:e6:2c:3f:9b:
                    19:a5:af:68:d1:e4:0c:e8:32:9f:33:4b:98:89:03:
                    34:60:d4:4b:f3:27:0a:45:f2:b0:38:af:76:36:48:
                    39:83:43:c9:40:56:fe:10:3e:22:7a:dc:e6:15:b2:
                    bc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:53:25:2B:DF:37:F2:E5:D0:37:C0:65:96:6A:C5:95:59:F9:47:2F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d0d6a5a-16aa-4b09-a02b-98190290d009.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.22.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:18:21:46:04:ca:c0:88:51:cf:e2:dc:4d:2b:92:22:f7:e1:
         58:ed:b8:b9:db:db:3a:87:2d:5a:80:bf:fd:63:0b:4e:f8:1e:
         dc:90:fc:13:1a:28:db:51:3a:fa:80:14:c5:9a:92:60:1b:43:
         46:8b:25:42:c4:45:38:03:47:5c:f8:48:cf:33:9d:67:6e:77:
         b9:ec:08:ab:9a:98:8f:e9:cb:83:e3:47:2d:e1:31:d9:95:a1:
         52:34:c5:ee:44:f2:a3:3d:ed:e3:ce:f9:46:f9:9a:db:ec:92:
         4f:d3:b3:99:af:ee:2e:12:63:57:a4:e1:f7:9f:a6:85:94:bb:
         d3:a1:b3:ac:22:d6:98:19:a4:23:47:97:ef:78:a1:e4:83:12:
         2e:31:e6:e3:7a:13:88:9c:04:16:52:83:c5:95:72:5b:67:58:
         a2:9d:6e:bd:9e:0e:0e:11:13:c7:1e:0c:70:7e:e0:e0:3a:76:
         d4:de:13:cb:f8:2a:d6:b4:a2:fc:8c:11:3d:4c:aa:43:76:bc:
         f7:6c:1d:6c:74:d7:d0:bd:7c:56:ae:8f:09:8f:bd:8b:bc:f1:
         1f:ba:12:cf:27:14:5e:34:6a:97:19:a8:02:ec:3f:3e:26:78:
         5d:cc:d4:21:b9:b0:ff:f6:0f:a6:8c:39:1e:72:c5:06:cc:96:
         e0:04:a7:d8
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIULPL/Ox+VvaKQS4OuxlQWtqduSA4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE3MDAyMjQ1WhcNMjUxMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BmODM2NzhkMWExOGYzM2RlZGVjNGIwZTQzNTdkNGMxYWNm
YmZkYjkyODY5MjI3MjYzNzc0N2IzOTllZTQyODhkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJtcPljLB+tKw88QJVoCBV0xTko1WVigLuvOcnDDkX/D/v
w4NYJGUmfLDTHOCZSBgDt4Zfh5QHKaIN+V1Z3+/EAQ9LlOb+uKg51Qi5EX8pa6gE
zZdJK/Yvvv+MhOpSrpmEDAeX2tUzOYHBtR/BeaOX5DxuMZaLm2QaO0dAcJN1tGtY
OH56nlSnZQJHsrSaIYsE5T64Zf98zxj0KfPMHywfNwjZQ7QqxjWW0VbAURntMzYe
61IpR5puWoUY9r0CGfikuhcYho2QnvXS+jTz5iw/mxmlr2jR5AzoMp8zS5iJAzRg
1EvzJwpF8rA4r3Y2SDmDQ8lAVv4QPiJ63OYVsrwZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUBFMlK9838uXQN8BllmrFlVn5Ry8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzVkMGQ2YTVhLTE2YWEtNGIwOS1hMDJiLTk4MTkwMjkwZDAwOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJrFpgwDQYJKoZIhvcNAQELBQADggEBACwYIUYEysCIUc/i3E0rkiL34Vjt
uLnb2zqHLVqAv/1jC074HtyQ/BMaKNtROvqAFMWakmAbQ0aLJULERTgDR1z4SM8z
nWdud7nsCKuamI/py4PjRy3hMdmVoVI0xe5E8qM97ePO+Ub5mtvskk/Ts5mv7i4S
Y1ek4fefpoWUu9Ohs6wi1pgZpCNHl+94oeSDEi4x5uN6E4icBBZSg8WVcltnWKKd
br2eDg4RE8ceDHB+4OA6dtTeE8v4Kta0ovyMET1MqkN2vPdsHWx019C9fFaujwmP
vYu88R+6Es8nFF40apcZqALsPz4meF3M1CG5sP/2D6aMOR5yxQbMluAEp9g=
-----END CERTIFICATE-----