Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a492e851-e74c-44ed-b4bd-4b95f3c87a07.roa
File:                     a492e851-e74c-44ed-b4bd-4b95f3c87a07.roa (raw, json)
Hash identifier:          O4R2TIxaX4L12FW80Px+nkrk+0E7m4oxiafl21qfHUM=
Subject key identifier:   B8:BC:A3:7A:ED:09:8E:E4:92:53:F7:23:38:3F:55:59:33:26:1F:B4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7A8E500726DAD25D856C2D4B7DB9DD422375AAC7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a492e851-e74c-44ed-b4bd-4b95f3c87a07.roa
Signing time:             Tue 28 Oct 2025 00:31:14 +0000
ROA not before:           Tue 28 Oct 2025 00:31:14 +0000
ROA not after:            Tue 02 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2620:107:4008::/45 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:8e:50:07:26:da:d2:5d:85:6c:2d:4b:7d:b9:dd:42:23:75:aa:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 28 00:31:14 2025 GMT
            Not After : Dec  2 23:59:59 2025 GMT
        Subject: serialNumber=c0e0bf2d6c01b5a1682819cfc9f9ba820bf42e89e7f95714bc49ff656101d0fc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:32:2c:0d:16:db:83:f5:60:2d:5a:3d:10:ce:
                    fa:8d:4d:c2:6f:b5:a8:8d:86:8d:f5:cb:2d:76:24:
                    f6:75:35:8c:dc:8e:b3:42:33:e1:1d:02:90:3c:06:
                    1a:55:ac:30:dc:d7:3c:d3:91:4b:15:1e:9c:41:d5:
                    89:73:6b:0a:dc:fb:b0:e3:05:42:38:b0:50:a3:ec:
                    7c:71:2e:21:82:d4:c7:75:64:6c:95:47:d2:7e:fc:
                    db:01:18:7b:3f:8a:9f:6e:07:aa:cb:10:1d:5b:ad:
                    ed:92:de:ac:90:7c:03:eb:cc:40:ec:6a:71:a9:93:
                    ba:0c:9b:90:1f:d0:8e:bf:87:ba:e8:93:38:bb:d3:
                    69:58:c1:73:67:7f:ff:84:36:f9:5d:45:4c:fa:96:
                    6d:ea:a2:97:06:b6:47:d8:35:19:d3:f7:a6:c0:66:
                    ad:ce:85:15:1d:03:cc:71:0f:b9:95:bd:8c:55:3a:
                    6f:68:9d:b7:0f:fd:1d:3b:ba:85:3a:1b:a3:46:27:
                    7e:6c:22:6e:1a:b2:6a:80:27:01:0b:d7:de:85:68:
                    16:92:45:80:02:dd:44:40:e4:6e:7b:54:94:08:bb:
                    91:d7:47:50:98:5f:ad:ec:c5:0e:4a:88:fc:1f:68:
                    ae:09:8e:47:ee:b9:0d:7d:a1:89:63:65:f6:d7:78:
                    e8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BC:A3:7A:ED:09:8E:E4:92:53:F7:23:38:3F:55:59:33:26:1F:B4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a492e851-e74c-44ed-b4bd-4b95f3c87a07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:107:4008::/45

    Signature Algorithm: sha256WithRSAEncryption
         18:98:df:92:8a:65:c0:6c:a0:3d:9f:cc:4f:27:c6:e1:9c:c0:
         1a:f9:e2:d2:c7:22:28:b9:1a:ce:2b:d8:51:ae:72:52:e8:9d:
         67:e1:18:e1:94:9a:40:70:0e:5a:18:e0:12:f8:2a:36:8f:e9:
         09:99:6d:b9:25:70:ee:f6:76:0e:b2:ae:c2:d1:9b:fd:15:c3:
         2b:23:80:62:bb:d8:66:4a:73:25:7b:c0:ab:6b:17:d7:56:21:
         f9:54:fc:45:87:87:99:0f:f6:cb:91:bc:92:5f:da:24:d3:18:
         95:9f:8c:25:40:c3:39:48:c5:5f:da:bc:80:01:26:0c:7b:cf:
         53:35:b2:72:04:04:8d:15:9f:08:b7:ff:16:57:2e:59:2d:70:
         92:bf:aa:7b:3c:93:5a:21:d0:35:83:b0:97:96:81:73:c7:43:
         77:e2:c3:b9:24:6c:e1:41:6d:62:5c:47:54:b1:fd:fc:7b:64:
         e6:a8:f8:4b:ff:ed:2e:97:4f:86:8d:aa:61:10:8d:6b:1e:a3:
         76:a9:51:38:eb:ad:05:c3:16:c9:4b:24:a4:41:b9:ff:54:d4:
         9c:32:20:e2:fd:e7:00:ab:64:2a:cf:94:87:66:6c:02:47:aa:
         77:12:fc:48:dd:d9:63:d7:d7:4d:f6:04:d9:a7:5e:52:a8:a1:
         28:9d:14:71
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUeo5QByba0l2FbC1LfbndQiN1qscwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDI4MDAzMTE0WhcNMjUxMjAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BjMGUwYmYyZDZjMDFiNWExNjgyODE5Y2ZjOWY5YmE4MjBi
ZjQyZTg5ZTdmOTU3MTRiYzQ5ZmY2NTYxMDFkMGZjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCsMiwNFtuD9WAtWj0QzvqNTcJvtaiNho31yy12JPZ1NYzc
jrNCM+EdApA8BhpVrDDc1zzTkUsVHpxB1Ylzawrc+7DjBUI4sFCj7HxxLiGC1Md1
ZGyVR9J+/NsBGHs/ip9uB6rLEB1bre2S3qyQfAPrzEDsanGpk7oMm5Af0I6/h7ro
kzi702lYwXNnf/+ENvldRUz6lm3qopcGtkfYNRnT96bAZq3OhRUdA8xxD7mVvYxV
Om9onbcP/R07uoU6G6NGJ35sIm4asmqAJwEL196FaBaSRYAC3URA5G57VJQIu5HX
R1CYX63sxQ5KiPwfaK4JjkfuuQ19oYljZfbXeOjdAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUuLyjeu0JjuSSU/cjOD9VWTMmH7QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2E0OTJlODUxLWU3NGMtNDRlZC1iNGJkLTRiOTVmM2M4N2EwNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmIAEHQAgwDQYJKoZIhvcNAQELBQADggEBABiY35KKZcBsoD2fzE8nxuGc
wBr54tLHIii5Gs4r2FGuclLonWfhGOGUmkBwDloY4BL4KjaP6QmZbbklcO72dg6y
rsLRm/0VwysjgGK72GZKcyV7wKtrF9dWIflU/EWHh5kP9suRvJJf2iTTGJWfjCVA
wzlIxV/avIABJgx7z1M1snIEBI0Vnwi3/xZXLlktcJK/qns8k1oh0DWDsJeWgXPH
Q3fiw7kkbOFBbWJcR1Sx/fx7ZOao+Ev/7S6XT4aNqmEQjWseo3apUTjrrQXDFslL
JKRBuf9U1JwyIOL95wCrZCrPlIdmbAJHqncS/Ejd2WPX1032BNmnXlKooSidFHE=
-----END CERTIFICATE-----