Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06a31a62-cfe6-483a-ba03-cc53daa6cae8.roa
File:                     06a31a62-cfe6-483a-ba03-cc53daa6cae8.roa (raw, json)
Hash identifier:          8QAG9H1W/QIII8molmZS31UkuuSDjgNVSQgnKqco+oo=
Subject key identifier:   F0:43:8A:88:76:12:3A:65:B3:B3:46:F4:16:94:F3:28:D8:8C:D6:C6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       33290712B72AA5A9DBF066C660A6B0205F908D5F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06a31a62-cfe6-483a-ba03-cc53daa6cae8.roa
Signing time:             Sat 08 Nov 2025 01:20:06 +0000
ROA not before:           Sat 08 Nov 2025 01:20:06 +0000
ROA not after:            Sat 13 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fec:3000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:29:07:12:b7:2a:a5:a9:db:f0:66:c6:60:a6:b0:20:5f:90:8d:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 01:20:06 2025 GMT
            Not After : Dec 13 23:59:59 2025 GMT
        Subject: serialNumber=9d3fc98b6fb50e3f06175b238769ac175b65d1790bc12fb8e158047277a3ebc7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a7:04:6e:58:8b:a4:9a:c7:8d:16:b0:0e:02:
                    e0:a8:07:06:f6:0e:64:05:7d:43:3d:be:27:0e:e5:
                    a3:22:62:15:fe:7b:ed:58:cf:95:40:eb:fc:37:cf:
                    50:01:75:51:2e:b7:af:0a:37:0f:84:0b:94:1e:3b:
                    25:3e:92:90:4a:fa:2e:e0:db:12:78:d9:ca:1d:e4:
                    99:4a:12:37:36:96:6b:f0:63:2d:43:2b:05:fa:7d:
                    ae:17:9c:30:11:69:8f:51:f3:05:2d:c5:ce:cb:05:
                    2c:02:61:da:22:e0:e5:9a:01:a8:6c:6c:71:98:58:
                    51:d6:50:34:aa:a2:9a:20:f9:fc:60:87:a4:db:ab:
                    96:af:73:8c:04:87:b8:9c:5e:c8:cd:73:ad:ad:6c:
                    95:b7:44:f5:5b:3b:97:10:a0:a7:19:f0:d3:a5:21:
                    27:c2:81:76:30:c1:96:b7:ec:2a:0a:f6:36:74:0a:
                    a9:69:3f:8e:76:dc:b2:25:a8:94:ba:ac:c2:67:16:
                    ff:1e:a9:7d:ff:af:9f:4a:b4:83:9f:2f:38:d5:4a:
                    ba:7f:2b:05:5d:73:a0:1b:e1:86:f6:8a:c1:9d:f0:
                    89:f9:55:55:2e:5f:7b:6d:8d:33:2f:5e:10:97:9d:
                    e8:ba:85:23:ca:ce:c2:1b:51:95:ef:44:cf:a1:07:
                    7c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:43:8A:88:76:12:3A:65:B3:B3:46:F4:16:94:F3:28:D8:8C:D6:C6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06a31a62-cfe6-483a-ba03-cc53daa6cae8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fec:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:bf:f6:8e:40:24:38:61:56:71:6b:ef:27:ae:66:81:a1:7d:
         87:76:9e:8b:68:08:ea:93:71:b6:68:ef:46:f1:5b:44:da:3f:
         0f:30:71:e0:d6:3c:5b:16:c0:9e:b4:43:3e:d2:f3:46:f4:ae:
         57:85:3c:a4:e5:85:e1:52:1e:81:fd:70:78:3a:46:51:f7:b2:
         43:f8:53:e2:8f:95:4a:21:d5:ed:62:4f:6c:4c:63:62:04:2a:
         49:2a:c0:d6:1e:ba:92:8d:5f:36:72:7e:0a:ef:cd:c9:c2:f0:
         ed:17:d0:75:61:22:c9:b7:81:ea:93:19:f8:ef:72:a4:d4:48:
         28:e7:39:59:e0:bf:be:e6:68:2e:d3:c9:66:f6:0f:8b:00:ef:
         6a:e7:49:06:87:9e:09:fe:b1:5e:ae:82:c7:fc:00:60:56:61:
         9b:98:75:7b:03:e3:33:a0:07:26:ce:b3:85:11:7f:54:7d:43:
         51:7c:ec:31:70:e4:d8:eb:53:c6:0a:89:c1:12:c7:d2:c4:43:
         d9:84:65:e7:9e:bf:69:67:70:1f:11:5d:5f:74:fd:28:89:bc:
         3e:ce:45:bc:fa:ed:1d:4c:18:66:68:3b:97:f3:d9:71:c8:9d:
         05:ca:69:55:de:81:ff:67:5c:c4:09:dc:1d:b9:a4:a9:3c:7d:
         e2:37:1c:19
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUMykHErcqpanb8GbGYKawIF+QjV8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTA4MDEyMDA2WhcNMjUxMjEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A5ZDNmYzk4YjZmYjUwZTNmMDYxNzViMjM4NzY5YWMxNzVi
NjVkMTc5MGJjMTJmYjhlMTU4MDQ3Mjc3YTNlYmM3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCspwRuWIukmseNFrAOAuCoBwb2DmQFfUM9vicO5aMiYhX+
e+1Yz5VA6/w3z1ABdVEut68KNw+EC5QeOyU+kpBK+i7g2xJ42cod5JlKEjc2lmvw
Yy1DKwX6fa4XnDARaY9R8wUtxc7LBSwCYdoi4OWaAahsbHGYWFHWUDSqopog+fxg
h6Tbq5avc4wEh7icXsjNc62tbJW3RPVbO5cQoKcZ8NOlISfCgXYwwZa37CoK9jZ0
CqlpP4523LIlqJS6rMJnFv8eqX3/r59KtIOfLzjVSrp/KwVdc6Ab4Yb2isGd8In5
VVUuX3ttjTMvXhCXnei6hSPKzsIbUZXvRM+hB3w/AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU8EOKiHYSOmWzs0b0FpTzKNiM1sYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA2YTMxYTYyLWNmZTYtNDgzYS1iYTAzLWNjNTNkYWE2Y2FlOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/sMAAwDQYJKoZIhvcNAQELBQADggEBAI6/9o5AJDhhVnFr7yeuZoGh
fYd2notoCOqTcbZo70bxW0TaPw8wceDWPFsWwJ60Qz7S80b0rleFPKTlheFSHoH9
cHg6RlH3skP4U+KPlUoh1e1iT2xMY2IEKkkqwNYeupKNXzZyfgrvzcnC8O0X0HVh
Ism3geqTGfjvcqTUSCjnOVngv77maC7TyWb2D4sA72rnSQaHngn+sV6ugsf8AGBW
YZuYdXsD4zOgBybOs4URf1R9Q1F87DFw5NjrU8YKicESx9LEQ9mEZeeev2lncB8R
XV90/SiJvD7ORbz67R1MGGZoO5fz2XHInQXKaVXegf9nXMQJ3B25pKk8feI3HBk=
-----END CERTIFICATE-----