Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/429a2825-6541-483f-a805-1faa5a6939bf.roa
File:                     429a2825-6541-483f-a805-1faa5a6939bf.roa (raw, json)
Hash identifier:          1ay7KuHm9wtezKQGXCgtmwHoccu/CwqiVVvFktGcpgY=
Subject key identifier:   17:FB:0F:CB:E4:8F:CF:18:E7:E5:9E:D9:CE:80:84:44:C5:0C:95:59
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       432AA764959E4BBF9A0780166EF7433BE3170A4C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/429a2825-6541-483f-a805-1faa5a6939bf.roa
Signing time:             Wed 12 Nov 2025 02:11:27 +0000
ROA not before:           Wed 12 Nov 2025 02:11:27 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f14:c800::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:2a:a7:64:95:9e:4b:bf:9a:07:80:16:6e:f7:43:3b:e3:17:0a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 02:11:27 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=1f4a47f1f7faa9990d6b7ed05e7885fcc8cba1aa0e075940aee7e6e6d0b05f00, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:66:f2:62:92:9d:bf:4d:40:08:96:36:12:e6:
                    d6:3f:ee:ba:a0:64:51:2d:36:d1:d1:a4:98:d0:cd:
                    22:6d:07:a0:ac:57:20:4c:aa:1b:38:c5:5a:48:76:
                    53:ac:ed:af:23:05:53:5f:f7:b9:fc:5b:8d:b7:d3:
                    da:00:0e:45:73:d0:f7:68:57:6f:21:62:c4:f0:ab:
                    dd:26:20:f7:fd:4c:dd:5b:92:e9:78:b6:61:17:02:
                    ff:b1:4f:9e:2d:5c:14:ce:8e:0c:11:cc:dd:50:7c:
                    25:63:4b:4a:31:4b:29:89:cb:ed:e1:97:86:77:50:
                    8e:57:57:4e:e1:b6:db:23:55:11:40:11:36:a6:85:
                    81:45:81:d6:ae:88:01:c0:c7:4d:e5:be:eb:67:86:
                    48:ec:45:79:36:38:36:5e:70:63:6c:25:22:46:80:
                    a7:5f:e2:93:8c:18:9d:a6:9e:b8:ff:27:30:38:eb:
                    8c:15:a0:a0:af:5c:41:bb:51:96:a1:15:23:d4:87:
                    f4:99:35:20:68:9f:6f:62:a3:a9:f9:0b:34:80:ef:
                    7d:ad:a8:d4:c0:8a:f3:26:b1:88:67:a9:6f:4c:92:
                    f0:11:07:30:76:ed:af:8f:ee:f5:62:00:71:16:bb:
                    64:62:85:03:40:cd:22:f7:48:77:d8:5e:42:ed:70:
                    7b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:FB:0F:CB:E4:8F:CF:18:E7:E5:9E:D9:CE:80:84:44:C5:0C:95:59
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/429a2825-6541-483f-a805-1faa5a6939bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f14:c800::/37

    Signature Algorithm: sha256WithRSAEncryption
         35:c6:05:ce:c6:ae:61:94:a0:7d:32:66:24:1d:dd:37:d7:45:
         3c:02:59:3a:43:f0:05:42:fc:22:b8:0e:7c:86:80:06:8d:6c:
         e3:0a:2a:ed:d8:44:a7:e6:73:18:87:08:a2:1f:8b:1e:ec:1f:
         ff:ac:f4:48:9d:f3:21:a6:46:b8:52:ed:5b:5a:4c:95:f8:e8:
         77:67:6d:5d:5b:9d:7b:09:b0:25:5a:ee:4d:35:f9:21:f8:2a:
         cb:e3:d9:0d:4b:4a:38:46:fb:1e:c4:77:b2:0b:25:1b:03:3a:
         b3:7a:d6:99:b9:c8:32:42:0c:b3:3a:20:ab:80:05:58:f5:1b:
         9c:66:19:f7:88:bb:df:cd:12:9e:28:5d:e3:b2:e2:1c:61:f1:
         7d:92:cb:8d:75:59:7c:da:80:88:6a:cb:11:d8:91:89:3c:04:
         d4:73:1a:f5:f4:0a:7e:72:eb:98:56:c3:26:30:f9:6d:43:59:
         06:ba:95:2a:c1:5b:ff:87:c6:13:4f:dd:a5:db:62:cf:41:8b:
         d9:17:7c:23:ad:12:00:b1:23:01:b3:4e:c7:55:a7:c5:65:11:
         76:ee:7e:0a:43:f4:70:b5:9c:80:c3:a3:bb:f1:af:93:df:39:
         d5:a8:e4:0c:ff:c8:e1:79:41:c3:a7:01:cd:2d:25:f9:40:3e:
         5b:96:a1:d7
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUQyqnZJWeS7+aB4AWbvdDO+MXCkwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTEyMDIxMTI3WhcNMjUxMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0AxZjRhNDdmMWY3ZmFhOTk5MGQ2YjdlZDA1ZTc4ODVmY2M4
Y2JhMWFhMGUwNzU5NDBhZWU3ZTZlNmQwYjA1ZjAwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDCZvJikp2/TUAIljYS5tY/7rqgZFEtNtHRpJjQzSJtB6Cs
VyBMqhs4xVpIdlOs7a8jBVNf97n8W42309oADkVz0PdoV28hYsTwq90mIPf9TN1b
kul4tmEXAv+xT54tXBTOjgwRzN1QfCVjS0oxSymJy+3hl4Z3UI5XV07httsjVRFA
ETamhYFFgdauiAHAx03lvutnhkjsRXk2ODZecGNsJSJGgKdf4pOMGJ2mnrj/JzA4
64wVoKCvXEG7UZahFSPUh/SZNSBon29io6n5CzSA732tqNTAivMmsYhnqW9MkvAR
BzB27a+P7vViAHEWu2RihQNAzSL3SHfYXkLtcHtnAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUF/sPy+SPzxjn5Z7ZzoCERMUMlVkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQyOWEyODI1LTY1NDEtNDgzZi1hODA1LTFmYWE1YTY5MzliZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgMmAB8UyDANBgkqhkiG9w0BAQsFAAOCAQEANcYFzsauYZSgfTJmJB3dN9dF
PAJZOkPwBUL8IrgOfIaABo1s4woq7dhEp+ZzGIcIoh+LHuwf/6z0SJ3zIaZGuFLt
W1pMlfjod2dtXVudewmwJVruTTX5Ifgqy+PZDUtKOEb7HsR3sgslGwM6s3rWmbnI
MkIMszogq4AFWPUbnGYZ94i7380Snihd47LiHGHxfZLLjXVZfNqAiGrLEdiRiTwE
1HMa9fQKfnLrmFbDJjD5bUNZBrqVKsFb/4fGE0/dpdtiz0GL2Rd8I60SALEjAbNO
x1WnxWURdu5+CkP0cLWcgMOju/Gvk9851ajkDP/I4XlBw6cBzS0l+UA+W5ah1w==
-----END CERTIFICATE-----