Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c222f035-1c02-4052-94b2-4fc3e0405321.roa
File:                     c222f035-1c02-4052-94b2-4fc3e0405321.roa (raw, json)
Hash identifier:          xchGogwW4bdiflS1cPkfkJxOBhIZFmMFWWqEQNyAwEQ=
Subject key identifier:   33:60:ED:E4:EE:29:1C:61:53:A4:ED:A4:33:ED:5D:05:36:13:E4:1B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1AB0E5502E9419C22C864B8480F1417BAD7D3D7E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c222f035-1c02-4052-94b2-4fc3e0405321.roa
Signing time:             Wed 12 Nov 2025 01:11:00 +0000
ROA not before:           Wed 12 Nov 2025 01:11:00 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f20:8000::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b0:e5:50:2e:94:19:c2:2c:86:4b:84:80:f1:41:7b:ad:7d:3d:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 01:11:00 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=6165c9417856190f9d802d99e092a0d8bd9ebda72a98430d1f3020eb888b2fa3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:27:55:b3:07:d1:81:5d:4d:31:87:17:c5:58:
                    68:1b:b6:a5:07:3a:37:8d:5a:e0:78:24:f8:ce:75:
                    28:5c:72:22:a2:a2:98:2c:b7:c3:89:2d:8f:aa:0a:
                    ce:9c:67:1e:9e:f4:8d:b3:17:14:d9:9b:8f:62:f8:
                    a7:6f:bd:85:23:f3:01:89:95:b4:ad:99:99:28:e4:
                    1e:4d:22:e0:33:18:e1:2a:72:0f:7c:1b:55:27:5f:
                    f7:20:56:c9:9e:a7:8d:a4:89:5a:0c:0e:b2:04:59:
                    4b:f5:4d:83:1b:ac:a2:b8:53:cf:d8:00:1a:b2:55:
                    57:24:68:ec:75:3a:eb:e9:39:67:f7:b1:e3:df:3b:
                    59:53:61:92:df:b5:ff:41:6d:bc:03:92:c7:6b:da:
                    46:88:46:5a:6c:31:d2:94:85:a6:0e:20:40:5d:a1:
                    e9:d6:27:04:bd:19:ae:db:24:91:38:dd:47:33:32:
                    9e:39:a6:c6:b8:ce:ca:52:e0:c6:c9:cc:8c:4f:f2:
                    84:62:74:c6:95:2b:21:52:63:b1:9f:b0:3a:c6:29:
                    ae:b0:92:85:0a:e9:33:52:76:7b:65:f6:da:0a:de:
                    cd:f3:3c:50:5c:26:a1:27:c8:35:a1:bc:3d:44:06:
                    4c:55:9c:b6:bc:70:af:61:de:dd:47:a5:2a:63:0b:
                    0a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:60:ED:E4:EE:29:1C:61:53:A4:ED:A4:33:ED:5D:05:36:13:E4:1B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c222f035-1c02-4052-94b2-4fc3e0405321.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f20:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4f:bf:33:97:1f:57:02:ae:c8:ab:5c:9a:23:8c:33:fe:45:a7:
         f9:a1:25:93:ad:72:a9:03:d9:e9:bb:e4:25:ab:fd:e1:2d:08:
         5a:90:48:f5:81:52:95:37:66:88:dd:05:ee:89:bb:52:0f:37:
         98:66:37:ed:c4:48:ee:46:c3:6c:f3:cb:81:9e:2b:f6:5c:e6:
         75:b3:5e:cf:d2:bb:2a:cd:02:24:28:a3:e9:9c:a9:9d:18:32:
         4b:44:dd:99:c8:3b:d4:ee:b2:dd:fc:c6:01:24:a6:26:0e:eb:
         06:7b:5e:f5:27:a7:f8:09:4f:ab:8d:b5:6f:fc:da:df:8c:bc:
         1e:96:46:fa:9b:13:4d:bb:a2:1a:24:52:24:92:87:f9:3a:0e:
         ae:47:1b:99:0c:42:d7:22:33:1b:9e:c8:3c:80:41:b0:5b:0d:
         d4:16:c2:9d:b5:93:6d:fa:18:f0:44:b4:76:bb:84:bb:eb:d1:
         d5:a0:7c:d6:56:3d:da:38:08:b6:bb:95:4d:43:2c:04:54:c0:
         65:dd:94:2a:32:13:a4:2b:d3:d2:b7:74:4f:04:2a:bf:c3:62:
         ea:09:f7:c5:5d:2d:82:67:57:86:87:30:b8:bc:61:ed:f8:a8:
         e5:b1:c1:f9:22:66:ac:4c:fc:b4:f8:35:c8:73:09:32:6b:53:
         f0:09:06:45
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUGrDlUC6UGcIshkuEgPFBe619PX4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTEyMDExMTAwWhcNMjUxMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0A2MTY1Yzk0MTc4NTYxOTBmOWQ4MDJkOTllMDkyYTBkOGJk
OWViZGE3MmE5ODQzMGQxZjMwMjBlYjg4OGIyZmEzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCYJ1WzB9GBXU0xhxfFWGgbtqUHOjeNWuB4JPjOdShcciKi
opgst8OJLY+qCs6cZx6e9I2zFxTZm49i+KdvvYUj8wGJlbStmZko5B5NIuAzGOEq
cg98G1UnX/cgVsmep42kiVoMDrIEWUv1TYMbrKK4U8/YABqyVVckaOx1OuvpOWf3
sePfO1lTYZLftf9BbbwDksdr2kaIRlpsMdKUhaYOIEBdoenWJwS9Ga7bJJE43Ucz
Mp45psa4zspS4MbJzIxP8oRidMaVKyFSY7GfsDrGKa6wkoUK6TNSdntl9toK3s3z
PFBcJqEnyDWhvD1EBkxVnLa8cK9h3t1HpSpjCwqrAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUM2Dt5O4pHGFTpO2kM+1dBTYT5BswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2MyMjJmMDM1LTFjMDItNDA1Mi05NGIyLTRmYzNlMDQwNTMyMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8ggDANBgkqhkiG9w0BAQsFAAOCAQEAT78zlx9XAq7Iq1yaI4wz/kWn
+aElk61yqQPZ6bvkJav94S0IWpBI9YFSlTdmiN0F7om7Ug83mGY37cRI7kbDbPPL
gZ4r9lzmdbNez9K7Ks0CJCij6ZypnRgyS0Tdmcg71O6y3fzGASSmJg7rBnte9Sen
+AlPq421b/za34y8HpZG+psTTbuiGiRSJJKH+ToOrkcbmQxC1yIzG57IPIBBsFsN
1BbCnbWTbfoY8ES0druEu+vR1aB81lY92jgItruVTUMsBFTAZd2UKjITpCvT0rd0
TwQqv8Ni6gn3xV0tgmdXhocwuLxh7fio5bHB+SJmrEz8tPg1yHMJMmtT8AkGRQ==
-----END CERTIFICATE-----