Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10766232-d957-4405-85ce-681703faff9e.roa
File:                     10766232-d957-4405-85ce-681703faff9e.roa (raw, json)
Hash identifier:          uYKAK3COnTaIoYmFoIv9rY3hI2Xk9qxNAHfJy4K7uCI=
Subject key identifier:   64:3C:13:89:D8:39:29:B1:14:10:FB:54:86:4F:0F:0B:8A:3C:62:D9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       427D00EDE2E860F7622C027485A626EF695F6CC6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10766232-d957-4405-85ce-681703faff9e.roa
Signing time:             Wed 12 Nov 2025 02:30:59 +0000
ROA not before:           Wed 12 Nov 2025 02:30:59 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f38:4020::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:7d:00:ed:e2:e8:60:f7:62:2c:02:74:85:a6:26:ef:69:5f:6c:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 02:30:59 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=6dc0394f4d42680e5897d29ca17db47aaeeebc4b6f9f4b39e506ce8a2367050f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d8:f2:01:a7:1c:42:39:ec:d0:e8:a4:45:47:
                    ab:90:ab:0c:87:60:36:e5:0d:21:10:2c:92:0c:04:
                    30:94:6f:1c:4e:f8:91:40:93:a3:70:19:38:f3:20:
                    dc:c5:bc:e3:e0:f8:30:8b:78:22:00:bd:f4:5e:03:
                    8b:18:5f:95:35:41:fa:3a:bf:33:1a:0e:04:04:3a:
                    82:e3:1e:99:ed:05:06:21:54:17:00:c2:13:16:21:
                    44:f1:c7:8e:3c:f9:5b:fb:65:f5:e5:e1:29:27:a7:
                    6a:96:5e:66:95:d0:c8:80:51:13:d4:52:89:77:0c:
                    6e:f9:ea:07:ae:b2:f0:c6:fe:0f:88:7a:e7:49:b7:
                    cf:57:5b:7c:91:33:c0:53:f2:53:2c:01:80:98:03:
                    f4:17:f0:25:eb:26:d3:de:16:1a:9d:bb:84:a2:08:
                    8d:cd:87:1f:a0:80:80:e3:cb:5b:50:2a:54:b9:4b:
                    a9:b0:0a:b7:ea:42:52:d8:a2:28:6a:90:5c:3f:15:
                    e6:aa:f3:b6:da:0c:03:0f:6f:80:af:d2:6d:90:3e:
                    4d:70:83:00:b2:76:18:d2:01:1a:64:2e:82:96:bb:
                    ce:9e:ac:6a:2f:72:aa:0a:33:13:50:00:64:68:22:
                    69:fe:8c:e9:fa:7c:dd:81:cc:ce:73:88:83:ae:18:
                    e8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:3C:13:89:D8:39:29:B1:14:10:FB:54:86:4F:0F:0B:8A:3C:62:D9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10766232-d957-4405-85ce-681703faff9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f38:4020::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:3d:01:a4:98:f5:5c:a8:ae:6c:6c:72:51:f9:40:0e:4b:8f:
         d7:5c:54:2c:60:c3:7a:bb:54:55:9e:00:35:58:54:38:8f:5f:
         ba:b5:10:ad:da:0f:78:53:f3:6a:e5:9e:e6:81:70:e8:e1:7c:
         0e:98:5c:ef:44:20:eb:84:71:4d:68:2d:6a:be:04:97:64:c2:
         1b:f9:dd:5d:8f:02:2c:9a:c7:48:0a:3b:33:cd:d9:69:e4:95:
         f7:f9:98:f5:ab:92:8a:7c:69:90:7c:9d:0a:36:19:d1:a1:00:
         11:02:2a:6c:f0:15:9e:fa:ac:6c:74:06:c5:68:f6:2d:bb:b3:
         57:c5:72:b5:52:ee:f0:ca:69:2b:df:c7:76:2d:40:94:18:4d:
         48:4f:76:ee:b3:c3:23:ca:f2:9c:40:b0:e6:2e:7a:16:3f:e6:
         ea:86:d4:1e:82:77:1e:1d:78:af:b0:7b:38:60:45:04:80:20:
         e2:3e:36:35:0b:1b:90:af:b8:7b:1a:47:a0:b1:03:84:38:96:
         54:da:ac:68:36:4d:3e:39:8b:87:59:62:4b:6e:98:38:be:02:
         b0:4d:c6:cc:6d:d2:68:e2:b3:43:89:68:a9:03:ce:25:ae:79:
         0a:03:7d:26:8d:bd:88:5a:5a:87:0f:0e:2d:02:3d:66:59:f2:
         8c:40:04:f3
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUQn0A7eLoYPdiLAJ0haYm72lfbMYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTEyMDIzMDU5WhcNMjUxMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0A2ZGMwMzk0ZjRkNDI2ODBlNTg5N2QyOWNhMTdkYjQ3YWFl
ZWViYzRiNmY5ZjRiMzllNTA2Y2U4YTIzNjcwNTBmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDo2PIBpxxCOezQ6KRFR6uQqwyHYDblDSEQLJIMBDCUbxxO
+JFAk6NwGTjzINzFvOPg+DCLeCIAvfReA4sYX5U1Qfo6vzMaDgQEOoLjHpntBQYh
VBcAwhMWIUTxx448+Vv7ZfXl4Sknp2qWXmaV0MiAURPUUol3DG756geusvDG/g+I
eudJt89XW3yRM8BT8lMsAYCYA/QX8CXrJtPeFhqdu4SiCI3Nhx+ggIDjy1tQKlS5
S6mwCrfqQlLYoihqkFw/Feaq87baDAMPb4Cv0m2QPk1wgwCydhjSARpkLoKWu86e
rGovcqoKMxNQAGRoImn+jOn6fN2BzM5ziIOuGOjdAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUZDwTidg5KbEUEPtUhk8PC4o8YtkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzEwNzY2MjMyLWQ5NTctNDQwNS04NWNlLTY4MTcwM2ZhZmY5ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB84QCAwDQYJKoZIhvcNAQELBQADggEBAGY9AaSY9VyormxsclH5QA5L
j9dcVCxgw3q7VFWeADVYVDiPX7q1EK3aD3hT82rlnuaBcOjhfA6YXO9EIOuEcU1o
LWq+BJdkwhv53V2PAiyax0gKOzPN2Wnklff5mPWrkop8aZB8nQo2GdGhABECKmzw
FZ76rGx0BsVo9i27s1fFcrVS7vDKaSvfx3YtQJQYTUhPdu6zwyPK8pxAsOYuehY/
5uqG1B6Cdx4deK+wezhgRQSAIOI+NjULG5CvuHsaR6CxA4Q4llTarGg2TT45i4dZ
YktumDi+ArBNxsxt0mjis0OJaKkDziWueQoDfSaNvYhaWocPDi0CPWZZ8oxABPM=
-----END CERTIFICATE-----