Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5fd6263-0495-4611-9074-38f30350af93.roa
File:                     c5fd6263-0495-4611-9074-38f30350af93.roa (raw, json)
Hash identifier:          /2szF4W40NtYLu3PZyWf61pBkvi1nwY7Qy/xaoJJEkQ=
Subject key identifier:   F5:09:30:8E:F5:D6:32:74:D9:0F:BA:3B:9C:39:59:B8:13:F0:4B:EE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2518CDF6B498A3B7CC5F92B2F9B6450C489AF6E4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5fd6263-0495-4611-9074-38f30350af93.roa
Signing time:             Mon 20 Oct 2025 00:50:51 +0000
ROA not before:           Mon 20 Oct 2025 00:50:51 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.157.220.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:18:cd:f6:b4:98:a3:b7:cc:5f:92:b2:f9:b6:45:0c:48:9a:f6:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 00:50:51 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=c27a09054f9d3280d9e33001034c30d0178baa1674fbde4adb9682c83cf0622e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bd:6e:8c:f3:ad:59:fc:95:d8:e4:ed:4e:52:
                    04:eb:5c:22:8d:61:75:fa:a5:a0:17:9b:a7:52:f4:
                    72:b3:01:ab:9a:fa:fe:cc:e2:28:c1:a0:f3:17:79:
                    cd:11:1e:35:70:a4:52:25:21:47:b3:28:73:8f:6c:
                    2a:12:81:d5:35:07:70:2e:f5:af:f0:55:91:db:cd:
                    96:19:c7:1c:14:5b:a2:40:52:79:c9:f8:e1:76:86:
                    48:6f:a0:e2:2d:79:34:69:94:63:61:83:23:0a:2f:
                    db:68:41:fa:9a:4c:76:9d:99:31:26:37:e6:1d:21:
                    6c:ea:70:31:c9:42:d6:26:f0:ae:3b:b4:b2:39:f3:
                    e4:14:0d:fc:d0:04:76:3b:8f:b8:fd:62:20:fd:92:
                    a0:bd:1b:64:f2:a2:f0:d9:9a:41:f7:4e:dc:79:e1:
                    04:7b:b2:33:bc:c8:d5:c0:40:50:10:85:8d:e6:bb:
                    34:a8:4e:87:89:da:fa:99:58:33:7c:e7:28:1f:36:
                    14:3b:a3:2a:fb:d2:87:12:e4:8d:d6:b0:ff:74:8a:
                    79:21:41:24:46:84:db:74:8c:d2:cc:dc:90:b4:b7:
                    b8:9f:72:b1:c3:bd:cb:61:48:4e:6e:b9:05:7c:77:
                    08:95:39:4f:fa:40:1f:04:48:64:f4:aa:8e:59:b0:
                    e8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:09:30:8E:F5:D6:32:74:D9:0F:BA:3B:9C:39:59:B8:13:F0:4B:EE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5fd6263-0495-4611-9074-38f30350af93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.157.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:f9:62:47:eb:60:2a:48:af:e9:2b:ad:d6:45:4f:45:d2:48:
         fc:28:2a:5e:ab:cd:7c:2e:aa:76:3c:98:18:7b:01:11:2e:23:
         e6:7f:df:fa:fd:9c:c2:16:2b:57:3d:53:0d:60:ef:42:72:22:
         c9:14:02:c5:c6:3f:a8:d7:0c:83:06:a5:36:41:78:88:86:a8:
         86:e0:90:06:f8:aa:d0:d5:d2:11:5f:1e:50:d2:57:d2:f9:b6:
         bc:4d:d4:4a:36:67:a8:06:5f:c2:99:19:f1:8d:d8:4a:28:3e:
         0b:0a:34:d7:41:fc:09:62:d7:68:15:05:62:21:bf:3b:c7:16:
         fb:f9:a2:e8:97:39:1b:9b:f3:b2:91:d2:f4:6a:4f:f6:47:e6:
         d9:aa:1f:e3:10:b3:11:e6:6a:5e:d9:5a:e5:6b:f1:37:94:eb:
         e7:41:ce:6d:d1:cc:5d:de:dd:b8:e1:6b:25:3f:ac:62:16:9c:
         f4:c2:07:13:94:a9:fc:91:49:5d:0d:de:2a:84:3c:f7:e6:23:
         b6:8d:6c:d8:de:8e:84:8b:df:09:9e:f7:17:23:bd:35:fc:4d:
         2c:fc:bb:d1:24:50:99:8c:a4:6f:62:79:dc:06:64:ea:4d:4b:
         ec:9b:6d:e4:c7:bb:1e:cd:c2:34:ab:ee:dd:31:84:58:5c:a8:
         bc:4f:78:ba
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJRjN9rSYo7fMX5Ky+bZFDEia9uQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDA1MDUxWhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BjMjdhMDkwNTRmOWQzMjgwZDllMzMwMDEwMzRjMzBkMDE3
OGJhYTE2NzRmYmRlNGFkYjk2ODJjODNjZjA2MjJlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCdvW6M861Z/JXY5O1OUgTrXCKNYXX6paAXm6dS9HKzAaua
+v7M4ijBoPMXec0RHjVwpFIlIUezKHOPbCoSgdU1B3Au9a/wVZHbzZYZxxwUW6JA
UnnJ+OF2hkhvoOIteTRplGNhgyMKL9toQfqaTHadmTEmN+YdIWzqcDHJQtYm8K47
tLI58+QUDfzQBHY7j7j9YiD9kqC9G2TyovDZmkH3Ttx54QR7sjO8yNXAQFAQhY3m
uzSoToeJ2vqZWDN85ygfNhQ7oyr70ocS5I3WsP90inkhQSRGhNt0jNLM3JC0t7if
crHDvcthSE5uuQV8dwiVOU/6QB8ESGT0qo5ZsOinAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU9QkwjvXWMnTZD7o7nDlZuBPwS+4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2M1ZmQ2MjYzLTA0OTUtNDYxMS05MDc0LTM4ZjMwMzUwYWY5My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJsndwwDQYJKoZIhvcNAQELBQADggEBABn5YkfrYCpIr+krrdZFT0XSSPwo
Kl6rzXwuqnY8mBh7AREuI+Z/3/r9nMIWK1c9Uw1g70JyIskUAsXGP6jXDIMGpTZB
eIiGqIbgkAb4qtDV0hFfHlDSV9L5trxN1Eo2Z6gGX8KZGfGN2EooPgsKNNdB/Ali
12gVBWIhvzvHFvv5ouiXORub87KR0vRqT/ZH5tmqH+MQsxHmal7ZWuVr8TeU6+dB
zm3RzF3e3bjhayU/rGIWnPTCBxOUqfyRSV0N3iqEPPfmI7aNbNjejoSL3wme9xcj
vTX8TSz8u9EkUJmMpG9iedwGZOpNS+ybbeTHux7NwjSr7t0xhFhcqLxPeLo=
-----END CERTIFICATE-----