Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb904bd7-c5b9-4fb0-a66f-158ff7700b6b.roa
File:                     cb904bd7-c5b9-4fb0-a66f-158ff7700b6b.roa (raw, json)
Hash identifier:          SJ2+RKAshzMFljd3qr+k7+4UzC6jH44MxiQzgwKCx6U=
Subject key identifier:   04:C1:41:03:DB:CF:74:A8:D9:50:57:7F:82:A0:1F:F7:50:44:5E:B2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1D815F27D1CAA5C347BB45C97C8BB8B9D38D7F99
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb904bd7-c5b9-4fb0-a66f-158ff7700b6b.roa
Signing time:             Fri 28 Mar 2025 16:41:06 +0000
ROA not before:           Fri 28 Mar 2025 16:41:06 +0000
ROA not after:            Fri 02 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f12:800::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:81:5f:27:d1:ca:a5:c3:47:bb:45:c9:7c:8b:b8:b9:d3:8d:7f:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 28 16:41:06 2025 GMT
            Not After : May  2 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:dc:1f:b5:90:57:3d:10:c8:d6:d6:41:b5:ea:
                    95:0b:03:e9:db:37:86:8e:28:b4:2a:e0:d4:ee:9c:
                    19:fd:22:3a:89:fc:ca:90:73:98:ae:9b:40:34:e2:
                    57:bd:e6:e0:3a:d4:70:8f:f0:b9:01:c2:98:ca:6c:
                    76:fc:00:c4:20:55:ff:fa:bb:44:f5:4f:da:cf:9e:
                    90:ab:34:34:32:46:0a:8b:f3:bf:5f:3d:cf:4a:3a:
                    4f:eb:ff:c1:95:06:75:b7:58:a0:e6:ba:47:7b:fc:
                    c2:d4:8a:15:f7:77:18:ac:7e:70:f6:83:56:54:c7:
                    3d:b7:4b:8a:09:3e:ce:d2:54:f6:65:f7:81:87:84:
                    51:fd:36:46:cb:ee:af:53:15:3b:fe:fa:ec:46:4f:
                    0e:ed:4a:55:f4:10:2c:f3:ac:d3:48:46:1a:3b:3e:
                    7d:dc:06:c1:53:8f:5f:9a:1f:b1:4f:d6:13:fc:56:
                    1d:de:8b:0c:84:26:50:c0:85:68:bd:50:f9:d2:7a:
                    31:5e:1b:e0:13:f1:cd:c7:f9:39:fa:10:e3:c2:0b:
                    41:3d:a4:b6:0e:61:30:f2:72:0e:fb:4b:cf:24:bc:
                    e5:ae:9b:11:8b:f9:a4:df:52:21:1d:f3:c3:c6:45:
                    fb:f8:25:ae:02:25:e0:7b:f6:74:1f:54:3d:33:8c:
                    a3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C1:41:03:DB:CF:74:A8:D9:50:57:7F:82:A0:1F:F7:50:44:5E:B2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb904bd7-c5b9-4fb0-a66f-158ff7700b6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f12:800::/38

    Signature Algorithm: sha256WithRSAEncryption
         d7:22:bc:e9:81:e8:53:d7:37:7e:b2:dd:8a:2d:b5:2a:86:90:
         0a:fe:a7:08:d6:31:f5:75:ab:b4:48:28:e3:07:8f:b8:9e:10:
         de:b3:e2:54:11:63:0f:5a:84:68:5c:a3:fd:e8:82:56:e2:bc:
         38:f1:a5:28:24:22:e9:d0:c4:52:74:71:3a:ac:78:99:14:87:
         07:17:34:83:3a:3b:86:52:b3:87:60:fb:49:98:79:a8:33:f7:
         9c:90:3e:7e:06:03:17:93:12:72:be:25:cf:65:23:f1:70:92:
         43:c9:e6:07:6b:d0:52:0d:6f:d7:ec:ad:ca:e9:80:2b:f4:dc:
         c1:89:9b:77:6a:b1:7f:52:c3:16:3d:de:ee:b1:c4:e7:c6:bd:
         a1:39:f6:7a:6f:6d:d8:f1:02:8b:ea:66:7e:b7:f1:c5:ff:9c:
         e2:69:b4:aa:a4:db:6f:8a:99:c9:c4:8a:a9:63:70:cf:c5:7d:
         61:1c:ca:5a:57:7c:27:d6:66:8b:18:f9:0d:c2:a9:d8:1a:c3:
         86:ca:8e:88:8e:2a:bf:11:9c:8e:7f:f0:1e:f9:31:21:a6:81:
         e1:23:64:3d:03:f1:18:44:0a:72:1b:a4:bd:41:84:00:f2:49:
         e1:d3:95:ef:7b:26:66:e5:39:15:9f:86:4d:ef:fb:b6:44:3b:
         ef:e7:11:b1
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUHYFfJ9HKpcNHu0XJfIu4udONf5kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTY0MTA2WhcNMjUwNTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A3MDI1OTc1NTNhNjA4ZTEwOGU2N2IxOTI1YjE0NTg0NjQ5
YmMzZjg4NzAyMDAwYjgzYTMxZjBmOTA0NDRiNjNkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDN3B+1kFc9EMjW1kG16pULA+nbN4aOKLQq4NTunBn9IjqJ
/MqQc5ium0A04le95uA61HCP8LkBwpjKbHb8AMQgVf/6u0T1T9rPnpCrNDQyRgqL
879fPc9KOk/r/8GVBnW3WKDmukd7/MLUihX3dxisfnD2g1ZUxz23S4oJPs7SVPZl
94GHhFH9NkbL7q9TFTv++uxGTw7tSlX0ECzzrNNIRho7Pn3cBsFTj1+aH7FP1hP8
Vh3eiwyEJlDAhWi9UPnSejFeG+AT8c3H+Tn6EOPCC0E9pLYOYTDycg77S88kvOWu
mxGL+aTfUiEd88PGRfv4Ja4CJeB79nQfVD0zjKMNAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUBMFBA9vPdKjZUFd/gqAf91BEXrIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2NiOTA0YmQ3LWM1YjktNGZiMC1hNjZmLTE1OGZmNzcwMGI2Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgImAB8SCDANBgkqhkiG9w0BAQsFAAOCAQEA1yK86YHoU9c3frLdii21KoaQ
Cv6nCNYx9XWrtEgo4wePuJ4Q3rPiVBFjD1qEaFyj/eiCVuK8OPGlKCQi6dDEUnRx
Oqx4mRSHBxc0gzo7hlKzh2D7SZh5qDP3nJA+fgYDF5MScr4lz2Uj8XCSQ8nmB2vQ
Ug1v1+ytyumAK/TcwYmbd2qxf1LDFj3e7rHE58a9oTn2em9t2PECi+pmfrfxxf+c
4mm0qqTbb4qZycSKqWNwz8V9YRzKWld8J9Zmixj5DcKp2BrDhsqOiI4qvxGcjn/w
HvkxIaaB4SNkPQPxGEQKchukvUGEAPJJ4dOV73smZuU5FZ+GTe/7tkQ77+cRsQ==
-----END CERTIFICATE-----