Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0382bd56-5e93-4f09-8ae9-d92f7aa72058.roa
File:                     0382bd56-5e93-4f09-8ae9-d92f7aa72058.roa (raw, json)
Hash identifier:          HI6S9hZzm1JtTcaL7iOfj23aN54agb/S2P5waX766jg=
Subject key identifier:   0E:6B:55:60:F4:DA:87:E7:89:55:03:C3:2A:9A:E1:EF:FC:48:AD:F7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       530E6EDB5A24D962500E227B22522FCE9DFF0413
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0382bd56-5e93-4f09-8ae9-d92f7aa72058.roa
Signing time:             Sat 18 Oct 2025 01:30:14 +0000
ROA not before:           Sat 18 Oct 2025 01:30:14 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f14:c000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:0e:6e:db:5a:24:d9:62:50:0e:22:7b:22:52:2f:ce:9d:ff:04:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 01:30:14 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=a9861b4a13823697351a9e1c04d630dbfb4e5d0b07327a80ac6810dcf9cb743d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:00:3a:a7:4c:db:93:2a:ef:9c:1c:6d:99:f8:
                    df:a6:4c:49:b7:cc:e6:a5:65:d8:bf:27:76:ab:e7:
                    24:e7:d7:65:7b:f7:17:be:71:61:f1:57:d1:cd:9c:
                    64:6c:f9:59:c1:67:9f:d8:cf:3f:76:eb:d9:1f:91:
                    31:64:aa:f4:52:cf:ee:05:c9:27:cb:88:c3:85:96:
                    18:ce:bd:ea:db:30:93:6b:a3:27:33:a9:0b:d1:29:
                    36:bc:d8:7e:d2:77:ee:fe:35:ae:40:c6:6e:ed:18:
                    e0:4c:fd:9e:07:87:be:8f:96:38:e0:bb:0e:1e:98:
                    a2:04:60:05:0f:f2:4a:b7:2e:36:5d:7f:f1:27:0b:
                    3f:39:a7:a9:ee:f4:d4:f6:28:cc:d8:57:cd:dd:b1:
                    dc:02:5b:ab:30:5c:71:a5:c4:b1:75:f0:7c:a2:91:
                    6e:69:04:bb:f1:52:64:b9:a1:de:72:4b:00:d7:e2:
                    0f:c0:e2:71:3f:b5:db:25:8d:d6:cf:fa:14:04:e3:
                    35:bd:dd:a5:9d:67:4f:6e:33:88:c5:52:73:09:6b:
                    9d:5f:21:52:8e:56:44:ba:60:a0:14:c5:18:06:e2:
                    91:7c:df:1e:93:79:52:99:a0:ae:d9:0a:00:0a:9d:
                    0f:9d:05:dc:8a:84:60:f1:a2:ba:35:a0:e5:ef:c2:
                    4e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:6B:55:60:F4:DA:87:E7:89:55:03:C3:2A:9A:E1:EF:FC:48:AD:F7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0382bd56-5e93-4f09-8ae9-d92f7aa72058.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f14:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         24:32:39:8f:1b:21:e5:7a:31:61:13:ef:01:91:3f:8d:34:7c:
         09:2a:f0:4e:49:17:84:f5:84:64:75:10:9e:02:e6:23:dd:83:
         94:74:6c:ce:4f:4e:d4:7e:6f:75:3b:1a:3d:4f:d2:a4:d8:dc:
         02:3b:47:08:be:28:c7:24:0e:f2:f7:08:bc:e5:87:7d:e1:c7:
         46:3d:43:bd:d2:db:c2:20:9e:1d:ef:14:ed:75:9a:f6:de:55:
         b7:4c:23:e0:22:4a:6d:ef:80:e6:e6:a0:26:64:65:e7:96:ac:
         3e:18:3d:4a:6a:fa:43:07:35:4c:f0:e2:2d:89:4b:84:97:75:
         98:7a:97:72:20:6b:ac:bf:84:4b:6f:e8:33:12:ec:84:78:d1:
         c8:40:6e:da:72:e1:fa:f3:55:28:3a:10:f1:61:18:47:4b:e3:
         25:b1:f5:ae:32:ff:c9:22:af:e5:08:8f:70:59:3c:1a:bb:0a:
         ec:bc:3e:f5:50:5c:b7:c7:37:2d:14:ab:bd:4b:85:c6:af:54:
         e0:2a:25:d8:ec:bb:30:93:98:2f:21:2b:9c:34:00:bd:5e:ed:
         4a:13:0f:19:8c:b4:0c:72:90:32:33:59:98:5f:85:e5:b1:d9:
         bf:38:90:26:f1:ec:76:84:96:6a:f3:8a:2a:f0:1e:73:de:38:
         e3:aa:b6:d9
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUUw5u21ok2WJQDiJ7IlIvzp3/BBMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDEzMDE0WhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BhOTg2MWI0YTEzODIzNjk3MzUxYTllMWMwNGQ2MzBkYmZi
NGU1ZDBiMDczMjdhODBhYzY4MTBkY2Y5Y2I3NDNkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDAADqnTNuTKu+cHG2Z+N+mTEm3zOalZdi/J3ar5yTn12V7
9xe+cWHxV9HNnGRs+VnBZ5/Yzz9269kfkTFkqvRSz+4FySfLiMOFlhjOverbMJNr
oyczqQvRKTa82H7Sd+7+Na5Axm7tGOBM/Z4Hh76Pljjguw4emKIEYAUP8kq3LjZd
f/EnCz85p6nu9NT2KMzYV83dsdwCW6swXHGlxLF18HyikW5pBLvxUmS5od5ySwDX
4g/A4nE/tdsljdbP+hQE4zW93aWdZ09uM4jFUnMJa51fIVKOVkS6YKAUxRgG4pF8
3x6TeVKZoK7ZCgAKnQ+dBdyKhGDxoro1oOXvwk59AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUDmtVYPTah+eJVQPDKprh7/xIrfcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzAzODJiZDU2LTVlOTMtNGYwOS04YWU5LWQ5MmY3YWE3MjA1OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8UwDANBgkqhkiG9w0BAQsFAAOCAQEAJDI5jxsh5XoxYRPvAZE/jTR8
CSrwTkkXhPWEZHUQngLmI92DlHRszk9O1H5vdTsaPU/SpNjcAjtHCL4oxyQO8vcI
vOWHfeHHRj1DvdLbwiCeHe8U7XWa9t5Vt0wj4CJKbe+A5uagJmRl55asPhg9Smr6
Qwc1TPDiLYlLhJd1mHqXciBrrL+ES2/oMxLshHjRyEBu2nLh+vNVKDoQ8WEYR0vj
JbH1rjL/ySKv5QiPcFk8GrsK7Lw+9VBct8c3LRSrvUuFxq9U4Col2Oy7MJOYLyEr
nDQAvV7tShMPGYy0DHKQMjNZmF+F5bHZvziQJvHsdoSWavOKKvAec94446q22Q==
-----END CERTIFICATE-----