Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/992a7387-7db9-45e3-bd7c-29f363cc0079.roa
File:                     992a7387-7db9-45e3-bd7c-29f363cc0079.roa (raw, json)
Hash identifier:          ZpXtDdHN728ICz1ZGsLyVnx64ag13F1Ueyt9L3U5t6Q=
Subject key identifier:   ED:68:FD:EF:45:EF:B0:19:36:3D:8C:0B:02:8C:8A:5C:5D:70:0F:54
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       306E8D5213B127FAE89A9E4634E0EABEA92B2739
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/992a7387-7db9-45e3-bd7c-29f363cc0079.roa
Signing time:             Wed 29 Oct 2025 07:25:09 +0000
ROA not before:           Wed 29 Oct 2025 07:25:09 +0000
ROA not after:            Wed 03 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fea:8050::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:6e:8d:52:13:b1:27:fa:e8:9a:9e:46:34:e0:ea:be:a9:2b:27:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 29 07:25:09 2025 GMT
            Not After : Dec  3 23:59:59 2025 GMT
        Subject: serialNumber=cf6bd031732f98e1512c98dacb9c3b8678a1b55063da1885d660e6829fc6b9e2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1a:6f:88:e7:1f:ef:d4:37:6b:af:41:b2:1c:
                    89:86:7b:7a:95:a2:9a:1e:1f:2f:cd:60:01:a5:e5:
                    17:26:b8:8a:b1:d6:1e:49:e3:3a:47:da:d4:5e:e9:
                    29:46:d8:3f:b0:75:d3:48:34:c7:76:4d:9f:a3:01:
                    dd:af:96:62:e2:c2:03:2a:34:3b:5b:fe:08:0d:9e:
                    fb:e2:6c:c6:2f:c0:bf:aa:da:08:bd:83:1a:b6:7a:
                    3a:a0:75:9e:c1:8b:17:90:41:df:20:ac:3e:e9:4e:
                    8b:43:a8:27:12:72:fd:3d:40:56:a3:75:f6:64:1a:
                    d4:2b:f0:fd:a9:d3:80:3b:9c:32:2e:5f:99:66:1a:
                    9f:68:73:d0:b8:4d:20:86:01:46:45:b8:92:ae:f4:
                    dd:69:eb:47:24:db:70:07:05:5b:6c:27:86:8d:19:
                    51:71:71:6e:d5:be:23:12:c4:21:a1:5e:40:a5:24:
                    d8:7b:69:83:4e:be:5a:65:cd:e6:50:b6:11:b2:00:
                    d6:47:21:fd:fa:ed:79:c8:9b:88:88:20:d5:55:19:
                    17:5d:f3:d7:c1:39:92:0c:c4:b8:f7:3b:8c:b5:78:
                    a3:93:ac:20:e5:38:cc:77:a5:66:02:9f:d1:7c:23:
                    ab:2c:1d:e7:fc:73:17:ce:48:a3:ee:2c:2d:1c:00:
                    9f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:68:FD:EF:45:EF:B0:19:36:3D:8C:0B:02:8C:8A:5C:5D:70:0F:54
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/992a7387-7db9-45e3-bd7c-29f363cc0079.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fea:8050::/48

    Signature Algorithm: sha256WithRSAEncryption
         c7:ec:61:d4:6a:f5:ce:0c:54:33:08:c5:fc:49:03:76:1b:b8:
         ef:9b:a0:37:f5:da:b1:bf:da:76:b3:55:3f:23:d5:c5:93:f7:
         36:3e:82:11:2c:4f:38:cc:2e:99:95:99:ba:1f:d8:28:bc:7f:
         dd:f3:ad:4e:92:44:8c:d0:7b:cd:76:ff:9c:28:2c:98:fd:4a:
         aa:5b:24:57:96:14:c8:12:60:bb:ed:ab:83:83:2d:39:53:a3:
         1a:c7:c6:c8:ac:8f:17:0b:8b:7a:03:07:7f:f5:5e:1e:36:73:
         b2:cf:91:cc:84:c4:e9:8f:a2:4c:59:47:7f:a1:fd:dd:51:42:
         10:6a:44:64:78:b2:be:5d:7b:00:d2:07:1c:08:72:57:76:9b:
         93:0a:c5:4a:6a:58:1e:b2:b4:30:1c:67:2a:6f:7e:74:b7:c6:
         b3:58:65:10:92:d3:25:94:54:58:05:c0:cf:ad:f5:e5:fa:46:
         88:ae:53:ca:c2:7d:87:c3:d7:b4:62:cf:49:67:e2:89:9d:90:
         33:1b:35:d7:d1:6b:7e:5a:d3:a1:2a:97:2b:20:19:33:f9:57:
         ea:39:b7:c0:69:50:ed:2a:4b:59:b3:64:ee:2d:62:7a:da:14:
         8e:fa:ec:98:ef:39:d1:bc:0a:d4:e1:77:85:80:8a:de:ac:51:
         9f:2e:7e:7a
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUMG6NUhOxJ/romp5GNODqvqkrJzkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDI5MDcyNTA5WhcNMjUxMjAzMjM1OTU5
WjB6MUkwRwYDVQQFE0BjZjZiZDAzMTczMmY5OGUxNTEyYzk4ZGFjYjljM2I4Njc4
YTFiNTUwNjNkYTE4ODVkNjYwZTY4MjlmYzZiOWUyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDBGm+I5x/v1Ddrr0GyHImGe3qVopoeHy/NYAGl5RcmuIqx
1h5J4zpH2tRe6SlG2D+wddNINMd2TZ+jAd2vlmLiwgMqNDtb/ggNnvvibMYvwL+q
2gi9gxq2ejqgdZ7BixeQQd8grD7pTotDqCcScv09QFajdfZkGtQr8P2p04A7nDIu
X5lmGp9oc9C4TSCGAUZFuJKu9N1p60ck23AHBVtsJ4aNGVFxcW7VviMSxCGhXkCl
JNh7aYNOvlplzeZQthGyANZHIf367XnIm4iIINVVGRdd89fBOZIMxLj3O4y1eKOT
rCDlOMx3pWYCn9F8I6ssHef8cxfOSKPuLC0cAJ8TAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU7Wj970XvsBk2PYwLAoyKXF1wD1QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzk5MmE3Mzg3LTdkYjktNDVlMy1iZDdjLTI5ZjM2M2NjMDA3OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/qgFAwDQYJKoZIhvcNAQELBQADggEBAMfsYdRq9c4MVDMIxfxJA3Yb
uO+boDf12rG/2nazVT8j1cWT9zY+ghEsTzjMLpmVmbof2Ci8f93zrU6SRIzQe812
/5woLJj9SqpbJFeWFMgSYLvtq4ODLTlToxrHxsisjxcLi3oDB3/1Xh42c7LPkcyE
xOmPokxZR3+h/d1RQhBqRGR4sr5dewDSBxwIcld2m5MKxUpqWB6ytDAcZypvfnS3
xrNYZRCS0yWUVFgFwM+t9eX6RoiuU8rCfYfD17Riz0ln4omdkDMbNdfRa35a06Eq
lysgGTP5V+o5t8BpUO0qS1mzZO4tYnraFI767JjvOdG8CtThd4WAit6sUZ8ufno=
-----END CERTIFICATE-----