Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d07779e-2b8c-4173-b3f8-1cd5de2e437c.roa
File:                     7d07779e-2b8c-4173-b3f8-1cd5de2e437c.roa (raw, json)
Hash identifier:          kbzTs0qeYv7dojSsG6GIPmmGDrLpancN9Z++uwo4uw4=
Subject key identifier:   74:3B:8D:19:F5:99:35:FC:BB:10:7D:E9:D7:79:40:79:C7:0A:16:83
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       73991BC6983A10EE5222892F41F0E645F1CBFEAC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d07779e-2b8c-4173-b3f8-1cd5de2e437c.roa
Signing time:             Wed 12 Nov 2025 01:50:08 +0000
ROA not before:           Wed 12 Nov 2025 01:50:08 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f29:4000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:99:1b:c6:98:3a:10:ee:52:22:89:2f:41:f0:e6:45:f1:cb:fe:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 01:50:08 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=752d3e0bcb4f7f496f2f8b53ee0a612dbe46ea9fdceffa5ef10f5135b1bc43f1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fc:bf:e8:1a:d8:ad:b2:13:38:76:09:b1:70:
                    fa:b0:c5:d0:42:f4:a9:3c:e2:1b:6c:4e:ae:6f:d1:
                    9e:3a:c8:98:eb:13:f1:70:aa:73:f5:39:14:9a:7d:
                    83:56:c1:23:d5:6c:10:2c:4d:ad:4e:d9:b9:6c:89:
                    a5:21:60:17:d5:4e:78:34:05:df:df:af:99:3c:14:
                    f6:a9:96:39:36:d7:15:65:a6:a1:77:db:7f:01:9d:
                    d0:12:dd:18:c2:e4:20:a6:88:9e:94:56:6f:74:4d:
                    67:d3:ba:f0:52:17:a8:e9:f1:d9:ee:53:ad:8c:f2:
                    03:eb:79:a9:57:9f:7e:2c:81:39:73:c3:9c:e6:e3:
                    4d:d9:fa:98:aa:56:7d:d6:c5:13:61:64:9c:d8:db:
                    62:60:5e:91:87:41:f0:62:f6:8f:6b:b2:f6:88:b2:
                    2a:43:ca:dc:33:d7:71:a6:ea:76:96:73:98:d1:98:
                    5a:17:b8:83:e6:ad:c7:70:1d:81:1b:71:0e:dc:76:
                    40:fb:59:7c:97:cc:72:2b:f2:de:64:a8:46:a4:a0:
                    a7:03:6a:5b:d8:ad:a8:0d:b1:80:08:1e:56:b3:ee:
                    5a:2b:be:90:8e:75:7f:78:92:8c:97:6c:76:3f:06:
                    fa:3c:13:d0:2e:39:80:70:be:3b:4a:34:1e:a6:cd:
                    bd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:3B:8D:19:F5:99:35:FC:BB:10:7D:E9:D7:79:40:79:C7:0A:16:83
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d07779e-2b8c-4173-b3f8-1cd5de2e437c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f29:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         39:4c:69:eb:dc:c5:9b:4b:84:92:d1:1a:57:fa:d1:23:3d:d2:
         f6:bd:1a:d9:29:02:d4:26:b6:65:2e:ef:99:38:a3:5f:57:f9:
         32:96:99:08:e8:ff:25:e0:8a:65:cd:e7:17:be:cb:52:da:1d:
         8e:77:84:6a:cd:18:4a:8b:67:81:04:bb:bc:85:e1:0e:7a:fb:
         78:6c:35:b2:1c:0a:48:17:ba:51:87:68:97:5f:10:28:fa:14:
         16:7c:e3:ea:88:d6:bb:3d:a1:4a:ce:41:a0:e6:8a:2f:7f:db:
         13:a4:dc:f6:5e:e1:24:67:7c:22:42:f6:aa:cb:28:b1:5b:a1:
         a3:8b:4c:69:ca:47:08:84:83:3d:ba:59:ed:0c:52:f8:62:d5:
         10:18:42:b4:5f:ed:cd:cd:66:da:4c:f2:97:b7:10:72:6f:8a:
         d3:15:1a:a9:1e:b1:f9:7f:e9:26:8c:02:90:19:99:cd:0b:17:
         43:76:a9:df:a0:8f:a6:1f:62:49:08:f7:8c:1e:e3:6c:cd:60:
         0e:e6:3f:80:91:ad:f9:42:54:35:fc:de:5c:08:e1:38:6d:b2:
         c5:4f:d8:76:29:24:e0:0c:87:ba:07:19:41:3b:5e:16:95:cf:
         de:67:c5:9a:4e:41:90:d2:9c:a7:d9:f9:9a:78:7d:a1:2f:f7:
         78:4d:91:6a
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUc5kbxpg6EO5SIokvQfDmRfHL/qwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTEyMDE1MDA4WhcNMjUxMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0A3NTJkM2UwYmNiNGY3ZjQ5NmYyZjhiNTNlZTBhNjEyZGJl
NDZlYTlmZGNlZmZhNWVmMTBmNTEzNWIxYmM0M2YxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCr/L/oGtitshM4dgmxcPqwxdBC9Kk84htsTq5v0Z46yJjr
E/FwqnP1ORSafYNWwSPVbBAsTa1O2blsiaUhYBfVTng0Bd/fr5k8FPapljk21xVl
pqF3238BndAS3RjC5CCmiJ6UVm90TWfTuvBSF6jp8dnuU62M8gPrealXn34sgTlz
w5zm403Z+piqVn3WxRNhZJzY22JgXpGHQfBi9o9rsvaIsipDytwz13Gm6naWc5jR
mFoXuIPmrcdwHYEbcQ7cdkD7WXyXzHIr8t5kqEakoKcDalvYragNsYAIHlaz7lor
vpCOdX94koyXbHY/Bvo8E9AuOYBwvjtKNB6mzb0LAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUdDuNGfWZNfy7EH3p13lAeccKFoMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdkMDc3NzllLTJiOGMtNDE3My1iM2Y4LTFjZDVkZTJlNDM3Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8pQDANBgkqhkiG9w0BAQsFAAOCAQEAOUxp69zFm0uEktEaV/rRIz3S
9r0a2SkC1Ca2ZS7vmTijX1f5MpaZCOj/JeCKZc3nF77LUtodjneEas0YSotngQS7
vIXhDnr7eGw1shwKSBe6UYdol18QKPoUFnzj6ojWuz2hSs5BoOaKL3/bE6Tc9l7h
JGd8IkL2qssosVuho4tMacpHCISDPbpZ7QxS+GLVEBhCtF/tzc1m2kzyl7cQcm+K
0xUaqR6x+X/pJowCkBmZzQsXQ3ap36CPph9iSQj3jB7jbM1gDuY/gJGt+UJUNfze
XAjhOG2yxU/Ydikk4AyHugcZQTteFpXP3mfFmk5BkNKcp9n5mnh9oS/3eE2Rag==
-----END CERTIFICATE-----