Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bfd279d-53c3-47d9-a282-c1f249b2a5f9.roa
File:                     2bfd279d-53c3-47d9-a282-c1f249b2a5f9.roa (raw, json)
Hash identifier:          7Mp38R9pIX3JYXysF3erCBcXPPk0+k+NZ1zGIN8pyK8=
Subject key identifier:   66:B7:41:D1:F1:15:24:EF:AB:E1:B1:F9:12:0D:CC:F1:EC:3D:E6:56
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       76F5DEA9EE2BF49ACA98B31E8817CCCCFD17F1E0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bfd279d-53c3-47d9-a282-c1f249b2a5f9.roa
Signing time:             Tue 21 Oct 2025 00:30:18 +0000
ROA not before:           Tue 21 Oct 2025 00:30:18 +0000
ROA not after:            Tue 25 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fef:5000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:f5:de:a9:ee:2b:f4:9a:ca:98:b3:1e:88:17:cc:cc:fd:17:f1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 21 00:30:18 2025 GMT
            Not After : Nov 25 23:59:59 2025 GMT
        Subject: serialNumber=7b3f5c8dcaa5a35ad4b2f7ea214c44a36990d6e8fa7645b7cf55e4041721a269, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9b:dc:9c:87:7c:d2:35:6e:5d:66:04:e2:c0:
                    75:6f:86:39:02:48:2c:3c:19:8e:37:f1:53:54:68:
                    d2:6b:f1:d0:45:c7:e0:a3:44:22:48:1c:3a:62:16:
                    6d:53:80:bb:be:48:76:f7:e5:f5:c3:b7:55:85:5d:
                    d4:ff:5b:21:49:3b:6e:5f:4c:5e:01:27:da:51:e2:
                    00:89:8b:f2:ee:a5:5d:2e:89:7e:e7:ae:ed:f2:cb:
                    cc:75:6b:bb:c1:9e:52:a3:ff:38:97:57:68:01:77:
                    be:9f:a2:3f:6a:f0:41:84:c8:7c:8f:e6:71:4b:d0:
                    f2:f7:05:af:26:52:e2:dc:d8:c2:56:5f:47:ea:62:
                    34:57:f3:28:72:df:19:12:89:3c:0b:ce:fe:4d:76:
                    13:05:d6:63:59:ff:76:85:c6:26:bc:f2:ec:ef:f7:
                    50:55:2f:ee:a4:40:b5:5e:fb:fd:68:41:31:58:69:
                    02:8e:b7:59:29:e1:8c:1a:7e:25:e5:a0:8b:b3:d1:
                    ec:8b:f0:ed:df:4c:8d:8f:c2:ee:4d:49:9d:c1:54:
                    8e:1b:d8:33:59:c8:18:57:92:fe:f7:36:c8:60:c7:
                    5b:a4:f0:1e:b5:1a:3e:2f:f8:21:f2:46:fc:cd:9a:
                    93:10:1c:3c:7e:5f:1d:76:82:83:00:52:cf:82:20:
                    09:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B7:41:D1:F1:15:24:EF:AB:E1:B1:F9:12:0D:CC:F1:EC:3D:E6:56
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bfd279d-53c3-47d9-a282-c1f249b2a5f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fef:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         2e:55:80:bf:4a:bb:d7:bc:a3:a8:ec:50:3f:79:ea:97:95:8f:
         20:58:6d:be:dd:b7:c0:b4:2a:eb:1c:50:63:45:49:22:17:69:
         8c:c1:ce:ed:cc:5c:a3:b0:ea:de:ef:53:d6:93:b1:ff:09:c2:
         5c:ca:e0:52:41:e0:04:c1:4e:e8:d8:cd:19:fc:94:e6:38:96:
         80:97:17:00:7c:09:bf:28:fd:6e:32:60:49:52:f5:f3:d1:41:
         c4:e8:b5:e0:8c:0f:31:0e:1c:1f:d2:88:db:a1:a9:35:15:72:
         d0:ac:91:47:b9:c5:0f:55:b2:bf:dd:99:5e:07:49:9f:55:1e:
         54:cf:78:59:2a:29:af:72:02:80:57:1b:62:49:28:0e:d0:dd:
         45:22:59:19:f9:a5:6d:e7:9e:89:6e:bf:98:f4:95:d2:85:9d:
         2c:72:2f:82:27:17:92:7d:b2:1a:3a:c1:9d:7c:2c:de:fa:e3:
         a6:d7:2d:20:be:60:27:6e:5a:97:df:44:ca:f4:09:17:13:09:
         d0:0e:06:73:48:d4:de:10:c4:4a:a1:c2:1e:bf:de:ae:af:27:
         bd:aa:2f:13:8f:63:35:c5:af:00:eb:3e:bc:f3:3f:09:09:b4:
         b2:79:7e:cb:44:e6:3d:dd:96:97:57:d4:e2:d3:08:1e:19:57:
         ef:ba:a1:56
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUdvXeqe4r9JrKmLMeiBfMzP0X8eAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIxMDAzMDE4WhcNMjUxMTI1MjM1OTU5
WjB6MUkwRwYDVQQFE0A3YjNmNWM4ZGNhYTVhMzVhZDRiMmY3ZWEyMTRjNDRhMzY5
OTBkNmU4ZmE3NjQ1YjdjZjU1ZTQwNDE3MjFhMjY5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6m9ych3zSNW5dZgTiwHVvhjkCSCw8GY438VNUaNJr8dBF
x+CjRCJIHDpiFm1TgLu+SHb35fXDt1WFXdT/WyFJO25fTF4BJ9pR4gCJi/LupV0u
iX7nru3yy8x1a7vBnlKj/ziXV2gBd76foj9q8EGEyHyP5nFL0PL3Ba8mUuLc2MJW
X0fqYjRX8yhy3xkSiTwLzv5NdhMF1mNZ/3aFxia88uzv91BVL+6kQLVe+/1oQTFY
aQKOt1kp4YwafiXloIuz0eyL8O3fTI2Pwu5NSZ3BVI4b2DNZyBhXkv73Nshgx1uk
8B61Gj4v+CHyRvzNmpMQHDx+Xx12goMAUs+CIAkXAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUZrdB0fEVJO+r4bH5Eg3M8ew95lYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzJiZmQyNzlkLTUzYzMtNDdkOS1hMjgyLWMxZjI0OWIyYTVmOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/vUDANBgkqhkiG9w0BAQsFAAOCAQEALlWAv0q717yjqOxQP3nql5WP
IFhtvt23wLQq6xxQY0VJIhdpjMHO7cxco7Dq3u9T1pOx/wnCXMrgUkHgBMFO6NjN
GfyU5jiWgJcXAHwJvyj9bjJgSVL189FBxOi14IwPMQ4cH9KI26GpNRVy0KyRR7nF
D1Wyv92ZXgdJn1UeVM94WSopr3ICgFcbYkkoDtDdRSJZGfmlbeeeiW6/mPSV0oWd
LHIvgicXkn2yGjrBnXws3vrjptctIL5gJ25al99EyvQJFxMJ0A4Gc0jU3hDESqHC
Hr/erq8nvaovE49jNcWvAOs+vPM/CQm0snl+y0TmPd2Wl1fU4tMIHhlX77qhVg==
-----END CERTIFICATE-----