Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/097efca9-2599-4210-a384-fbe86822649c.roa
File:                     097efca9-2599-4210-a384-fbe86822649c.roa (raw, json)
Hash identifier:          oA3mYh/PXEkJ2XmEky1GD1RyIP0eM4IidzDMgVmKGp8=
Subject key identifier:   58:18:C9:AC:B1:32:E1:D3:D4:8A:CB:05:EA:56:C4:5B:37:AB:0E:5B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       21863C9F357320DC85EAE2FA895B1BD7DDE92BDE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/097efca9-2599-4210-a384-fbe86822649c.roa
Signing time:             Fri 17 Oct 2025 21:30:29 +0000
ROA not before:           Fri 17 Oct 2025 21:30:29 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff2:c040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:86:3c:9f:35:73:20:dc:85:ea:e2:fa:89:5b:1b:d7:dd:e9:2b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 21:30:29 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=f612ac6dd32a718feba166d5f6ca096ee38c08b039ff60ee359927f97035bcdc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:60:b9:63:79:23:a6:0f:1c:d2:7e:96:38:28:
                    9c:87:6c:2d:d1:36:94:af:79:03:c2:4c:0f:bf:74:
                    2b:ae:3e:d7:18:08:76:2d:2f:96:2d:4e:55:c0:6a:
                    03:c1:0c:1b:14:67:9d:36:21:ae:f0:5b:a7:80:67:
                    28:f7:d6:dd:0a:7f:4e:02:97:01:f5:01:3d:47:ca:
                    27:d5:8f:6c:41:54:99:57:38:7e:ce:b5:de:d8:f6:
                    ce:96:7e:e9:23:2e:2b:98:b4:05:41:d8:c8:18:1d:
                    18:83:de:4d:7f:7e:c4:84:7d:00:21:bf:16:14:56:
                    4f:3d:b1:b5:a0:4a:90:c0:fa:00:ba:59:ca:a9:e0:
                    52:bc:c3:0d:17:82:1c:68:27:58:7a:75:2f:8e:15:
                    ab:36:20:35:84:ed:b5:9a:ee:37:e1:f3:3c:96:79:
                    1e:36:58:15:96:f8:c8:77:47:06:21:ef:1d:38:87:
                    e8:8f:9d:8d:d1:c9:71:8b:fc:ed:45:b4:ae:52:07:
                    a5:a4:9b:13:5a:cf:75:c3:89:aa:2b:82:4d:82:c9:
                    fa:23:c0:4a:67:c5:74:8c:75:b7:66:be:cd:f7:2d:
                    44:7a:ca:a3:69:3c:f9:c2:d6:ba:c9:e6:b8:63:01:
                    bb:30:f0:28:43:56:f1:42:9b:6c:2d:2c:c3:b5:1a:
                    dc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:18:C9:AC:B1:32:E1:D3:D4:8A:CB:05:EA:56:C4:5B:37:AB:0E:5B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/097efca9-2599-4210-a384-fbe86822649c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:c040::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:33:46:a2:78:15:fa:85:2b:56:55:9e:89:76:0c:cf:0e:76:
         0c:6e:3b:ed:24:52:01:b5:fc:6a:1e:85:7d:c4:ce:72:08:8f:
         6b:c9:ca:c3:eb:97:66:d8:39:c5:22:09:48:26:00:1d:7d:b8:
         29:19:7d:82:be:85:7c:d0:52:0d:20:ae:a5:93:4f:16:c8:1a:
         58:af:74:1e:89:1a:8b:eb:a9:e3:57:3b:49:16:ac:d2:ee:c1:
         13:f6:0a:26:e1:13:da:df:ea:63:5a:fd:11:a4:63:86:29:18:
         6a:6a:60:c6:22:d2:0c:9a:e4:6d:ed:63:31:f0:36:af:23:4e:
         ad:a3:7f:6f:fe:6d:35:9b:b9:aa:ea:5d:4c:84:21:a6:f9:ac:
         0b:07:16:f7:9c:53:a0:2e:cc:3d:e3:65:2b:0c:51:7c:8c:2b:
         51:35:8b:49:28:1f:86:b0:9e:e3:a4:a8:27:92:55:fd:ed:e7:
         6c:10:2f:87:c2:3f:2b:c7:43:be:78:87:be:de:78:8c:6e:5c:
         ae:2d:c3:e6:03:60:59:01:c9:b4:54:5b:16:4d:12:be:66:0f:
         f8:72:4f:cc:ba:f0:04:2c:24:38:fa:96:02:8e:e9:9c:d3:53:
         99:a2:c9:cc:ed:4c:53:01:fd:9a:8c:f1:48:b5:fd:56:d6:81:
         d4:e8:1f:a3
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUIYY8nzVzINyF6uL6iVsb193pK94wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE3MjEzMDI5WhcNMjUxMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BmNjEyYWM2ZGQzMmE3MThmZWJhMTY2ZDVmNmNhMDk2ZWUz
OGMwOGIwMzlmZjYwZWUzNTk5MjdmOTcwMzViY2RjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCnYLljeSOmDxzSfpY4KJyHbC3RNpSveQPCTA+/dCuuPtcY
CHYtL5YtTlXAagPBDBsUZ502Ia7wW6eAZyj31t0Kf04ClwH1AT1HyifVj2xBVJlX
OH7Otd7Y9s6WfukjLiuYtAVB2MgYHRiD3k1/fsSEfQAhvxYUVk89sbWgSpDA+gC6
Wcqp4FK8ww0XghxoJ1h6dS+OFas2IDWE7bWa7jfh8zyWeR42WBWW+Mh3RwYh7x04
h+iPnY3RyXGL/O1FtK5SB6WkmxNaz3XDiaorgk2CyfojwEpnxXSMdbdmvs33LUR6
yqNpPPnC1rrJ5rhjAbsw8ChDVvFCm2wtLMO1Gty/AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUWBjJrLEy4dPUissF6lbEWzerDlswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA5N2VmY2E5LTI1OTktNDIxMC1hMzg0LWZiZTg2ODIyNjQ5Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/ywEAwDQYJKoZIhvcNAQELBQADggEBADQzRqJ4FfqFK1ZVnol2DM8O
dgxuO+0kUgG1/GoehX3EznIIj2vJysPrl2bYOcUiCUgmAB19uCkZfYK+hXzQUg0g
rqWTTxbIGlivdB6JGovrqeNXO0kWrNLuwRP2CibhE9rf6mNa/RGkY4YpGGpqYMYi
0gya5G3tYzHwNq8jTq2jf2/+bTWbuarqXUyEIab5rAsHFvecU6AuzD3jZSsMUXyM
K1E1i0koH4awnuOkqCeSVf3t52wQL4fCPyvHQ754h77eeIxuXK4tw+YDYFkBybRU
WxZNEr5mD/hyT8y68AQsJDj6lgKO6ZzTU5miycztTFMB/ZqM8Ui1/VbWgdToH6M=
-----END CERTIFICATE-----