Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17753452-b86f-49ae-84c4-910b5df36b8c.roa
File:                     17753452-b86f-49ae-84c4-910b5df36b8c.roa (raw, json)
Hash identifier:          VrcGwddZnPduYnHwZKcS5l9s7HFWeE67loWfHvB0JUs=
Subject key identifier:   C1:1F:22:D4:FD:C8:34:41:F4:31:A1:AA:32:E7:7C:8B:CA:B8:D5:F7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0749368D945DD38DF666A333F29F73C8D1F47DCD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17753452-b86f-49ae-84c4-910b5df36b8c.roa
Signing time:             Sat 18 Oct 2025 03:21:36 +0000
ROA not before:           Sat 18 Oct 2025 03:21:36 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fb9:6000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:49:36:8d:94:5d:d3:8d:f6:66:a3:33:f2:9f:73:c8:d1:f4:7d:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 03:21:36 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=ebea7b01259a33a3bf179638c2c184f29fccece78725c14c910560b685925ccc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:05:38:55:ed:0b:e1:b4:6a:67:2d:de:a7:1e:
                    fe:5e:03:f7:72:11:83:a2:49:9c:67:f5:74:74:de:
                    e6:ad:e8:bd:87:31:cf:a8:5c:c4:f7:ef:0c:af:94:
                    25:64:cd:02:a9:50:eb:35:c4:f3:99:57:e0:d1:4e:
                    b1:d7:6c:2b:89:59:12:04:bc:3e:d9:70:20:87:5f:
                    7a:46:61:6f:38:26:53:bc:4d:93:bc:ec:dd:e9:2b:
                    61:b1:76:a0:82:e1:95:b4:a8:70:0f:81:f7:82:c2:
                    e9:30:56:aa:e5:62:d8:a2:c8:71:e0:7f:14:a6:a6:
                    ba:a4:78:b1:aa:2c:4e:4a:7d:e0:5f:d7:46:79:86:
                    e5:f9:f2:37:8f:33:0b:fc:53:40:b1:53:d6:e6:96:
                    10:29:d3:7b:c1:48:85:40:fc:c8:3e:c3:08:30:ca:
                    fb:0d:b9:e0:0a:9e:7c:17:4f:5c:ab:0a:84:7a:91:
                    33:6f:27:f9:26:01:7a:fd:e1:d3:07:3c:79:df:ba:
                    88:81:5e:87:ab:79:ac:a5:4f:04:b8:74:87:2a:f0:
                    e0:81:e5:31:89:07:7d:a2:01:f5:53:ff:90:58:c2:
                    44:6b:e0:f5:83:a5:a1:f4:49:3f:11:ad:3d:31:d8:
                    3e:97:15:cf:1e:d5:cd:46:e8:13:c7:85:bb:17:0c:
                    a2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1F:22:D4:FD:C8:34:41:F4:31:A1:AA:32:E7:7C:8B:CA:B8:D5:F7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17753452-b86f-49ae-84c4-910b5df36b8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fb9:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         69:2e:fe:19:53:d4:c7:de:d3:3b:16:ae:ae:bd:0f:da:17:35:
         a3:e0:1c:af:5f:df:62:3b:4c:22:1f:7b:94:f3:ab:09:af:ef:
         cd:93:37:9e:91:9e:f9:3d:98:6e:32:54:21:56:02:9d:f1:94:
         a3:50:b4:de:5a:44:37:68:bb:5c:cb:2f:a1:09:a0:33:72:31:
         eb:4c:a8:92:ed:63:cb:56:b3:45:3a:c8:e3:1c:fe:5c:d3:67:
         d6:b2:8c:c3:be:54:e8:1a:f1:c8:08:97:a6:8c:b8:e5:e3:44:
         43:13:5c:dc:49:3c:b6:db:f0:c0:2b:95:1d:7d:9d:57:16:3b:
         77:14:75:a2:70:a8:04:e7:80:fa:67:3b:0a:5e:9f:16:88:03:
         2c:d5:6a:54:b1:89:85:d7:16:75:87:9e:d9:c3:12:59:de:15:
         7e:34:84:6b:10:2f:29:bc:c0:8f:61:a3:ea:67:56:0e:01:8a:
         f7:49:31:ea:11:1f:fe:4e:63:c0:34:25:b1:22:0e:c9:4b:8f:
         bb:3e:1a:4d:df:24:77:8e:22:66:e0:a4:63:8d:f0:2e:76:10:
         c6:82:3f:31:ba:2d:7c:3e:17:2f:60:cf:77:60:c2:bc:e2:09:
         10:df:ae:12:cc:c5:f0:46:2d:8b:e0:af:16:a2:7f:cd:3d:bc:
         76:5d:b6:ce
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUB0k2jZRd0432ZqMz8p9zyNH0fc0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDMyMTM2WhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BlYmVhN2IwMTI1OWEzM2EzYmYxNzk2MzhjMmMxODRmMjlm
Y2NlY2U3ODcyNWMxNGM5MTA1NjBiNjg1OTI1Y2NjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDxBThV7QvhtGpnLd6nHv5eA/dyEYOiSZxn9XR03uat6L2H
Mc+oXMT37wyvlCVkzQKpUOs1xPOZV+DRTrHXbCuJWRIEvD7ZcCCHX3pGYW84JlO8
TZO87N3pK2GxdqCC4ZW0qHAPgfeCwukwVqrlYtiiyHHgfxSmprqkeLGqLE5KfeBf
10Z5huX58jePMwv8U0CxU9bmlhAp03vBSIVA/Mg+wwgwyvsNueAKnnwXT1yrCoR6
kTNvJ/kmAXr94dMHPHnfuoiBXoereaylTwS4dIcq8OCB5TGJB32iAfVT/5BYwkRr
4PWDpaH0ST8RrT0x2D6XFc8e1c1G6BPHhbsXDKIxAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUwR8i1P3INEH0MaGqMud8i8q41fcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE3NzUzNDUyLWI4NmYtNDlhZS04NGM0LTkxMGI1ZGYzNmI4Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB+5YDANBgkqhkiG9w0BAQsFAAOCAQEAaS7+GVPUx97TOxaurr0P2hc1
o+Acr1/fYjtMIh97lPOrCa/vzZM3npGe+T2YbjJUIVYCnfGUo1C03lpEN2i7XMsv
oQmgM3Ix60yoku1jy1azRTrI4xz+XNNn1rKMw75U6BrxyAiXpoy45eNEQxNc3Ek8
ttvwwCuVHX2dVxY7dxR1onCoBOeA+mc7Cl6fFogDLNVqVLGJhdcWdYee2cMSWd4V
fjSEaxAvKbzAj2Gj6mdWDgGK90kx6hEf/k5jwDQlsSIOyUuPuz4aTd8kd44iZuCk
Y43wLnYQxoI/MbotfD4XL2DPd2DCvOIJEN+uEszF8EYti+CvFqJ/zT28dl22zg==
-----END CERTIFICATE-----