Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8cb207f3-76ac-4e73-bddd-7d6a70dea8a4.roa
File:                     8cb207f3-76ac-4e73-bddd-7d6a70dea8a4.roa (raw, json)
Hash identifier:          0XRXUSBerQ282f7qy3UDen5JIhhto/SYr/0MSB6vYGE=
Subject key identifier:   E5:66:EB:C6:EB:CD:26:A6:40:42:A5:40:D4:46:66:83:B8:FF:16:D8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2C0C78D3D415AF85B7A014F5FC757ED1676A9033
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8cb207f3-76ac-4e73-bddd-7d6a70dea8a4.roa
Signing time:             Tue 11 Nov 2025 01:31:40 +0000
ROA not before:           Tue 11 Nov 2025 01:31:40 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f61:50c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:0c:78:d3:d4:15:af:85:b7:a0:14:f5:fc:75:7e:d1:67:6a:90:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 01:31:40 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=f6261a25e2bb1a665d24f5cdbfe87eca7d8c28241f4a33b19f092b4d3356cfaa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0a:1c:d9:7d:00:52:72:34:a9:8a:68:87:7b:
                    58:e5:a3:3c:7a:06:7f:72:9d:77:43:59:e7:03:6a:
                    7a:90:54:5d:29:88:20:0f:6c:65:e1:9c:7f:c7:05:
                    a8:87:7f:cd:63:c5:9f:74:72:57:72:09:0b:e1:44:
                    8b:dc:7c:d2:63:7b:0a:54:ca:a8:34:b5:57:ca:59:
                    5b:69:af:aa:83:7e:66:1a:90:5a:12:10:cf:54:f8:
                    0c:44:2d:6b:6b:bf:0d:dc:e8:41:9f:e0:94:35:c8:
                    a3:ae:60:9e:ff:46:d8:2c:27:cf:21:fa:b9:65:e9:
                    cc:12:85:d2:65:c8:6b:67:30:bb:42:c1:06:60:5c:
                    7b:ff:48:89:88:91:0e:b8:fd:4e:eb:e5:89:1c:8f:
                    12:a4:58:32:2b:a4:a7:9a:42:88:f7:d8:eb:ef:8a:
                    4f:48:f7:42:24:75:dd:9b:ce:a1:6f:82:01:a9:18:
                    59:73:71:a1:f0:f2:d2:35:dc:4e:e9:d7:ce:16:f9:
                    1e:4d:6e:57:fb:09:1f:19:ee:1c:23:fa:c6:6c:ee:
                    4e:e4:37:f8:64:c2:ec:8d:c2:c4:59:4c:fc:63:e0:
                    2e:1f:0b:48:d4:2d:2d:6a:16:bc:ec:bf:53:54:29:
                    13:73:5e:d0:f8:c7:7d:71:21:30:ee:8e:0d:96:ca:
                    f3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:66:EB:C6:EB:CD:26:A6:40:42:A5:40:D4:46:66:83:B8:FF:16:D8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8cb207f3-76ac-4e73-bddd-7d6a70dea8a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:50c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:ac:6c:83:af:61:86:ef:52:66:a3:4c:a8:95:03:90:00:c5:
         fb:c8:92:ba:7f:a4:33:08:b5:63:21:1f:87:b5:09:82:7a:4a:
         61:ac:f1:53:61:aa:6e:fc:59:d1:fe:59:56:c3:01:02:0b:0d:
         b6:ad:83:28:50:4c:0c:b1:75:25:90:4f:e8:3f:4d:8e:61:c3:
         3a:da:5c:ee:93:5d:d7:c8:3e:cd:18:eb:e8:ed:55:a7:b0:a8:
         26:18:32:5f:ba:b1:e3:63:04:5d:f1:a3:09:0e:e5:e4:f3:b7:
         5a:c5:93:c4:4e:8a:c3:9f:c0:92:a4:c7:38:2f:9a:11:20:de:
         82:03:85:22:af:e4:17:83:bb:1a:82:81:e4:0e:f2:91:e4:03:
         da:d8:70:bc:69:34:10:d7:fc:84:f6:86:3e:48:ea:3e:e9:c7:
         68:b1:b3:33:19:9e:04:57:e6:76:68:8a:7a:92:ea:67:d2:8e:
         95:9a:4a:51:ed:5f:72:7a:65:a2:58:fe:88:33:8d:e9:16:fd:
         5e:90:8b:81:e5:d0:6f:ad:ea:63:5d:e2:62:d0:94:1b:16:f1:
         25:d9:b6:f0:12:35:1f:84:a1:dc:ca:91:8b:c3:7f:a6:d0:52:
         ce:c0:d0:64:af:3d:83:64:a5:23:9d:8e:30:3c:b4:93:04:a4:
         85:6f:d4:0c
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIULAx409QVr4W3oBT1/HV+0WdqkDMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTExMDEzMTQwWhcNMjUxMjE2MjM1OTU5
WjB6MUkwRwYDVQQFE0BmNjI2MWEyNWUyYmIxYTY2NWQyNGY1Y2RiZmU4N2VjYTdk
OGMyODI0MWY0YTMzYjE5ZjA5MmI0ZDMzNTZjZmFhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCNChzZfQBScjSpimiHe1jlozx6Bn9ynXdDWecDanqQVF0p
iCAPbGXhnH/HBaiHf81jxZ90cldyCQvhRIvcfNJjewpUyqg0tVfKWVtpr6qDfmYa
kFoSEM9U+AxELWtrvw3c6EGf4JQ1yKOuYJ7/RtgsJ88h+rll6cwShdJlyGtnMLtC
wQZgXHv/SImIkQ64/U7r5YkcjxKkWDIrpKeaQoj32Ovvik9I90Ikdd2bzqFvggGp
GFlzcaHw8tI13E7p184W+R5Nblf7CR8Z7hwj+sZs7k7kN/hkwuyNwsRZTPxj4C4f
C0jULS1qFrzsv1NUKRNzXtD4x31xITDujg2WyvPbAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU5WbrxuvNJqZAQqVA1EZmg7j/FtgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzhjYjIwN2YzLTc2YWMtNGU3My1iZGRkLTdkNmE3MGRlYThhNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB9hUMAwDQYJKoZIhvcNAQELBQADggEBAF+sbIOvYYbvUmajTKiVA5AA
xfvIkrp/pDMItWMhH4e1CYJ6SmGs8VNhqm78WdH+WVbDAQILDbatgyhQTAyxdSWQ
T+g/TY5hwzraXO6TXdfIPs0Y6+jtVaewqCYYMl+6seNjBF3xowkO5eTzt1rFk8RO
isOfwJKkxzgvmhEg3oIDhSKv5BeDuxqCgeQO8pHkA9rYcLxpNBDX/IT2hj5I6j7p
x2ixszMZngRX5nZoinqS6mfSjpWaSlHtX3J6ZaJY/ogzjekW/V6Qi4Hl0G+t6mNd
4mLQlBsW8SXZtvASNR+EodzKkYvDf6bQUs7A0GSvPYNkpSOdjjA8tJMEpIVv1Aw=
-----END CERTIFICATE-----