Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/957e72f5-7e9a-467a-b4f6-5c706d5c920b.roa
File:                     957e72f5-7e9a-467a-b4f6-5c706d5c920b.roa (raw, json)
Hash identifier:          rFlbIUapCykoed3BNI7EwawB5w+61TlHCg0fQTKZPBQ=
Subject key identifier:   97:48:3D:81:3F:DF:3B:10:D0:C2:0E:2A:41:27:80:D3:0C:F4:BA:7D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       57D8C7199548B2BBCDBF617BEF258FEA53CC32D1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/957e72f5-7e9a-467a-b4f6-5c706d5c920b.roa
Signing time:             Sat 01 Nov 2025 00:41:01 +0000
ROA not before:           Sat 01 Nov 2025 00:41:01 +0000
ROA not after:            Sat 06 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fb9:1000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d8:c7:19:95:48:b2:bb:cd:bf:61:7b:ef:25:8f:ea:53:cc:32:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:41:01 2025 GMT
            Not After : Dec  6 23:59:59 2025 GMT
        Subject: serialNumber=ac1f4b3b2e16e7bfc3b75d612503112f0b1aee1d322aa5e36cca0be8dcbd50a7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:15:f9:d4:6b:4f:21:de:19:c6:a4:c0:69:df:
                    11:d4:b5:83:09:59:ce:54:27:10:83:00:63:81:b0:
                    65:e1:b2:fe:7c:f0:30:25:0d:42:ef:a6:fa:d4:1d:
                    5b:ef:77:d9:86:f0:23:39:48:5d:ce:ea:19:7f:2e:
                    8f:1a:2a:35:71:c7:97:a4:41:e1:5c:09:51:65:e0:
                    d2:50:b2:b3:42:15:e8:47:18:72:94:ef:a9:e2:c2:
                    5e:df:c0:73:31:d0:28:db:22:ec:44:0b:35:69:78:
                    90:fc:d0:f7:1d:6a:b4:34:8e:ce:39:7a:1c:74:bd:
                    fe:fd:dd:97:06:4e:d6:a8:9c:64:7a:c1:a5:b6:db:
                    4e:17:1b:c4:54:94:83:57:36:e2:cc:f1:b4:3a:32:
                    b7:27:1f:30:22:61:a3:1c:ca:07:04:9b:65:98:96:
                    d3:4e:af:bc:96:ab:49:0f:96:23:d5:94:a2:a2:45:
                    39:56:23:7b:ca:fc:1f:f0:d6:99:69:99:37:fb:62:
                    ed:2e:8c:e9:1a:2e:ec:3a:24:92:4c:49:d1:f7:50:
                    4e:a3:18:3c:99:8d:f8:9b:55:50:d3:d1:4e:1d:de:
                    a8:eb:a9:bd:a9:70:83:c4:cd:a2:02:50:58:fd:2d:
                    74:db:1e:15:fd:df:ab:74:13:27:51:2c:51:53:81:
                    59:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:48:3D:81:3F:DF:3B:10:D0:C2:0E:2A:41:27:80:D3:0C:F4:BA:7D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/957e72f5-7e9a-467a-b4f6-5c706d5c920b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fb9:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b3:60:8a:13:7f:8b:be:1f:93:5a:be:e7:35:87:9d:d7:6a:1b:
         fe:b0:70:15:6d:96:6a:61:96:cb:05:ac:54:30:09:f9:97:a8:
         37:4d:c9:5a:c2:76:8b:a0:00:b1:17:c5:a0:c1:cc:95:4d:b8:
         c7:fc:61:e8:53:dc:19:af:51:30:0b:f1:ab:77:c1:ec:28:66:
         ed:3a:1c:d3:9c:9b:de:e6:7f:00:e3:f5:9a:05:49:d3:94:0b:
         be:2c:5e:4d:5f:4d:65:76:f8:7f:10:14:06:f0:bd:63:02:e3:
         a2:b8:96:48:86:5c:11:c3:bd:00:02:87:42:cf:d7:16:1c:19:
         c6:9a:8c:f0:e7:de:0e:03:1a:84:df:4a:7d:ed:d2:23:b1:cd:
         3e:b4:37:c3:85:36:fa:7c:41:6b:ba:17:19:21:bb:20:39:b6:
         a7:f8:63:78:0e:1e:9f:b1:f9:ae:5f:24:68:90:3e:54:65:62:
         fe:31:f5:f8:3c:13:95:95:cb:20:59:4a:14:86:6b:06:d1:cf:
         6b:99:2e:ba:81:e5:c3:01:30:3f:51:bd:27:57:05:6e:ed:43:
         e5:a5:91:7e:4a:95:b8:fe:19:39:21:96:49:49:fd:19:ad:2c:
         a1:27:e4:ba:c6:a0:71:6a:f5:64:81:40:1d:0b:36:f3:ea:99:
         93:f0:a0:44
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUV9jHGZVIsrvNv2F77yWP6lPMMtEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTAxMDA0MTAxWhcNMjUxMjA2MjM1OTU5
WjB6MUkwRwYDVQQFE0BhYzFmNGIzYjJlMTZlN2JmYzNiNzVkNjEyNTAzMTEyZjBi
MWFlZTFkMzIyYWE1ZTM2Y2NhMGJlOGRjYmQ1MGE3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDGFfnUa08h3hnGpMBp3xHUtYMJWc5UJxCDAGOBsGXhsv58
8DAlDULvpvrUHVvvd9mG8CM5SF3O6hl/Lo8aKjVxx5ekQeFcCVFl4NJQsrNCFehH
GHKU76niwl7fwHMx0CjbIuxECzVpeJD80PcdarQ0js45ehx0vf793ZcGTtaonGR6
waW2204XG8RUlINXNuLM8bQ6MrcnHzAiYaMcygcEm2WYltNOr7yWq0kPliPVlKKi
RTlWI3vK/B/w1plpmTf7Yu0ujOkaLuw6JJJMSdH3UE6jGDyZjfibVVDT0U4d3qjr
qb2pcIPEzaICUFj9LXTbHhX936t0EydRLFFTgVknAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUl0g9gT/fOxDQwg4qQSeA0wz0un0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzk1N2U3MmY1LTdlOWEtNDY3YS1iNGY2LTVjNzA2ZDVjOTIwYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB+5EDANBgkqhkiG9w0BAQsFAAOCAQEAs2CKE3+Lvh+TWr7nNYed12ob
/rBwFW2WamGWywWsVDAJ+ZeoN03JWsJ2i6AAsRfFoMHMlU24x/xh6FPcGa9RMAvx
q3fB7Chm7Toc05yb3uZ/AOP1mgVJ05QLvixeTV9NZXb4fxAUBvC9YwLjoriWSIZc
EcO9AAKHQs/XFhwZxpqM8OfeDgMahN9Kfe3SI7HNPrQ3w4U2+nxBa7oXGSG7IDm2
p/hjeA4en7H5rl8kaJA+VGVi/jH1+DwTlZXLIFlKFIZrBtHPa5kuuoHlwwEwP1G9
J1cFbu1D5aWRfkqVuP4ZOSGWSUn9Ga0soSfkusagcWr1ZIFAHQs28+qZk/CgRA==
-----END CERTIFICATE-----