Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb701bbe-4c5a-4ef6-86d4-bbb1f8ab03a8.roa
File:                     eb701bbe-4c5a-4ef6-86d4-bbb1f8ab03a8.roa (raw, json)
Hash identifier:          +T1KO0xcCAfAJ3KAjak/JnefUncqEB3PKiUf+UxaGU0=
Subject key identifier:   66:14:59:69:68:24:7F:4C:D4:D8:1C:00:BF:5E:16:92:77:2F:0C:37
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2F2204E0DEBBF5237F837DE80D0308B109E48B32
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb701bbe-4c5a-4ef6-86d4-bbb1f8ab03a8.roa
Signing time:             Thu 13 Nov 2025 00:21:30 +0000
ROA not before:           Thu 13 Nov 2025 00:21:30 +0000
ROA not after:            Thu 18 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fed:6000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:22:04:e0:de:bb:f5:23:7f:83:7d:e8:0d:03:08:b1:09:e4:8b:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 13 00:21:30 2025 GMT
            Not After : Dec 18 23:59:59 2025 GMT
        Subject: serialNumber=e7db6c2c82e76a39589004574c039cb11c0d900686c3b57f3ba32b897eb36bc2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:47:61:96:44:65:ba:6b:0a:de:05:e4:f5:2d:
                    c2:4d:83:dd:67:c1:ea:7a:09:c5:70:24:4a:14:73:
                    e9:91:29:13:a2:14:0b:42:bb:05:f4:b3:ae:3b:c4:
                    49:ed:11:89:c6:9f:a5:ba:af:df:1f:93:0d:c9:cc:
                    60:04:f4:db:c5:01:6b:06:00:d8:37:d9:83:76:e6:
                    41:10:bf:84:42:8b:21:e3:c2:6d:23:39:8d:96:73:
                    7f:75:dc:d8:18:24:14:20:24:8f:58:c3:62:72:ab:
                    94:f0:d8:66:9c:18:19:3c:0d:7c:ac:98:f7:8c:5b:
                    d0:2c:cd:51:14:74:dd:a0:b1:d8:16:55:52:25:b1:
                    04:43:11:5c:d5:45:3c:ea:fa:46:92:39:ee:8c:49:
                    f7:9e:20:96:0c:2e:17:d5:e2:78:a9:1c:36:c8:fb:
                    82:4a:01:f4:d4:cd:1b:01:0f:6d:a6:db:11:a1:c3:
                    57:d3:df:15:70:b9:13:a1:85:a7:7e:ad:9f:cb:2b:
                    d3:5f:87:a1:1a:ce:9a:39:eb:37:38:78:cd:f2:07:
                    3d:c9:ac:d3:a1:ad:69:1e:09:4a:c0:e9:17:10:80:
                    a4:32:fa:3d:98:a4:a8:4b:49:73:42:9f:ec:a8:ba:
                    cd:44:83:4a:6b:3c:50:51:5a:e7:79:00:9f:f3:f3:
                    45:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:14:59:69:68:24:7F:4C:D4:D8:1C:00:BF:5E:16:92:77:2F:0C:37
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb701bbe-4c5a-4ef6-86d4-bbb1f8ab03a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fed:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         1e:67:16:c1:9e:12:a6:80:41:59:e9:4a:09:e4:1d:2a:2b:ce:
         21:86:3b:1c:e0:45:30:04:ea:0f:c6:6b:5c:78:d2:24:de:36:
         1d:73:8d:d6:d0:e7:a7:26:7f:9e:22:f0:49:49:bf:10:d1:c0:
         d9:4b:a4:16:05:7f:08:9d:cd:be:fd:01:ff:67:89:ea:5a:32:
         79:68:69:5f:c5:a4:1c:a9:b4:17:0d:73:6c:1a:76:09:b5:33:
         b5:11:2a:2c:92:4f:51:5d:83:f1:89:1b:16:39:bb:15:f8:cf:
         cd:69:2c:e8:4f:17:08:f1:6b:39:08:7f:70:d2:a3:f5:d6:2e:
         b5:d0:9e:9c:2d:0e:a1:f2:10:5c:36:2e:01:27:0d:66:9c:41:
         3f:d5:37:f4:c5:cd:85:d9:de:88:fa:e0:cb:b0:b2:85:7c:16:
         f6:7c:2f:4e:cc:34:20:9f:89:81:c7:f1:d5:56:e1:5a:07:4f:
         55:a8:1b:d6:e6:57:a7:8d:18:95:47:c7:06:0c:50:76:70:e6:
         c1:7a:23:e1:a6:40:a7:cb:0c:ae:83:71:2e:e5:30:8e:fa:d3:
         d4:74:0c:a5:7a:cd:84:8e:d2:d3:ee:d0:8d:c8:0d:76:af:80:
         15:58:5a:aa:79:40:24:bf:b6:2c:4c:7f:5e:52:1e:c2:d0:3a:
         e0:b0:8e:c8
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIULyIE4N679SN/g33oDQMIsQnkizIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTEzMDAyMTMwWhcNMjUxMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BlN2RiNmMyYzgyZTc2YTM5NTg5MDA0NTc0YzAzOWNiMTFj
MGQ5MDA2ODZjM2I1N2YzYmEzMmI4OTdlYjM2YmMyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCUR2GWRGW6awreBeT1LcJNg91nwep6CcVwJEoUc+mRKROi
FAtCuwX0s647xEntEYnGn6W6r98fkw3JzGAE9NvFAWsGANg32YN25kEQv4RCiyHj
wm0jOY2Wc3913NgYJBQgJI9Yw2Jyq5Tw2GacGBk8DXysmPeMW9AszVEUdN2gsdgW
VVIlsQRDEVzVRTzq+kaSOe6MSfeeIJYMLhfV4nipHDbI+4JKAfTUzRsBD22m2xGh
w1fT3xVwuROhhad+rZ/LK9Nfh6Eazpo56zc4eM3yBz3JrNOhrWkeCUrA6RcQgKQy
+j2YpKhLSXNCn+yous1Eg0prPFBRWud5AJ/z80VfAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUZhRZaWgkf0zU2BwAv14WkncvDDcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2ViNzAxYmJlLTRjNWEtNGVmNi04NmQ0LWJiYjFmOGFiMDNhOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/tYDANBgkqhkiG9w0BAQsFAAOCAQEAHmcWwZ4SpoBBWelKCeQdKivO
IYY7HOBFMATqD8ZrXHjSJN42HXON1tDnpyZ/niLwSUm/ENHA2UukFgV/CJ3Nvv0B
/2eJ6loyeWhpX8WkHKm0Fw1zbBp2CbUztREqLJJPUV2D8YkbFjm7FfjPzWks6E8X
CPFrOQh/cNKj9dYutdCenC0OofIQXDYuAScNZpxBP9U39MXNhdneiPrgy7CyhXwW
9nwvTsw0IJ+Jgcfx1VbhWgdPVagb1uZXp40YlUfHBgxQdnDmwXoj4aZAp8sMroNx
LuUwjvrT1HQMpXrNhI7S0+7QjcgNdq+AFVhaqnlAJL+2LEx/XlIewtA64LCOyA==
-----END CERTIFICATE-----