Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22dc0f2d-bcfa-41b3-b89f-afb024155d39.roa
File:                     22dc0f2d-bcfa-41b3-b89f-afb024155d39.roa (raw, json)
Hash identifier:          qEp9vF1SLvfUwTJck3GSD0r491QvvkJr1wMb80SFFoE=
Subject key identifier:   77:74:C8:BA:CB:8E:45:8C:83:C5:7D:87:28:E2:E4:9E:6D:DC:B8:5F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1CBAD8515E43BA5DAB434D1E4BC17132FA87C890
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22dc0f2d-bcfa-41b3-b89f-afb024155d39.roa
Signing time:             Fri 31 Oct 2025 00:50:05 +0000
ROA not before:           Fri 31 Oct 2025 00:50:05 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f36:ec00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ba:d8:51:5e:43:ba:5d:ab:43:4d:1e:4b:c1:71:32:fa:87:c8:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 31 00:50:05 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=c05132a625d4f0e4f1b28c90ffba03c5c085d191e752cf03eefa1ac753b982a1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3e:44:93:76:95:c1:f0:72:2b:d6:58:2e:74:
                    0f:e9:5d:9b:dc:c2:54:6b:32:4a:e2:a3:e3:c5:e2:
                    64:16:a4:4e:93:83:20:82:aa:6d:74:56:47:34:02:
                    c8:79:37:4f:00:79:c8:fc:c7:2a:34:e1:a0:56:1d:
                    f4:13:4e:71:e3:61:27:08:53:34:5b:93:b1:20:32:
                    7a:f2:b4:3d:cb:79:df:19:9e:eb:70:96:55:b4:b4:
                    b7:68:26:56:68:da:41:6c:eb:d5:35:46:21:da:0c:
                    78:09:82:2c:d8:cb:c7:ba:c7:07:9a:b0:36:d1:2c:
                    52:87:4b:0d:82:1b:0f:83:12:18:51:ac:87:79:56:
                    72:09:db:e0:e0:67:19:78:d5:ee:15:0c:e3:72:60:
                    8f:f6:31:1c:0f:4c:c3:1d:e6:9b:61:f0:ac:97:ba:
                    51:c2:9b:dd:84:20:19:e9:9b:48:d1:9c:df:9a:7e:
                    1a:a1:ab:48:ee:5c:b9:99:dc:ce:b0:7f:c1:1d:2e:
                    c9:27:df:f9:89:5e:c3:7c:c9:a3:9e:71:49:0a:92:
                    9e:84:64:ca:ea:0e:e6:f9:e0:34:cb:9f:72:50:7e:
                    0a:12:1f:05:30:33:d3:c4:66:36:fb:83:bc:f4:49:
                    22:65:cb:bf:8b:be:4a:20:ea:55:a1:f9:36:24:2c:
                    53:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:74:C8:BA:CB:8E:45:8C:83:C5:7D:87:28:E2:E4:9E:6D:DC:B8:5F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22dc0f2d-bcfa-41b3-b89f-afb024155d39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f36:ec00::/40

    Signature Algorithm: sha256WithRSAEncryption
         bd:6a:23:ba:7c:0a:1f:9e:25:56:68:c8:a5:fc:ec:df:38:46:
         9d:83:0d:9c:9d:1e:de:28:97:d2:f4:e4:de:65:c1:47:c9:1d:
         43:43:e3:f0:d6:6e:fc:cb:9d:02:aa:44:d4:39:31:ba:bb:52:
         45:45:21:03:46:9c:74:da:da:64:e2:39:5d:a7:4d:49:8c:3d:
         ef:82:aa:dd:87:b9:79:aa:fd:aa:dd:ba:53:df:79:b9:bd:0b:
         b5:9b:e9:8e:e5:66:ed:9c:2d:70:db:81:f2:27:e6:7d:90:95:
         e1:ef:d2:d8:5e:e9:b2:ac:84:99:e5:52:34:5c:e2:49:84:56:
         be:4a:82:eb:ce:5c:d7:80:44:75:f6:b2:11:f3:60:bf:70:b6:
         09:57:6f:83:0c:fb:0b:17:e6:ea:be:a0:c3:08:8a:07:31:22:
         53:5c:34:8e:68:df:68:dc:34:e1:a4:0a:16:6d:f9:d2:6a:a6:
         38:b3:17:51:aa:50:04:b6:80:42:21:ee:14:80:7d:fe:76:f8:
         d4:9f:66:3f:2d:9b:3d:16:2b:ea:88:80:7a:44:c8:d9:7f:43:
         1e:9f:57:9c:f6:7e:5d:f4:a8:08:26:11:fe:d0:08:06:d4:a5:
         96:04:56:9b:b2:4d:52:a3:c3:92:30:b5:e0:8d:61:7e:15:21:
         29:51:52:92
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUHLrYUV5Dul2rQ00eS8FxMvqHyJAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDMxMDA1MDA1WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BjMDUxMzJhNjI1ZDRmMGU0ZjFiMjhjOTBmZmJhMDNjNWMw
ODVkMTkxZTc1MmNmMDNlZWZhMWFjNzUzYjk4MmExMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCuPkSTdpXB8HIr1lgudA/pXZvcwlRrMkrio+PF4mQWpE6T
gyCCqm10Vkc0Ash5N08Aecj8xyo04aBWHfQTTnHjYScIUzRbk7EgMnrytD3Led8Z
nutwllW0tLdoJlZo2kFs69U1RiHaDHgJgizYy8e6xweasDbRLFKHSw2CGw+DEhhR
rId5VnIJ2+DgZxl41e4VDONyYI/2MRwPTMMd5pth8KyXulHCm92EIBnpm0jRnN+a
fhqhq0juXLmZ3M6wf8EdLskn3/mJXsN8yaOecUkKkp6EZMrqDub54DTLn3JQfgoS
HwUwM9PEZjb7g7z0SSJly7+Lvkog6lWh+TYkLFOrAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUd3TIusuORYyDxX2HKOLknm3cuF8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzIyZGMwZjJkLWJjZmEtNDFiMy1iODlmLWFmYjAyNDE1NWQzOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB827DANBgkqhkiG9w0BAQsFAAOCAQEAvWojunwKH54lVmjIpfzs3zhG
nYMNnJ0e3iiX0vTk3mXBR8kdQ0Pj8NZu/MudAqpE1DkxurtSRUUhA0acdNraZOI5
XadNSYw974Kq3Ye5ear9qt26U995ub0LtZvpjuVm7ZwtcNuB8ifmfZCV4e/S2F7p
sqyEmeVSNFziSYRWvkqC685c14BEdfayEfNgv3C2CVdvgwz7Cxfm6r6gwwiKBzEi
U1w0jmjfaNw04aQKFm350mqmOLMXUapQBLaAQiHuFIB9/nb41J9mPy2bPRYr6oiA
ekTI2X9DHp9XnPZ+XfSoCCYR/tAIBtSllgRWm7JNUqPDkjC14I1hfhUhKVFSkg==
-----END CERTIFICATE-----