Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10033961-c437-4201-87b8-c9dfc05eb475.roa
File:                     10033961-c437-4201-87b8-c9dfc05eb475.roa (raw, json)
Hash identifier:          i1WDV40yHM7nSHrq0z+So5QFhQ1hBPk88zrNayhRo4Q=
Subject key identifier:   7D:58:CA:C1:87:A7:73:67:71:14:3C:27:85:E3:34:7F:41:90:DA:27
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5666CAA933EFBFFDC8681017413802C2250568DD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10033961-c437-4201-87b8-c9dfc05eb475.roa
Signing time:             Tue 14 Oct 2025 15:51:19 +0000
ROA not before:           Tue 14 Oct 2025 15:51:19 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fec:c400::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:66:ca:a9:33:ef:bf:fd:c8:68:10:17:41:38:02:c2:25:05:68:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 15:51:19 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=e61c050572e2ad9efd8d26fe8a54ba3e9bf01e4abfa8eec05b3c684af94e1d58, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:07:cc:0b:65:35:c1:cb:d0:1c:fc:d5:f5:6d:
                    d7:ff:aa:dc:21:28:69:ba:f4:aa:15:4e:3e:8a:11:
                    65:89:e9:3a:88:3d:ab:ff:8c:c3:c7:e5:27:b2:63:
                    1c:7b:55:09:45:81:34:df:ac:b0:98:bb:2a:7b:54:
                    c0:05:b5:98:3b:50:ce:39:a5:2e:77:fe:a8:87:cc:
                    13:7e:8a:58:de:af:59:78:e5:3c:f5:30:c4:85:44:
                    0a:ca:82:7d:c8:14:f0:88:6e:f9:f2:41:54:e9:5a:
                    d9:e4:4a:05:bf:b7:95:88:fc:3d:c9:d2:94:04:d2:
                    3e:bd:22:18:8f:f4:9b:0d:fc:ae:39:e7:29:32:32:
                    bc:ee:ed:4f:83:5f:8e:a0:f6:1b:36:a3:32:34:af:
                    4e:a1:21:7c:41:df:15:75:a5:67:a6:fe:42:e0:fd:
                    db:05:e6:38:68:3f:9e:a3:f1:7c:75:ae:0b:a9:2a:
                    ad:b9:a3:3f:8c:b2:4a:bf:5a:e2:9b:72:72:d5:2e:
                    9f:3c:be:7b:36:d7:4b:80:31:1e:a1:67:3b:5f:d4:
                    3e:a0:41:e2:69:34:49:15:d2:8e:51:05:10:11:7d:
                    89:3d:10:b3:6f:56:3f:d1:e2:a1:69:8c:b4:84:b3:
                    d2:e2:ba:c5:be:a0:50:7c:d6:36:94:d6:e9:ab:c7:
                    14:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:58:CA:C1:87:A7:73:67:71:14:3C:27:85:E3:34:7F:41:90:DA:27
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10033961-c437-4201-87b8-c9dfc05eb475.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fec:c400::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:69:aa:0b:84:12:a0:d8:42:77:db:5c:ca:94:d2:9b:77:9c:
         35:0d:67:a4:1a:bb:43:24:26:d7:e1:83:20:f9:c1:5b:69:35:
         d1:7d:d0:b6:c1:da:3a:a4:80:b6:5c:0c:92:0e:fb:1c:4a:15:
         e7:7b:84:5b:bc:f9:58:84:f7:6e:4d:66:7a:79:35:cd:9a:20:
         01:ea:3e:b7:b6:59:19:fd:f2:fc:6d:d0:6f:07:30:e0:6a:91:
         52:e7:e4:06:ab:3f:7e:15:ae:b2:ab:82:c5:0a:9a:50:d8:eb:
         72:99:2d:79:0f:4a:20:5b:48:cb:5d:d1:2a:a5:fa:25:0c:64:
         fa:f8:a4:05:7d:19:24:9e:6f:af:57:8a:7c:36:7d:c0:54:8a:
         13:66:c2:94:f6:b8:91:82:21:2b:3f:28:5f:a8:fd:a7:88:97:
         98:c0:82:4e:00:07:dc:8c:b5:48:47:4e:2f:09:a1:09:02:32:
         35:ce:1b:66:ea:40:37:94:58:f5:8f:27:7b:24:26:73:e1:57:
         b0:d5:36:42:62:5e:c2:15:c0:0a:5b:dc:85:20:e2:d1:34:54:
         c2:96:ae:5e:08:4d:ef:46:eb:a4:31:fd:81:78:1f:af:3f:4b:
         57:9a:9c:1b:74:07:6d:b4:3d:21:c1:b1:60:a2:d7:51:c2:fb:
         06:3c:65:e8
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUVmbKqTPvv/3IaBAXQTgCwiUFaN0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MTU1MTE5WhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BlNjFjMDUwNTcyZTJhZDllZmQ4ZDI2ZmU4YTU0YmEzZTli
ZjAxZTRhYmZhOGVlYzA1YjNjNjg0YWY5NGUxZDU4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJB8wLZTXBy9Ac/NX1bdf/qtwhKGm69KoVTj6KEWWJ6TqI
Pav/jMPH5SeyYxx7VQlFgTTfrLCYuyp7VMAFtZg7UM45pS53/qiHzBN+iljer1l4
5Tz1MMSFRArKgn3IFPCIbvnyQVTpWtnkSgW/t5WI/D3J0pQE0j69IhiP9JsN/K45
5ykyMrzu7U+DX46g9hs2ozI0r06hIXxB3xV1pWem/kLg/dsF5jhoP56j8Xx1rgup
Kq25oz+Mskq/WuKbcnLVLp88vns210uAMR6hZztf1D6gQeJpNEkV0o5RBRARfYk9
ELNvVj/R4qFpjLSEs9LiusW+oFB81jaU1umrxxRdAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUfVjKwYenc2dxFDwnheM0f0GQ2icwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzEwMDMzOTYxLWM0MzctNDIwMS04N2I4LWM5ZGZjMDVlYjQ3NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/sxAAwDQYJKoZIhvcNAQELBQADggEBAIBpqguEEqDYQnfbXMqU0pt3
nDUNZ6Qau0MkJtfhgyD5wVtpNdF90LbB2jqkgLZcDJIO+xxKFed7hFu8+ViE925N
Znp5Nc2aIAHqPre2WRn98vxt0G8HMOBqkVLn5AarP34VrrKrgsUKmlDY63KZLXkP
SiBbSMtd0Sql+iUMZPr4pAV9GSSeb69Xinw2fcBUihNmwpT2uJGCISs/KF+o/aeI
l5jAgk4AB9yMtUhHTi8JoQkCMjXOG2bqQDeUWPWPJ3skJnPhV7DVNkJiXsIVwApb
3IUg4tE0VMKWrl4ITe9G66Qx/YF4H68/S1eanBt0B220PSHBsWCi11HC+wY8Zeg=
-----END CERTIFICATE-----