Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0874b556-7768-4bb8-a4db-eeb43d42d1d5.roa
File:                     0874b556-7768-4bb8-a4db-eeb43d42d1d5.roa (raw, json)
Hash identifier:          Dg4kqslU7lD67TW/bpuigXupjJ5/+U16GofhvP99U60=
Subject key identifier:   26:D8:6F:F5:11:B3:C5:5A:EE:D8:2A:96:D3:4C:A9:6E:3A:97:5F:59
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0CEA8070F3508A8882CDB0AEA94F0B390D75CB36
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0874b556-7768-4bb8-a4db-eeb43d42d1d5.roa
Signing time:             Wed 22 Oct 2025 00:10:53 +0000
ROA not before:           Wed 22 Oct 2025 00:10:53 +0000
ROA not after:            Wed 26 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f68:40c0::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ea:80:70:f3:50:8a:88:82:cd:b0:ae:a9:4f:0b:39:0d:75:cb:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 22 00:10:53 2025 GMT
            Not After : Nov 26 23:59:59 2025 GMT
        Subject: serialNumber=7f628045212ba379fdd61b4a61bdca148e409b2a45e7b2290199a5e0aef74247, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ee:24:44:b8:20:51:30:da:d7:87:83:70:ae:
                    9a:f2:4f:9e:79:55:39:ba:f4:17:a0:ad:5b:ca:12:
                    c5:1e:d9:8c:64:7d:26:ed:33:d6:a1:c7:0b:22:c9:
                    f8:ca:e5:5f:ed:5e:11:ba:99:34:9a:c0:5b:f2:9f:
                    c9:3d:27:09:90:13:17:d6:2f:86:8a:2c:7c:11:6a:
                    1e:36:76:72:9f:43:f9:cd:f7:08:82:3e:f2:e4:88:
                    47:ea:f1:9f:53:95:6f:ea:1b:8a:64:45:68:f3:2b:
                    c8:83:8e:82:67:c3:00:cd:7b:c0:ad:d2:f7:85:eb:
                    ca:65:e7:e3:c2:4e:14:20:7f:0b:8e:56:67:b6:bc:
                    3b:eb:3c:8d:21:04:04:5c:3c:c0:2f:3b:65:30:64:
                    89:ae:3e:8d:40:9c:c7:e2:d3:fa:c6:9d:a7:73:ee:
                    ec:3b:c7:e0:9f:e5:a5:14:5e:f3:fd:bc:04:7d:6e:
                    ed:00:45:8a:20:45:90:2f:3e:5e:85:a2:22:e2:f3:
                    cc:e8:cc:c6:30:c3:18:ed:f2:77:44:5d:58:56:eb:
                    bd:42:0f:d2:a1:15:95:f3:77:03:ce:08:14:55:e7:
                    1f:c9:b3:d2:ee:78:ee:e3:30:7a:4f:1e:35:67:f9:
                    c4:08:de:e7:a1:26:a4:27:f2:cc:cf:44:11:ce:f5:
                    a7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D8:6F:F5:11:B3:C5:5A:EE:D8:2A:96:D3:4C:A9:6E:3A:97:5F:59
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0874b556-7768-4bb8-a4db-eeb43d42d1d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f68:40c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         5d:f3:36:ff:6b:7a:01:bd:e6:4d:df:de:70:72:a1:f5:00:f7:
         e4:78:f7:a3:de:b6:00:ae:9b:64:a4:6d:dd:89:fc:48:82:7e:
         ab:9d:c3:f9:4a:10:22:77:ec:d5:cd:ff:52:d3:96:d7:73:c6:
         3f:ab:94:9c:be:45:17:0f:67:97:d3:68:48:bd:ac:53:57:da:
         c2:87:41:a9:ba:50:5a:fb:36:25:7e:f5:45:3f:3c:ac:13:96:
         53:5e:a7:50:2d:9c:99:0e:88:aa:e5:0a:6f:79:94:72:4e:fd:
         dd:dc:fb:9f:0e:e9:f7:a5:a7:3e:b2:5f:31:51:7d:1c:3d:cf:
         3f:b0:9a:09:0f:a7:9e:2c:43:20:7e:51:ce:1b:d0:7a:59:9c:
         31:90:38:69:82:37:1d:9d:24:f2:b0:72:45:60:d0:82:78:f9:
         89:c8:45:ef:d2:81:73:26:69:63:c8:24:97:d9:b7:05:d5:30:
         8e:a5:89:73:e5:8a:e3:76:00:66:df:59:96:37:0c:ac:22:18:
         22:9b:a8:da:ff:21:90:d3:4d:f7:e9:90:eb:74:7f:ec:3a:5b:
         fe:06:c4:1e:24:38:7d:74:68:98:f6:9e:c7:85:78:54:70:f5:
         00:8d:18:e0:33:9b:46:b6:dc:5c:0d:a4:c8:42:df:7e:e2:fb:
         86:8a:53:7c
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUDOqAcPNQioiCzbCuqU8LOQ11yzYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIyMDAxMDUzWhcNMjUxMTI2MjM1OTU5
WjB6MUkwRwYDVQQFE0A3ZjYyODA0NTIxMmJhMzc5ZmRkNjFiNGE2MWJkY2ExNDhl
NDA5YjJhNDVlN2IyMjkwMTk5YTVlMGFlZjc0MjQ3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDr7iREuCBRMNrXh4NwrpryT555VTm69BegrVvKEsUe2Yxk
fSbtM9ahxwsiyfjK5V/tXhG6mTSawFvyn8k9JwmQExfWL4aKLHwRah42dnKfQ/nN
9wiCPvLkiEfq8Z9TlW/qG4pkRWjzK8iDjoJnwwDNe8Ct0veF68pl5+PCThQgfwuO
Vme2vDvrPI0hBARcPMAvO2UwZImuPo1AnMfi0/rGnadz7uw7x+Cf5aUUXvP9vAR9
bu0ARYogRZAvPl6FoiLi88zozMYwwxjt8ndEXVhW671CD9KhFZXzdwPOCBRV5x/J
s9LueO7jMHpPHjVn+cQI3uehJqQn8szPRBHO9ac3AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUJthv9RGzxVru2CqW00ypbjqXX1kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA4NzRiNTU2LTc3NjgtNGJiOC1hNGRiLWVlYjQzZDQyZDFkNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAB9oQMAwDQYJKoZIhvcNAQELBQADggEBAF3zNv9regG95k3f3nByofUA
9+R496PetgCum2Skbd2J/EiCfqudw/lKECJ37NXN/1LTltdzxj+rlJy+RRcPZ5fT
aEi9rFNX2sKHQam6UFr7NiV+9UU/PKwTllNep1AtnJkOiKrlCm95lHJO/d3c+58O
6felpz6yXzFRfRw9zz+wmgkPp54sQyB+Uc4b0HpZnDGQOGmCNx2dJPKwckVg0IJ4
+YnIRe/SgXMmaWPIJJfZtwXVMI6liXPliuN2AGbfWZY3DKwiGCKbqNr/IZDTTffp
kOt0f+w6W/4GxB4kOH10aJj2nseFeFRw9QCNGOAzm0a23FwNpMhC337i+4aKU3w=
-----END CERTIFICATE-----