Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9868705-9902-4e3c-8621-591fc3d61f79.roa
File:                     c9868705-9902-4e3c-8621-591fc3d61f79.roa (raw, json)
Hash identifier:          BdmBidLIrqO7YCNUstVKXKn9JAJmtjvZvlvjGvFo/FI=
Subject key identifier:   48:8C:0E:31:90:AD:1A:F5:A6:EB:91:F8:F6:84:D0:1D:9B:E6:37:23
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       064015C46BB44A74B6F336836D53AB49B3B8867D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9868705-9902-4e3c-8621-591fc3d61f79.roa
Signing time:             Wed 29 Oct 2025 00:20:06 +0000
ROA not before:           Wed 29 Oct 2025 00:20:06 +0000
ROA not after:            Wed 03 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f38:8090::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:40:15:c4:6b:b4:4a:74:b6:f3:36:83:6d:53:ab:49:b3:b8:86:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 29 00:20:06 2025 GMT
            Not After : Dec  3 23:59:59 2025 GMT
        Subject: serialNumber=3107278974e095fa0edd34933212d4ec69ac510a24534f097f775b4ea5df8c52, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:85:75:43:74:04:64:f6:63:97:61:18:3b:d2:
                    b0:09:19:37:aa:c4:62:b8:c4:93:96:15:90:7d:fa:
                    05:b2:05:5d:01:9b:e4:68:28:64:cb:45:58:2b:57:
                    45:21:70:ad:f0:60:9c:1d:f1:41:0a:92:ca:cd:e7:
                    44:03:3c:13:b4:09:b3:6a:bc:5e:93:c8:d6:ad:d0:
                    77:34:05:ce:9d:db:d4:81:91:52:b7:3c:98:71:ac:
                    1a:29:f2:b9:ee:62:2e:8a:66:93:80:cf:15:47:7d:
                    ef:ec:5e:71:8c:2f:55:40:fe:32:4d:f8:8b:32:7c:
                    28:75:eb:f5:e3:00:3c:3e:8d:14:94:9d:ac:0b:d5:
                    05:eb:fa:c9:17:c4:46:14:87:7b:1c:b9:b5:1b:4f:
                    ed:b3:f3:e3:df:4a:0e:f6:d0:e2:4d:4a:37:0a:ee:
                    97:56:4b:26:23:42:f9:b0:56:34:65:8d:1a:16:a0:
                    ce:f2:b4:cd:98:46:c6:11:26:66:26:78:2c:0a:42:
                    34:1d:94:3d:a4:77:4c:46:e8:cc:72:64:dc:2f:e7:
                    25:66:0d:04:f1:e7:f4:bb:c9:a7:dd:95:ec:e0:b9:
                    ee:8a:4c:59:e9:85:4c:2c:c5:ed:b8:29:64:03:df:
                    ff:8e:63:6b:71:aa:75:83:2c:2b:3a:36:0f:d9:89:
                    35:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8C:0E:31:90:AD:1A:F5:A6:EB:91:F8:F6:84:D0:1D:9B:E6:37:23
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9868705-9902-4e3c-8621-591fc3d61f79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f38:8090::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:e4:8f:74:0f:69:62:9d:1e:c5:f2:50:94:e9:2d:df:be:c2:
         26:39:2a:41:52:5a:db:3f:aa:2a:87:bd:8c:c3:fa:9e:06:e6:
         44:85:fb:dc:29:54:21:a1:aa:74:cf:78:84:fd:90:99:84:88:
         1c:98:f5:eb:3b:08:d5:18:70:f9:4f:39:3c:e3:47:ec:4a:35:
         01:5b:88:a5:02:db:36:c7:fb:28:f3:ea:27:e3:32:9a:0c:8b:
         85:9b:58:58:32:d1:3c:8b:9b:e9:ec:ab:f6:83:de:0e:e1:ad:
         2d:33:69:67:34:49:b1:ba:21:a0:93:5e:17:da:ed:91:31:78:
         95:7d:e0:26:ae:36:2b:4f:73:0e:ab:f9:d2:c3:b3:13:18:7d:
         e6:fb:0e:e2:f1:80:fa:0d:ec:25:d7:b7:a4:0c:14:4c:b9:44:
         92:6d:66:8e:cb:02:99:df:24:3d:f3:69:30:d0:38:93:e6:e9:
         59:8a:61:7e:fe:e8:f5:fc:56:3e:c1:59:ed:ff:09:4e:22:25:
         0c:92:f0:4c:12:0e:7f:f4:b7:87:cd:09:f1:25:48:64:58:81:
         44:b6:9a:96:eb:2f:98:5b:f0:55:89:4c:55:dc:04:63:49:e1:
         e7:68:b8:5b:f7:a2:fb:bb:64:94:e4:86:b3:41:d5:64:3b:c5:
         d2:8c:cc:f9
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUBkAVxGu0SnS28zaDbVOrSbO4hn0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDI5MDAyMDA2WhcNMjUxMjAzMjM1OTU5
WjB6MUkwRwYDVQQFE0AzMTA3Mjc4OTc0ZTA5NWZhMGVkZDM0OTMzMjEyZDRlYzY5
YWM1MTBhMjQ1MzRmMDk3Zjc3NWI0ZWE1ZGY4YzUyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCbhXVDdARk9mOXYRg70rAJGTeqxGK4xJOWFZB9+gWyBV0B
m+RoKGTLRVgrV0UhcK3wYJwd8UEKksrN50QDPBO0CbNqvF6TyNat0Hc0Bc6d29SB
kVK3PJhxrBop8rnuYi6KZpOAzxVHfe/sXnGML1VA/jJN+IsyfCh16/XjADw+jRSU
nawL1QXr+skXxEYUh3scubUbT+2z8+PfSg720OJNSjcK7pdWSyYjQvmwVjRljRoW
oM7ytM2YRsYRJmYmeCwKQjQdlD2kd0xG6MxyZNwv5yVmDQTx5/S7yafdlezgue6K
TFnphUwsxe24KWQD3/+OY2txqnWDLCs6Ng/ZiTUvAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUSIwOMZCtGvWm65H49oTQHZvmNyMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2M5ODY4NzA1LTk5MDItNGUzYy04NjIxLTU5MWZjM2Q2MWY3OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB84gJAwDQYJKoZIhvcNAQELBQADggEBACjkj3QPaWKdHsXyUJTpLd++
wiY5KkFSWts/qiqHvYzD+p4G5kSF+9wpVCGhqnTPeIT9kJmEiByY9es7CNUYcPlP
OTzjR+xKNQFbiKUC2zbH+yjz6ifjMpoMi4WbWFgy0TyLm+nsq/aD3g7hrS0zaWc0
SbG6IaCTXhfa7ZExeJV94CauNitPcw6r+dLDsxMYfeb7DuLxgPoN7CXXt6QMFEy5
RJJtZo7LApnfJD3zaTDQOJPm6VmKYX7+6PX8Vj7BWe3/CU4iJQyS8EwSDn/0t4fN
CfElSGRYgUS2mpbrL5hb8FWJTFXcBGNJ4edouFv3ovu7ZJTkhrNB1WQ7xdKMzPk=
-----END CERTIFICATE-----