Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9638136-f4a0-409d-bfac-3d2ff9d4e134.roa
File:                     d9638136-f4a0-409d-bfac-3d2ff9d4e134.roa (raw, json)
Hash identifier:          2lOMtolt7zrzIIMX0+WVmC/B7T7hgseNNx4RJBzQVZ0=
Subject key identifier:   9A:DF:F0:D2:D8:4C:53:8E:9C:29:90:1E:81:10:57:87:80:0A:F2:BC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0906A8D5973C59D26C25BFC19E2DF34CCD1729F0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9638136-f4a0-409d-bfac-3d2ff9d4e134.roa
Signing time:             Wed 12 Nov 2025 02:11:57 +0000
ROA not before:           Wed 12 Nov 2025 02:11:57 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff2:10c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:06:a8:d5:97:3c:59:d2:6c:25:bf:c1:9e:2d:f3:4c:cd:17:29:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 02:11:57 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=a4aed94f513382252404d179dc410249897aff63ae5a9eb80d67263a2810e849, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c9:7c:d2:58:fd:10:5f:83:d6:f4:61:16:23:
                    5a:4e:d5:31:a2:6e:76:06:05:6f:00:4d:94:fe:97:
                    e4:15:d9:af:6c:36:9b:09:79:5f:e1:e8:9e:81:e1:
                    33:e6:8e:69:e1:b9:5c:9b:f0:65:ed:be:95:23:c2:
                    b4:e7:69:2d:15:46:bb:5d:be:96:63:77:af:f2:ad:
                    e0:55:1f:5a:a1:2d:52:dc:fe:23:5e:a7:79:84:68:
                    58:c2:40:be:4c:76:c2:a6:cd:8a:41:92:ec:6f:4e:
                    6a:02:29:81:95:e7:c2:77:92:c3:cf:ab:ff:9d:38:
                    a4:70:f8:46:95:11:3a:04:cd:3c:89:1a:fd:39:05:
                    a4:42:24:25:a2:0e:6a:4b:e5:72:49:e4:36:de:7d:
                    bc:1a:b9:ea:a3:e2:03:01:ad:64:e5:37:bb:e4:a6:
                    3c:04:da:e6:07:21:0d:87:4c:28:db:ee:df:b5:f1:
                    bc:a7:51:b5:de:dc:ac:cf:c9:89:55:bf:e2:14:c7:
                    11:b5:d5:7d:34:ec:ba:26:65:58:a8:59:0a:d0:a9:
                    6e:df:86:6f:6c:c0:b3:75:25:2e:ac:0a:fe:5d:97:
                    9e:f9:a0:f4:d8:e7:f7:5b:28:89:82:50:84:f3:80:
                    3b:03:50:83:fe:50:a4:25:1b:b0:f0:11:0e:c3:35:
                    10:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DF:F0:D2:D8:4C:53:8E:9C:29:90:1E:81:10:57:87:80:0A:F2:BC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9638136-f4a0-409d-bfac-3d2ff9d4e134.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:10c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:8e:2c:37:24:78:80:14:08:ac:b9:2d:d3:45:d0:e6:0b:44:
         a9:96:15:07:40:a1:f0:2a:47:22:7e:44:67:e9:58:ec:85:b9:
         74:55:1f:a5:a7:9e:e5:1d:8f:b4:85:1c:f9:49:d9:2f:16:7d:
         92:0b:f8:0f:dc:c0:8e:46:a3:f5:6e:c8:65:59:6d:5b:8a:16:
         bb:84:45:33:36:80:3b:4b:39:51:ed:8c:4f:cb:ea:82:f6:09:
         19:ea:1e:8a:17:d7:21:c8:bc:7c:b8:98:a0:55:fe:00:42:67:
         1a:ae:ed:c2:1d:1f:2f:75:b1:06:25:26:a8:50:51:2c:1e:0b:
         57:40:82:fa:f4:ee:63:ac:77:39:d4:11:6d:d2:15:0d:1b:49:
         fe:49:6f:7b:10:e5:ad:51:af:b8:d5:19:66:37:b4:8f:2e:4c:
         0e:42:a2:e2:ff:b8:d6:c7:dc:95:2f:89:96:18:e5:dd:f4:84:
         04:b0:3a:df:b0:59:f2:d1:13:79:17:f2:56:cb:61:51:b2:3a:
         c1:9b:93:98:25:2a:46:0b:26:cd:bf:97:ee:52:6c:55:49:d1:
         44:52:41:58:e6:56:71:bc:e1:7b:38:4e:92:a6:ab:78:c5:dc:
         3c:9c:41:33:45:86:97:af:46:25:34:b6:ac:ad:1b:20:60:a9:
         8f:41:d1:61
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUCQao1Zc8WdJsJb/Bni3zTM0XKfAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTEyMDIxMTU3WhcNMjUxMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0BhNGFlZDk0ZjUxMzM4MjI1MjQwNGQxNzlkYzQxMDI0OTg5
N2FmZjYzYWU1YTllYjgwZDY3MjYzYTI4MTBlODQ5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDoyXzSWP0QX4PW9GEWI1pO1TGibnYGBW8ATZT+l+QV2a9s
NpsJeV/h6J6B4TPmjmnhuVyb8GXtvpUjwrTnaS0VRrtdvpZjd6/yreBVH1qhLVLc
/iNep3mEaFjCQL5MdsKmzYpBkuxvTmoCKYGV58J3ksPPq/+dOKRw+EaVEToEzTyJ
Gv05BaRCJCWiDmpL5XJJ5Dbefbwaueqj4gMBrWTlN7vkpjwE2uYHIQ2HTCjb7t+1
8bynUbXe3KzPyYlVv+IUxxG11X007LomZVioWQrQqW7fhm9swLN1JS6sCv5dl575
oPTY5/dbKImCUITzgDsDUIP+UKQlG7DwEQ7DNRAnAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUmt/w0thMU46cKZAegRBXh4AK8rwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Q5NjM4MTM2LWY0YTAtNDA5ZC1iZmFjLTNkMmZmOWQ0ZTEzNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/yEMAwDQYJKoZIhvcNAQELBQADggEBAAWOLDckeIAUCKy5LdNF0OYL
RKmWFQdAofAqRyJ+RGfpWOyFuXRVH6WnnuUdj7SFHPlJ2S8WfZIL+A/cwI5Go/Vu
yGVZbVuKFruERTM2gDtLOVHtjE/L6oL2CRnqHooX1yHIvHy4mKBV/gBCZxqu7cId
Hy91sQYlJqhQUSweC1dAgvr07mOsdznUEW3SFQ0bSf5Jb3sQ5a1Rr7jVGWY3tI8u
TA5CouL/uNbH3JUviZYY5d30hASwOt+wWfLRE3kX8lbLYVGyOsGbk5glKkYLJs2/
l+5SbFVJ0URSQVjmVnG84Xs4TpKmq3jF3DycQTNFhpevRiU0tqytGyBgqY9B0WE=
-----END CERTIFICATE-----