Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/748f2f33-3075-416b-84fb-09804fc32e95.roa
File:                     748f2f33-3075-416b-84fb-09804fc32e95.roa (raw, json)
Hash identifier:          GUTzXV2oeKxwwlufQMPrfS5vcn9V+My0Vo6Yo5pF0Bs=
Subject key identifier:   74:31:2A:09:EE:DC:20:77:5F:AF:08:3A:D1:97:2C:92:8A:B1:48:49
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       52A514EF5C7CC6995A93F786E467CC311E3E9BFC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/748f2f33-3075-416b-84fb-09804fc32e95.roa
Signing time:             Fri 17 Oct 2025 00:38:38 +0000
ROA not before:           Fri 17 Oct 2025 00:38:38 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        107.22.192.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:a5:14:ef:5c:7c:c6:99:5a:93:f7:86:e4:67:cc:31:1e:3e:9b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 00:38:38 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=3a58ea3bfa7c7c80005342f51bdf73c5be07c95d6ff6d361669f56448ccb50f6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1b:7c:42:6a:86:94:82:cc:33:1d:3b:f9:6a:
                    65:ed:15:bf:84:8d:1d:4a:b0:aa:69:17:29:ff:ba:
                    24:d9:0d:1d:67:ca:ed:b4:19:aa:d4:bb:14:db:0d:
                    fe:c1:2f:d6:30:08:62:c0:ac:e7:8f:d2:c7:a9:ee:
                    13:16:97:86:76:11:ac:3f:33:26:22:97:d2:c4:93:
                    71:92:a2:82:51:bb:49:10:77:d2:e3:74:1e:25:c3:
                    af:52:ce:20:15:6f:54:a8:e7:ba:4d:4f:34:32:e4:
                    19:31:22:37:41:77:09:a2:51:81:32:48:5f:13:80:
                    35:69:c4:ed:cf:e9:c0:70:e2:da:52:8d:a3:72:27:
                    e2:2e:c4:cd:aa:4c:69:6f:8d:00:de:32:aa:f5:46:
                    62:05:16:19:21:07:f4:5f:0c:7f:1a:46:f5:0d:d0:
                    c9:9e:07:8c:ed:3d:75:ce:8b:e5:76:28:56:69:49:
                    3a:ac:db:15:96:8e:32:49:01:8a:81:26:20:3e:31:
                    db:e5:8b:d5:b8:6f:9a:3d:76:e3:54:16:f9:e1:4c:
                    97:72:36:d9:54:2b:ed:0a:ce:af:21:2e:38:0b:78:
                    52:53:c4:a8:f8:79:ab:d1:c6:f2:85:0d:4c:e5:59:
                    02:ac:bd:2f:e9:85:6d:a3:c4:7c:58:42:5c:40:59:
                    14:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:31:2A:09:EE:DC:20:77:5F:AF:08:3A:D1:97:2C:92:8A:B1:48:49
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/748f2f33-3075-416b-84fb-09804fc32e95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.22.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         d1:10:37:6e:a8:fc:e8:f2:4d:35:7e:f3:c4:4c:0a:20:4c:06:
         aa:21:48:3a:f2:98:d6:36:07:ee:1d:d4:18:e6:fc:c4:11:ec:
         b1:cb:d8:b1:0c:ba:c9:d8:74:36:52:1b:5f:f6:8a:47:a3:1a:
         4b:17:04:60:02:0c:2e:4f:91:3f:ab:a0:d4:fe:06:13:5c:75:
         6c:80:c2:98:ed:95:f6:3c:c4:35:bb:80:98:d1:d7:69:02:96:
         3b:a4:06:76:f5:e0:a7:e2:ce:d8:7d:9f:0d:05:e0:cb:c9:a0:
         89:1c:bd:bf:b2:0d:5c:07:d6:5a:92:a0:44:fb:2b:0b:be:88:
         70:05:c8:85:d9:76:86:79:73:67:47:c8:01:72:05:ec:2b:7c:
         54:e0:12:49:2e:91:09:db:60:c4:da:40:7b:7b:64:80:4f:bf:
         27:a6:11:a6:b7:8f:10:bc:69:6b:1b:09:9c:72:ca:61:7a:77:
         03:e6:15:11:df:49:f7:c1:d3:d5:93:0d:3d:64:53:48:5c:b1:
         cc:e6:88:ed:3e:99:cb:00:22:77:4a:2a:bf:f1:eb:94:13:0f:
         ee:ae:0d:b8:2c:f3:53:ac:6f:3f:52:07:fc:52:8c:85:63:54:
         f0:58:cb:d4:19:ca:bc:a6:82:b6:24:75:8f:5a:8d:b7:c9:a2:
         40:94:b8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----