Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/334b74da-25a5-4155-8dcf-838c529ccfcf.roa
File:                     334b74da-25a5-4155-8dcf-838c529ccfcf.roa (raw, json)
Hash identifier:          MIs8KiFIvu+Xg+4XcMslV0BMjxovfuulDIWQl11B5gs=
Subject key identifier:   AF:CA:69:A4:82:37:A1:94:0A:FF:C8:77:3B:0D:91:A6:05:81:64:25
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       461711B30A8568F09CBF9F1A001F468124624B4D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/334b74da-25a5-4155-8dcf-838c529ccfcf.roa
Signing time:             Tue 11 Nov 2025 02:00:48 +0000
ROA not before:           Tue 11 Nov 2025 02:00:48 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f61:4040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:17:11:b3:0a:85:68:f0:9c:bf:9f:1a:00:1f:46:81:24:62:4b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 02:00:48 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=46f6f6ae01645a6dedcfd5c09d7bbef9cdc2f49e1b1819b4135f60806f0632a2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:59:a6:cc:62:9c:28:54:eb:2a:25:7b:2b:fa:
                    64:5e:b6:df:3c:25:56:f3:e5:39:ce:f6:e7:ad:57:
                    55:ae:41:7b:19:70:08:a7:e6:a4:c7:c4:29:c0:ad:
                    e7:e8:6c:0b:a6:63:68:58:ab:79:40:db:b6:07:b3:
                    67:e7:97:97:1c:4b:e1:76:53:0b:df:38:8b:13:b2:
                    3b:22:7f:2d:15:d1:11:82:83:00:1c:84:f4:59:41:
                    b8:51:74:ba:eb:28:f6:a8:94:a4:cd:34:be:06:8d:
                    fb:cf:e3:3b:76:27:63:46:bb:06:05:5a:18:6a:e7:
                    ee:2e:1c:74:12:02:e7:7e:e6:71:20:78:97:b1:f2:
                    a8:37:30:e3:75:ee:75:67:f5:40:0e:d9:0c:b6:f7:
                    ac:c6:02:f1:91:07:1e:3b:a7:87:31:25:24:ad:01:
                    77:c6:e9:41:e6:a3:9b:0c:4f:42:99:c3:b6:41:f9:
                    2d:49:43:12:c3:11:a9:fe:d5:ea:a7:28:bb:3b:64:
                    59:93:ee:c8:a1:76:57:9f:81:74:e5:05:1b:e4:34:
                    ec:a1:a1:74:ac:d2:09:cf:33:30:e2:c0:e1:ab:75:
                    75:08:0d:ee:44:3e:92:ee:c1:4f:06:d5:ca:37:07:
                    e5:da:c8:bd:b1:f5:fb:0c:18:4f:be:db:c2:3e:65:
                    8d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CA:69:A4:82:37:A1:94:0A:FF:C8:77:3B:0D:91:A6:05:81:64:25
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/334b74da-25a5-4155-8dcf-838c529ccfcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:4040::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:2a:3b:1a:d4:8f:7c:bd:59:aa:52:6d:8b:f5:55:ee:4a:82:
         cc:c1:99:df:0e:19:77:91:55:8a:d9:8f:2b:a1:f5:2a:78:af:
         36:97:1a:bb:4a:47:6a:06:e7:aa:2b:d8:4b:d8:0a:01:30:76:
         b5:ca:1b:5b:ca:6b:cb:66:17:7f:1c:04:6c:17:8d:f2:48:6b:
         0a:86:99:bb:dc:e3:66:b2:71:b7:7d:c8:96:f4:20:93:c0:29:
         2b:6e:bf:b3:3a:41:d4:11:37:6e:29:3a:11:3a:b9:79:93:7a:
         47:2c:50:ff:ef:7a:74:8c:28:43:04:b9:98:64:9c:48:da:1a:
         e6:aa:80:27:13:c8:c4:10:00:bf:e3:ff:fe:4e:3d:70:9e:8c:
         d6:3d:85:9f:d4:54:a4:02:47:80:e4:9d:a1:c9:65:8a:1d:29:
         05:65:45:54:88:d4:b1:76:71:00:d0:e4:2c:30:d1:8f:fc:fc:
         ba:f6:8f:f6:f8:52:76:9c:96:44:7e:ef:18:6c:ca:32:8b:4f:
         39:ae:0f:37:aa:c8:78:ae:bf:48:a2:47:e5:f6:07:97:a8:8a:
         da:07:af:80:f0:17:9e:97:08:53:5a:0c:93:16:34:2f:d6:29:
         f6:19:9b:86:80:b8:01:c6:82:9f:a8:04:5b:c7:09:d2:56:23:
         39:41:ce:e3
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIURhcRswqFaPCcv58aAB9GgSRiS00wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTExMDIwMDQ4WhcNMjUxMjE2MjM1OTU5
WjB6MUkwRwYDVQQFE0A0NmY2ZjZhZTAxNjQ1YTZkZWRjZmQ1YzA5ZDdiYmVmOWNk
YzJmNDllMWIxODE5YjQxMzVmNjA4MDZmMDYzMmEyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDCWabMYpwoVOsqJXsr+mRett88JVbz5TnO9uetV1WuQXsZ
cAin5qTHxCnArefobAumY2hYq3lA27YHs2fnl5ccS+F2UwvfOIsTsjsify0V0RGC
gwAchPRZQbhRdLrrKPaolKTNNL4GjfvP4zt2J2NGuwYFWhhq5+4uHHQSAud+5nEg
eJex8qg3MON17nVn9UAO2Qy296zGAvGRBx47p4cxJSStAXfG6UHmo5sMT0KZw7ZB
+S1JQxLDEan+1eqnKLs7ZFmT7sihdlefgXTlBRvkNOyhoXSs0gnPMzDiwOGrdXUI
De5EPpLuwU8G1co3B+XayL2x9fsMGE++28I+ZY0dAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUr8pppII3oZQK/8h3Ow2RpgWBZCUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzMzNGI3NGRhLTI1YTUtNDE1NS04ZGNmLTgzOGM1MjljY2ZjZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB9hQEAwDQYJKoZIhvcNAQELBQADggEBAHoqOxrUj3y9WapSbYv1Ve5K
gszBmd8OGXeRVYrZjyuh9Sp4rzaXGrtKR2oG56or2EvYCgEwdrXKG1vKa8tmF38c
BGwXjfJIawqGmbvc42aycbd9yJb0IJPAKStuv7M6QdQRN24pOhE6uXmTekcsUP/v
enSMKEMEuZhknEjaGuaqgCcTyMQQAL/j//5OPXCejNY9hZ/UVKQCR4DknaHJZYod
KQVlRVSI1LF2cQDQ5Cww0Y/8/Lr2j/b4UnaclkR+7xhsyjKLTzmuDzeqyHiuv0ii
R+X2B5eoitoHr4DwF56XCFNaDJMWNC/WKfYZm4aAuAHGgp+oBFvHCdJWIzlBzuM=
-----END CERTIFICATE-----