Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57d2e573-972b-4116-8143-7f554c1fffab.roa
File:                     57d2e573-972b-4116-8143-7f554c1fffab.roa (raw, json)
Hash identifier:          1iPISYw0Wfx24iXlt7eizDCVKMCWs4eELGpyEP6oK7M=
Subject key identifier:   41:59:C9:6B:E7:90:54:A7:75:DE:88:95:9D:1F:97:B2:D2:68:A8:49
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       77783F8F26CAA3DBCE4865C8520B8FA1CC0E57
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57d2e573-972b-4116-8143-7f554c1fffab.roa
Signing time:             Tue 11 Nov 2025 01:20:08 +0000
ROA not before:           Tue 11 Nov 2025 01:20:08 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff2:1040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:78:3f:8f:26:ca:a3:db:ce:48:65:c8:52:0b:8f:a1:cc:0e:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 01:20:08 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=407c6f476609821d957cbfe22c51d1cb4a958480a16a66978b930e7d2271cb0d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e9:1d:b3:a4:65:53:32:10:85:bd:25:51:f0:
                    b4:ae:d5:03:19:b7:07:cf:5f:07:c1:ba:58:32:34:
                    47:9a:64:1c:be:b2:37:27:ee:9d:f6:b1:9f:80:57:
                    67:33:02:bd:ed:3b:09:3d:bb:df:e6:26:67:a1:e2:
                    8a:fb:a8:e6:62:44:c3:24:bd:f6:4b:3f:f2:30:97:
                    7c:cd:f3:8c:5a:af:32:b0:ac:03:55:4a:50:10:b6:
                    b1:85:f2:bf:53:6c:2c:bc:26:1b:bc:93:24:56:a9:
                    64:37:85:3d:d1:df:b3:b0:2a:19:2b:c1:61:72:54:
                    5f:61:29:74:72:fd:da:1c:6a:6e:c6:de:bc:0b:d9:
                    ab:b3:e0:f8:c0:72:67:3c:70:3e:2b:fa:bc:9a:40:
                    10:90:56:56:3b:fb:1e:60:60:cd:81:6a:0a:9f:26:
                    6b:63:65:e2:50:a6:e0:23:fa:d0:34:6c:1b:56:94:
                    e0:63:0a:10:68:ee:17:4b:5f:b8:34:4a:13:ac:34:
                    15:19:08:3d:f5:52:e1:a1:35:f1:e0:29:0e:6c:2f:
                    86:ab:21:19:f9:95:2e:5e:c0:fc:c0:52:19:45:74:
                    f8:f1:55:fe:e4:6b:08:fb:a4:8d:2f:58:b5:d6:ec:
                    17:b6:16:8c:d9:80:03:5e:54:d3:c1:f3:73:e4:bd:
                    11:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:59:C9:6B:E7:90:54:A7:75:DE:88:95:9D:1F:97:B2:D2:68:A8:49
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57d2e573-972b-4116-8143-7f554c1fffab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:1040::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:7d:30:37:3d:5e:75:c9:2e:54:91:b5:80:37:cc:22:cd:6e:
         be:4d:b5:46:1a:31:35:cc:a4:53:cf:0f:1d:00:5c:3c:b8:33:
         7e:88:fc:91:11:99:6e:1c:48:90:a8:ed:5d:92:b9:05:a7:3f:
         38:39:a6:aa:1e:51:d2:2f:ee:fd:21:13:63:64:62:10:85:f5:
         cb:02:60:78:e9:aa:c5:c6:d8:45:ef:8a:30:a7:2f:62:8d:18:
         34:e0:3b:95:e1:bc:e7:a9:7f:c9:c7:76:49:90:1b:04:5b:f1:
         d2:6e:78:6a:6a:3b:e4:9e:25:07:40:71:38:72:88:52:c1:66:
         28:92:93:ef:44:86:27:1f:ba:15:10:35:b1:fb:83:c0:c9:29:
         a2:e8:69:84:93:11:25:70:26:60:7f:92:2d:16:af:60:2f:52:
         6e:ce:39:12:09:d6:9c:51:6d:53:1e:b3:b9:8e:09:a7:36:4c:
         d1:e5:5f:1e:66:5d:59:9c:95:db:d3:39:1f:68:89:1a:c3:06:
         79:85:d1:ce:14:41:ec:41:a3:5e:c6:0f:24:a3:dd:e7:e7:34:
         7b:83:0b:f0:23:35:96:c8:6f:7b:6a:cc:a0:8b:7a:7f:82:f5:
         64:59:e9:f4:69:18:ac:e9:0e:0c:52:27:1b:bd:55:1f:a4:d2:
         6a:8e:fb:39
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgITd3g/jybKo9vOSGXIUguPocwOVzANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz
NzEwN2RiZThjYjcxZDBhNzAeFw0yNTExMTEwMTIwMDhaFw0yNTEyMTYyMzU5NTla
MHoxSTBHBgNVBAUTQDQwN2M2ZjQ3NjYwOTgyMWQ5NTdjYmZlMjJjNTFkMWNiNGE5
NTg0ODBhMTZhNjY5NzhiOTMwZTdkMjI3MWNiMGQxLTArBgNVBAMTJGIyNWM5NzBm
LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJvpHbOkZVMyEIW9JVHwtK7VAxm3B89fB8G6WDI0R5pkHL6y
Nyfunfaxn4BXZzMCve07CT273+YmZ6Hiivuo5mJEwyS99ks/8jCXfM3zjFqvMrCs
A1VKUBC2sYXyv1NsLLwmG7yTJFapZDeFPdHfs7AqGSvBYXJUX2EpdHL92hxqbsbe
vAvZq7Pg+MByZzxwPiv6vJpAEJBWVjv7HmBgzYFqCp8ma2Nl4lCm4CP60DRsG1aU
4GMKEGjuF0tfuDRKE6w0FRkIPfVS4aE18eApDmwvhqshGfmVLl7A/MBSGUV0+PFV
/uRrCPukjS9YtdbsF7YWjNmAA15U08Hzc+S9EVMCAwEAAaOCArQwggKwMB0GA1Ud
DgQWBBRBWclr55BUp3XeiJWdH5ey0mioSTAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd
vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk
YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx
OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy
NWMwNDI5NDIvNTdkMmU1NzMtOTcyYi00MTE2LTgxNDMtN2Y1NTRjMWZmZmFiLnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt
MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHACYAH/IQQDANBgkqhkiG9w0BAQsFAAOCAQEAoX0wNz1edckuVJG1gDfMIs1u
vk21RhoxNcykU88PHQBcPLgzfoj8kRGZbhxIkKjtXZK5Bac/ODmmqh5R0i/u/SET
Y2RiEIX1ywJgeOmqxcbYRe+KMKcvYo0YNOA7leG856l/ycd2SZAbBFvx0m54amo7
5J4lB0BxOHKIUsFmKJKT70SGJx+6FRA1sfuDwMkpouhphJMRJXAmYH+SLRavYC9S
bs45EgnWnFFtUx6zuY4JpzZM0eVfHmZdWZyV29M5H2iJGsMGeYXRzhRB7EGjXsYP
JKPd5+c0e4ML8CM1lshve2rMoIt6f4L1ZFnp9GkYrOkODFInG71VH6TSao77OQ==
-----END CERTIFICATE-----