Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2833e2c0-5305-4e82-91ac-42eecf14c290.roa
File:                     2833e2c0-5305-4e82-91ac-42eecf14c290.roa (raw, json)
Hash identifier:          M/CBfyEl/wbp3U6Qfc5J5mF5OAPWJ4ZDDeqbSB0xOSY=
Subject key identifier:   00:31:C2:A1:28:DD:EE:26:21:79:1E:F4:92:F8:54:EE:E3:BF:FB:24
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       24C4FBED8635593156474ABDEB2DFF393BB5FE7F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2833e2c0-5305-4e82-91ac-42eecf14c290.roa
Signing time:             Sun 26 Oct 2025 00:00:03 +0000
ROA not before:           Sun 26 Oct 2025 00:00:03 +0000
ROA not after:            Sun 30 Nov 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1ffa:5000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c4:fb:ed:86:35:59:31:56:47:4a:bd:eb:2d:ff:39:3b:b5:fe:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 26 00:00:03 2025 GMT
            Not After : Nov 30 23:59:59 2025 GMT
        Subject: serialNumber=96158cb9ff93b763ced41022e22b213041a1ad3e07cc1671553f1e29fc44bb3c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:14:ba:d4:00:14:55:fe:97:11:d6:5c:45:41:
                    99:c0:98:d0:cc:26:af:42:0b:1a:ec:88:49:b5:0c:
                    a6:56:39:1d:43:28:a0:bf:fa:95:e1:bb:d3:be:07:
                    ff:ad:fe:ed:63:d8:67:d6:b5:27:12:21:48:de:5f:
                    3f:93:5b:fb:dc:ee:9d:f4:27:9b:fb:53:23:d6:92:
                    d6:cd:ef:e1:91:00:61:52:f5:0f:12:81:4e:ad:8a:
                    25:6c:d2:6a:d0:28:9f:91:fc:e9:ee:61:49:03:0b:
                    fe:68:58:a5:86:1a:a7:46:da:78:ac:ac:ae:83:19:
                    0b:0b:45:e1:88:31:41:ae:fc:12:18:8e:a8:f2:c4:
                    af:bd:f3:f7:98:c2:83:9b:22:88:34:2f:fe:7c:49:
                    f6:ab:3a:cc:a4:5d:30:13:4e:55:2e:fd:12:d3:f2:
                    ec:6b:a6:91:6a:ff:5f:66:61:59:fd:46:d0:28:87:
                    1c:3a:59:23:df:cc:ed:f6:7f:8b:f7:9a:5e:4f:56:
                    df:9a:55:39:ae:0f:01:8a:c5:c9:48:0c:1b:f7:47:
                    ed:4d:d2:4a:0c:31:f3:1a:b7:d7:43:0b:8b:0c:69:
                    db:65:02:aa:b2:bc:08:39:a0:7c:e0:d7:dc:4a:e8:
                    7c:b4:f3:5f:0f:f2:3f:a4:87:c9:8f:80:3c:29:e8:
                    8c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:31:C2:A1:28:DD:EE:26:21:79:1E:F4:92:F8:54:EE:E3:BF:FB:24
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2833e2c0-5305-4e82-91ac-42eecf14c290.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffa:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         73:06:38:3e:3c:bc:e1:cf:86:18:da:2b:1e:58:20:f7:76:a5:
         e3:31:b8:74:bc:09:1f:96:30:c6:fb:0d:5b:cf:e5:3a:0d:e4:
         80:02:e6:ec:19:a0:c0:fb:8f:c5:61:79:35:1b:b4:ee:eb:ac:
         80:8e:01:27:fe:23:3d:9e:2c:ec:ff:6c:c7:41:ac:1c:4f:ce:
         75:72:91:c3:f2:08:96:1c:b4:65:e1:62:79:58:40:db:4e:87:
         aa:58:d6:2e:ab:5a:95:fc:e6:96:4b:48:a9:37:e9:58:06:f7:
         ad:65:77:23:3d:9e:c6:f2:05:da:1a:81:11:ae:db:e5:43:33:
         e3:b6:1f:f5:90:ae:c4:38:77:1c:53:b8:61:2e:4e:d8:8b:34:
         6f:d3:3d:15:16:da:f5:4e:78:38:1d:79:8d:bd:bb:44:18:1a:
         19:ad:69:9d:cf:40:ce:8b:56:26:ef:cc:4a:08:f2:19:ca:a2:
         3c:f9:42:7e:71:43:0c:3e:bc:20:59:6e:8b:c8:4a:6f:54:04:
         c6:68:72:7c:09:5f:6d:53:d4:cb:07:ba:22:61:09:54:97:2e:
         3e:c6:de:ff:0d:ef:1a:f9:34:70:9b:f6:3c:0f:3d:b4:52:a0:
         4a:25:f0:2c:3c:df:ca:6d:81:68:0c:f8:d1:b5:b9:15:e3:1e:
         af:67:d2:1b
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUJMT77YY1WTFWR0q96y3/OTu1/n8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDI2MDAwMDAzWhcNMjUxMTMwMjM1OTU5
WjB6MUkwRwYDVQQFE0A5NjE1OGNiOWZmOTNiNzYzY2VkNDEwMjJlMjJiMjEzMDQx
YTFhZDNlMDdjYzE2NzE1NTNmMWUyOWZjNDRiYjNjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDKFLrUABRV/pcR1lxFQZnAmNDMJq9CCxrsiEm1DKZWOR1D
KKC/+pXhu9O+B/+t/u1j2GfWtScSIUjeXz+TW/vc7p30J5v7UyPWktbN7+GRAGFS
9Q8SgU6tiiVs0mrQKJ+R/OnuYUkDC/5oWKWGGqdG2nisrK6DGQsLReGIMUGu/BIY
jqjyxK+98/eYwoObIog0L/58SfarOsykXTATTlUu/RLT8uxrppFq/19mYVn9RtAo
hxw6WSPfzO32f4v3ml5PVt+aVTmuDwGKxclIDBv3R+1N0koMMfMat9dDC4sMadtl
AqqyvAg5oHzg19xK6Hy0818P8j+kh8mPgDwp6IxpAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUADHCoSjd7iYheR70kvhU7uO/+yQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzI4MzNlMmMwLTUzMDUtNGU4Mi05MWFjLTQyZWVjZjE0YzI5MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/6UDANBgkqhkiG9w0BAQsFAAOCAQEAcwY4Pjy84c+GGNorHlgg93al
4zG4dLwJH5YwxvsNW8/lOg3kgALm7BmgwPuPxWF5NRu07uusgI4BJ/4jPZ4s7P9s
x0GsHE/OdXKRw/IIlhy0ZeFieVhA206HqljWLqtalfzmlktIqTfpWAb3rWV3Iz2e
xvIF2hqBEa7b5UMz47Yf9ZCuxDh3HFO4YS5O2Is0b9M9FRba9U54OB15jb27RBga
Ga1pnc9AzotWJu/MSgjyGcqiPPlCfnFDDD68IFlui8hKb1QExmhyfAlfbVPUywe6
ImEJVJcuPsbe/w3vGvk0cJv2PA89tFKgSiXwLDzfym2BaAz40bW5FeMer2fSGw==
-----END CERTIFICATE-----