Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1addf3a9-bb11-410a-918f-ad584f0c597c.roa
File:                     1addf3a9-bb11-410a-918f-ad584f0c597c.roa (raw, json)
Hash identifier:          fFTmr5cOuXY8cC1/Z1E76dxh0kVVVb1ithvLjX1OIwA=
Subject key identifier:   CE:99:B1:3B:79:39:0E:F4:EE:4C:9A:76:CC:5D:63:FE:9F:D0:01:86
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2321C94EA5085C56E5B97BD8EA8A7C4DE58C2EAB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1addf3a9-bb11-410a-918f-ad584f0c597c.roa
Signing time:             Tue 11 Nov 2025 01:41:20 +0000
ROA not before:           Tue 11 Nov 2025 01:41:20 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:6080::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:21:c9:4e:a5:08:5c:56:e5:b9:7b:d8:ea:8a:7c:4d:e5:8c:2e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 01:41:20 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=51fb32059795d285c886d3cc517458d37dcd351544b73ba6153ce8c1a32d93c6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:60:6e:a1:ba:3b:55:ac:17:2b:28:e2:0b:ef:
                    e2:ed:23:98:f4:71:3c:60:b6:80:36:b2:18:66:db:
                    b0:3c:80:43:88:22:f9:44:b2:02:eb:87:50:3e:92:
                    76:d5:47:5b:a4:90:5a:1c:cd:6b:3f:2b:0d:2e:b8:
                    5a:a1:bf:a5:dc:70:fc:41:71:4a:be:0b:6b:36:3d:
                    c8:83:70:84:8f:49:78:6f:9d:c5:bc:1c:27:89:c0:
                    b0:76:59:5b:ac:e6:5e:12:00:0f:4c:cf:68:11:4f:
                    d1:d1:30:36:6e:7e:7d:57:f1:99:1a:08:7d:91:c6:
                    79:7c:66:bb:d9:7c:d9:84:cc:94:92:a1:a9:b6:09:
                    cd:ec:24:60:64:a0:26:ef:3f:7f:7e:24:98:5a:8c:
                    dc:bd:57:0c:18:48:9d:da:8e:26:54:c5:0a:3f:8e:
                    7a:9c:ee:91:59:69:3c:1f:b8:ee:9d:d1:20:5b:11:
                    9f:10:c0:ef:86:a3:76:c7:85:ab:38:51:7e:09:af:
                    9f:5d:dc:38:45:4b:89:25:77:90:02:a6:e9:42:cc:
                    73:4f:a9:a2:8c:39:bb:6d:bc:89:65:59:f7:94:95:
                    15:f4:dd:e6:53:90:ea:fe:67:e4:96:91:ef:b5:a4:
                    ef:04:ca:ff:02:7d:68:c6:3c:32:f3:ea:95:f8:a9:
                    2b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:99:B1:3B:79:39:0E:F4:EE:4C:9A:76:CC:5D:63:FE:9F:D0:01:86
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1addf3a9-bb11-410a-918f-ad584f0c597c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:6080::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:8d:c5:84:b2:ea:b3:60:bf:36:35:4f:a7:a0:7a:cb:6a:38:
         8f:f5:c8:86:18:55:98:cc:0f:10:11:a7:ce:36:7b:e4:4e:1d:
         f1:31:d8:03:c2:25:5a:11:7b:56:df:83:cb:f8:5b:c8:fc:69:
         bb:be:87:ad:a1:5c:e9:f3:b1:18:6e:d5:03:0b:50:9e:76:29:
         f2:5e:a3:aa:78:9c:f5:f6:f7:25:df:94:9d:99:29:59:ed:36:
         d6:65:be:3f:7e:27:5a:a7:7a:08:5e:18:be:79:63:47:64:4c:
         53:c0:9e:98:2d:cb:91:45:54:2e:d1:8b:6a:db:1a:d2:e1:0a:
         36:ff:99:a2:a9:66:e8:3a:85:f2:59:3a:4e:71:9d:a5:d3:eb:
         7a:1f:e4:d7:fd:8b:bd:04:2b:7f:f7:e7:a6:9f:e0:95:68:ed:
         c5:fd:a7:dc:ef:ee:b7:a7:74:3f:eb:76:3f:34:22:05:1a:47:
         78:ff:92:66:fd:45:d1:7e:37:c3:aa:26:e0:2c:ff:d7:74:bb:
         1c:0c:e4:29:b1:fe:b8:2f:cf:43:bb:8d:9b:4b:de:c6:31:91:
         af:97:55:86:c7:3d:f2:f1:4e:1a:13:bb:e0:ce:ff:51:22:dc:
         4b:18:5b:75:5a:35:9c:d7:c4:ab:16:80:50:a1:34:48:41:7d:
         8d:7f:5d:00
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUIyHJTqUIXFbluXvY6op8TeWMLqswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTExMDE0MTIwWhcNMjUxMjE2MjM1OTU5
WjB6MUkwRwYDVQQFE0A1MWZiMzIwNTk3OTVkMjg1Yzg4NmQzY2M1MTc0NThkMzdk
Y2QzNTE1NDRiNzNiYTYxNTNjZThjMWEzMmQ5M2M2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCfYG6hujtVrBcrKOIL7+LtI5j0cTxgtoA2shhm27A8gEOI
IvlEsgLrh1A+knbVR1ukkFoczWs/Kw0uuFqhv6XccPxBcUq+C2s2PciDcISPSXhv
ncW8HCeJwLB2WVus5l4SAA9Mz2gRT9HRMDZufn1X8ZkaCH2Rxnl8ZrvZfNmEzJSS
oam2Cc3sJGBkoCbvP39+JJhajNy9VwwYSJ3ajiZUxQo/jnqc7pFZaTwfuO6d0SBb
EZ8QwO+Go3bHhas4UX4Jr59d3DhFS4kld5ACpulCzHNPqaKMObttvIllWfeUlRX0
3eZTkOr+Z+SWke+1pO8Eyv8CfWjGPDLz6pX4qSulAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUzpmxO3k5DvTuTJp2zF1j/p/QAYYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzFhZGRmM2E5LWJiMTEtNDEwYS05MThmLWFkNTg0ZjBjNTk3Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB8AYIAwDQYJKoZIhvcNAQELBQADggEBAK+NxYSy6rNgvzY1T6egestq
OI/1yIYYVZjMDxARp842e+ROHfEx2APCJVoRe1bfg8v4W8j8abu+h62hXOnzsRhu
1QMLUJ52KfJeo6p4nPX29yXflJ2ZKVntNtZlvj9+J1qnegheGL55Y0dkTFPAnpgt
y5FFVC7Ri2rbGtLhCjb/maKpZug6hfJZOk5xnaXT63of5Nf9i70EK3/356af4JVo
7cX9p9zv7rendD/rdj80IgUaR3j/kmb9RdF+N8OqJuAs/9d0uxwM5Cmx/rgvz0O7
jZtL3sYxka+XVYbHPfLxThoTu+DO/1Ei3EsYW3VaNZzXxKsWgFChNEhBfY1/XQA=
-----END CERTIFICATE-----