Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/334d7931-2517-4a77-808a-686c04c88234.roa
File:                     334d7931-2517-4a77-808a-686c04c88234.roa (raw, json)
Hash identifier:          Us6Rdjs1BOBz9Ce5lN9FzDyCg0sJYca6d2wF/TVqmT0=
Subject key identifier:   75:85:8C:41:37:40:4E:CC:B7:93:4C:35:3F:A2:B8:47:DC:E2:29:E2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2C9FE1B89118022801C8EFF1C014910D9B412C1F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/334d7931-2517-4a77-808a-686c04c88234.roa
Signing time:             Sun 02 Nov 2025 00:30:37 +0000
ROA not before:           Sun 02 Nov 2025 00:30:37 +0000
ROA not after:            Sun 07 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff5:c000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:9f:e1:b8:91:18:02:28:01:c8:ef:f1:c0:14:91:0d:9b:41:2c:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  2 00:30:37 2025 GMT
            Not After : Dec  7 23:59:59 2025 GMT
        Subject: serialNumber=b21a829ad864d2f74ca5140465e274918d567df27aac25b801907d901173b31e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:94:aa:61:4b:4e:a1:de:2d:cd:13:0a:a8:71:
                    fd:0d:7c:5b:a8:cd:69:7b:50:eb:2f:19:4f:bd:a4:
                    25:89:1a:f3:62:03:d5:dc:f1:f3:cb:34:46:8a:d1:
                    99:b7:46:86:da:44:b9:9f:c4:c4:cb:f9:5f:16:8d:
                    6c:7d:65:c3:5e:be:32:ff:f6:c6:96:8f:64:68:ac:
                    96:bf:44:1b:c7:74:40:74:29:3e:3c:83:24:10:11:
                    75:57:f2:91:eb:35:c2:78:85:9f:6a:09:21:f4:af:
                    27:36:a9:ac:8e:8a:d7:01:2f:11:96:fd:74:4d:0d:
                    dc:a9:80:c7:c1:90:06:1c:4e:89:b4:c3:26:39:f8:
                    94:8e:99:6f:73:fe:d0:c8:16:f4:41:ea:bb:76:09:
                    cb:81:18:ca:17:75:1f:30:54:ba:6a:b5:37:fd:bd:
                    62:c1:e0:34:d8:4e:72:6f:6b:04:a0:a0:da:2a:27:
                    d5:32:6d:45:a4:3e:db:b5:64:40:65:e8:f2:9c:d6:
                    cc:b2:c4:3c:e6:10:a9:23:49:bb:7e:92:4d:ff:5d:
                    62:f6:44:90:bc:4e:6d:9a:33:e7:4e:b2:dd:8e:2c:
                    17:ee:13:1c:a1:d4:df:83:4d:63:f7:cc:be:2a:9a:
                    1d:3e:03:43:71:c4:47:d5:00:0a:7e:6f:44:96:b5:
                    2e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:85:8C:41:37:40:4E:CC:B7:93:4C:35:3F:A2:B8:47:DC:E2:29:E2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/334d7931-2517-4a77-808a-686c04c88234.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff5:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         10:b7:6b:39:66:db:26:d5:ed:90:5a:b2:cd:28:7b:f7:a0:4e:
         3e:86:cf:ec:14:ec:85:1b:5b:7b:10:5f:12:db:39:49:b6:79:
         20:de:38:8c:37:ee:62:5a:52:fd:dc:ba:8d:1d:e9:58:09:a9:
         86:30:5d:b2:02:b5:9f:04:dd:3f:da:09:00:ab:7e:fb:01:16:
         ab:a3:78:ea:e8:ac:10:f3:e6:23:90:00:de:45:06:28:05:6a:
         61:07:a9:3c:47:45:e6:1e:e5:4b:98:ad:3b:66:56:2c:a0:f5:
         ff:72:f5:e8:29:66:69:dc:17:ba:1f:47:43:ca:b5:2b:6a:3a:
         17:6e:34:15:a6:71:48:3d:b3:7b:cd:7d:9a:46:2a:50:6f:2d:
         39:36:de:c3:db:31:f9:7d:eb:b4:04:3a:45:da:cd:e1:7f:59:
         a7:20:cb:93:5e:9b:04:7f:dd:1f:d1:e3:12:f0:c2:93:96:65:
         34:14:f6:92:d9:ab:ef:33:27:e0:1d:11:38:14:ae:76:33:81:
         e8:87:d4:6b:9f:05:33:5a:92:2c:97:72:ff:c5:ae:19:61:53:
         3f:6a:7a:18:70:a5:2c:0d:94:bc:57:b0:77:27:1f:d1:c3:2a:
         27:3f:94:8c:3d:40:7c:4c:94:77:3a:d6:ec:df:12:9a:9f:21:
         d2:77:eb:c7
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIULJ/huJEYAigByO/xwBSRDZtBLB8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTAyMDAzMDM3WhcNMjUxMjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BiMjFhODI5YWQ4NjRkMmY3NGNhNTE0MDQ2NWUyNzQ5MThk
NTY3ZGYyN2FhYzI1YjgwMTkwN2Q5MDExNzNiMzFlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDclKphS06h3i3NEwqocf0NfFuozWl7UOsvGU+9pCWJGvNi
A9Xc8fPLNEaK0Zm3RobaRLmfxMTL+V8WjWx9ZcNevjL/9saWj2RorJa/RBvHdEB0
KT48gyQQEXVX8pHrNcJ4hZ9qCSH0ryc2qayOitcBLxGW/XRNDdypgMfBkAYcTom0
wyY5+JSOmW9z/tDIFvRB6rt2CcuBGMoXdR8wVLpqtTf9vWLB4DTYTnJvawSgoNoq
J9UybUWkPtu1ZEBl6PKc1syyxDzmEKkjSbt+kk3/XWL2RJC8Tm2aM+dOst2OLBfu
Exyh1N+DTWP3zL4qmh0+A0NxxEfVAAp+b0SWtS63AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUdYWMQTdATsy3k0w1P6K4R9ziKeIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzMzNGQ3OTMxLTI1MTctNGE3Ny04MDhhLTY4NmMwNGM4ODIzNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/1wDANBgkqhkiG9w0BAQsFAAOCAQEAELdrOWbbJtXtkFqyzSh796BO
PobP7BTshRtbexBfEts5SbZ5IN44jDfuYlpS/dy6jR3pWAmphjBdsgK1nwTdP9oJ
AKt++wEWq6N46uisEPPmI5AA3kUGKAVqYQepPEdF5h7lS5itO2ZWLKD1/3L16Clm
adwXuh9HQ8q1K2o6F240FaZxSD2ze819mkYqUG8tOTbew9sx+X3rtAQ6RdrN4X9Z
pyDLk16bBH/dH9HjEvDCk5ZlNBT2ktmr7zMn4B0ROBSudjOB6IfUa58FM1qSLJdy
/8WuGWFTP2p6GHClLA2UvFewdycf0cMqJz+UjD1AfEyUdzrW7N8Smp8h0nfrxw==
-----END CERTIFICATE-----