Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62e31f42-58ee-49fe-af79-1ffeffece2ec.roa
File:                     62e31f42-58ee-49fe-af79-1ffeffece2ec.roa (raw, json)
Hash identifier:          bym1BL2lsbtWTDaxKCMR0w4rasAMIuR+lCWBSD77mAw=
Subject key identifier:   C6:D6:7A:18:05:9B:5B:1E:87:F8:2E:08:5B:6A:13:44:2A:72:7F:3F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3B4DD907ECA1DC7EAD4A6EC0940E6E68FAC0CD6C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62e31f42-58ee-49fe-af79-1ffeffece2ec.roa
Signing time:             Sat 08 Nov 2025 02:11:00 +0000
ROA not before:           Sat 08 Nov 2025 02:11:00 +0000
ROA not after:            Sat 13 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fec:e000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:4d:d9:07:ec:a1:dc:7e:ad:4a:6e:c0:94:0e:6e:68:fa:c0:cd:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 02:11:00 2025 GMT
            Not After : Dec 13 23:59:59 2025 GMT
        Subject: serialNumber=be19a0214a7b03b9c5308029d719c58ffd3e10835e7060e8aab1b07f2726bf8f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c1:e8:17:1e:2e:32:0a:5b:24:d6:f1:bc:18:
                    2d:5b:75:aa:6a:a2:06:42:46:15:c4:af:11:7f:72:
                    2b:8d:69:ad:38:0f:83:6e:f7:0a:4b:69:aa:3d:f9:
                    a9:35:76:43:86:7e:76:4d:c4:ce:53:c9:27:68:b9:
                    ab:f5:d6:4c:37:3a:d5:ec:58:15:c2:4d:17:8c:22:
                    78:97:95:05:d2:57:eb:a1:16:c6:ff:73:16:3d:47:
                    a7:81:43:63:25:97:f0:5c:9b:1e:e2:74:8a:69:33:
                    2e:e6:5c:64:2a:21:06:dd:de:c8:c0:82:03:0a:98:
                    b4:3d:36:83:23:cc:45:59:c3:83:fe:be:98:ce:b9:
                    66:8a:35:b3:d7:41:bb:a1:5f:20:0f:ca:ac:da:1d:
                    d4:c2:74:9e:a7:01:df:9c:d1:74:65:3e:83:19:6e:
                    fa:4d:f1:73:b4:26:cd:2c:80:bd:28:1f:f2:76:05:
                    bd:5a:5a:07:4c:4e:35:e0:c0:79:1c:fa:4a:20:24:
                    d9:ba:f7:ed:c3:1d:36:75:f5:35:ad:46:81:d5:5f:
                    1d:f2:91:4e:dd:f2:9d:4e:97:f9:5d:ba:16:a3:3b:
                    4c:f6:d9:7c:65:f8:8a:51:ce:a3:2f:02:19:8a:20:
                    e0:08:94:eb:38:5f:93:53:82:bd:9a:98:ca:24:e1:
                    2a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D6:7A:18:05:9B:5B:1E:87:F8:2E:08:5B:6A:13:44:2A:72:7F:3F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62e31f42-58ee-49fe-af79-1ffeffece2ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fec:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:e2:27:1a:e6:37:be:66:4c:f2:08:f6:21:7c:15:bf:c6:9a:
         28:1a:e6:7d:d0:72:bf:45:c2:a0:fa:79:34:9a:59:87:2c:d2:
         39:93:4c:29:1d:6c:10:b0:72:c2:a1:6b:9f:21:ca:7e:02:62:
         3d:71:a4:6e:40:5c:6a:24:f3:68:1d:06:bc:be:6b:c2:7c:8f:
         b9:ec:3a:f3:37:87:61:3a:05:d4:53:70:98:2b:d6:e2:a8:b4:
         35:01:22:80:2e:7f:2e:65:c5:00:42:bc:b1:78:cf:e0:e1:a8:
         8a:8a:2c:53:16:bf:f1:b1:34:1a:e3:ad:03:25:ac:32:72:cd:
         3e:5b:ef:f4:ba:f3:7f:01:ca:b6:25:94:13:d5:46:79:48:08:
         ea:4a:75:72:e2:13:ca:8a:2b:07:d3:66:64:ce:b3:a1:e2:67:
         21:da:87:9c:72:5c:f7:af:c6:25:63:26:08:8d:2a:fc:4a:c3:
         87:1c:a8:c5:55:28:67:d1:0d:e9:5b:79:65:69:f9:71:d5:e1:
         aa:8f:73:dc:b4:a0:10:2b:a5:e2:c9:cf:86:6c:59:bc:8b:a1:
         47:05:4d:b7:a7:bc:6b:2b:c9:35:98:4f:38:b0:d3:e2:b0:59:
         56:3e:46:52:55:8b:86:af:8a:2c:3f:80:70:e4:b5:fc:43:0c:
         d0:a3:31:19
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUO03ZB+yh3H6tSm7AlA5uaPrAzWwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTA4MDIxMTAwWhcNMjUxMjEzMjM1OTU5
WjB6MUkwRwYDVQQFE0BiZTE5YTAyMTRhN2IwM2I5YzUzMDgwMjlkNzE5YzU4ZmZk
M2UxMDgzNWU3MDYwZThhYWIxYjA3ZjI3MjZiZjhmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCiwegXHi4yClsk1vG8GC1bdapqogZCRhXErxF/ciuNaa04
D4Nu9wpLaao9+ak1dkOGfnZNxM5TySdouav11kw3OtXsWBXCTReMIniXlQXSV+uh
Fsb/cxY9R6eBQ2Mll/Bcmx7idIppMy7mXGQqIQbd3sjAggMKmLQ9NoMjzEVZw4P+
vpjOuWaKNbPXQbuhXyAPyqzaHdTCdJ6nAd+c0XRlPoMZbvpN8XO0Js0sgL0oH/J2
Bb1aWgdMTjXgwHkc+kogJNm69+3DHTZ19TWtRoHVXx3ykU7d8p1Ol/lduhajO0z2
2Xxl+IpRzqMvAhmKIOAIlOs4X5NTgr2amMok4SqfAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUxtZ6GAWbWx6H+C4IW2oTRCpyfz8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzYyZTMxZjQyLTU4ZWUtNDlmZS1hZjc5LTFmZmVmZmVjZTJlYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/s4AAwDQYJKoZIhvcNAQELBQADggEBALLiJxrmN75mTPII9iF8Fb/G
miga5n3Qcr9FwqD6eTSaWYcs0jmTTCkdbBCwcsKha58hyn4CYj1xpG5AXGok82gd
Bry+a8J8j7nsOvM3h2E6BdRTcJgr1uKotDUBIoAufy5lxQBCvLF4z+DhqIqKLFMW
v/GxNBrjrQMlrDJyzT5b7/S6838ByrYllBPVRnlICOpKdXLiE8qKKwfTZmTOs6Hi
ZyHah5xyXPevxiVjJgiNKvxKw4ccqMVVKGfRDelbeWVp+XHV4aqPc9y0oBArpeLJ
z4ZsWbyLoUcFTbenvGsryTWYTziw0+KwWVY+RlJVi4aviiw/gHDktfxDDNCjMRk=
-----END CERTIFICATE-----