Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1817678e-0580-4471-9643-673d058dee5e.roa
File:                     1817678e-0580-4471-9643-673d058dee5e.roa (raw, json)
Hash identifier:          5SzWMSAbuwnnlge7IKUbVHUU+BDpkupEyNEfOL9S8xg=
Subject key identifier:   EA:2A:12:7D:70:DE:BD:ED:7B:92:29:73:59:44:9C:76:FA:F6:6D:9D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3B3CA955E3426CEC62B555853DCA7305F473416C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1817678e-0580-4471-9643-673d058dee5e.roa
Signing time:             Fri 03 Oct 2025 00:12:00 +0000
ROA not before:           Fri 03 Oct 2025 00:12:00 +0000
ROA not after:            Fri 07 Nov 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1ff9:2000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:3c:a9:55:e3:42:6c:ec:62:b5:55:85:3d:ca:73:05:f4:73:41:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  3 00:12:00 2025 GMT
            Not After : Nov  7 23:59:59 2025 GMT
        Subject: serialNumber=41ec207f106947ad375b6a71a32646a73c63b3f6713930794933cb7a50f5e6e9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f3:93:dc:bb:03:9f:ca:7d:30:61:0f:c3:c7:
                    07:b3:f0:cc:89:cb:94:cf:bd:1a:da:00:57:32:25:
                    d8:1d:ea:06:81:a5:7a:ba:72:c1:50:b9:25:7a:b5:
                    ce:a2:4c:2e:52:06:8e:89:04:4f:ef:f2:44:e4:a3:
                    80:ed:56:a6:e6:b8:4e:23:3c:f0:b7:da:55:2c:13:
                    a8:15:66:51:e0:29:c2:63:ce:1f:04:32:55:37:27:
                    e9:41:e9:a5:73:1f:fd:8b:16:04:4d:f5:84:03:97:
                    4e:61:52:fd:0d:b8:c3:76:ab:64:d3:9b:5b:79:9a:
                    b4:a4:97:a4:41:77:44:0f:d3:ce:51:6e:90:80:e8:
                    78:1c:4b:60:63:2a:dc:fa:3a:1f:0a:89:80:1e:c7:
                    7f:05:c8:de:f3:e5:c2:6c:54:6c:85:67:a2:10:41:
                    b7:bb:dc:a0:c9:47:df:bc:be:59:bc:ce:ca:0a:d1:
                    41:30:b3:af:24:41:2c:9d:14:be:14:d2:ee:ee:af:
                    61:37:4f:6d:4d:b4:8b:4b:ca:74:d9:cc:98:a2:40:
                    48:dc:bd:c9:c8:3a:dc:1b:c9:5c:67:77:5c:c8:f9:
                    04:a6:bb:f3:60:14:79:62:42:1a:76:79:17:e4:30:
                    a2:b0:0d:45:61:29:82:37:92:d9:2e:aa:61:65:32:
                    f9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:2A:12:7D:70:DE:BD:ED:7B:92:29:73:59:44:9C:76:FA:F6:6D:9D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1817678e-0580-4471-9643-673d058dee5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff9:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         d6:10:48:16:fd:92:f5:d7:50:ae:3a:13:8c:13:5a:6d:17:cd:
         65:25:3f:f3:7c:22:d6:6c:cf:63:e6:2e:e8:5a:9f:3d:d5:aa:
         cd:7e:39:1e:d4:cb:ec:a9:6f:86:95:dc:04:a6:f2:f2:1d:8a:
         56:38:6a:d7:1c:1e:33:7d:f4:c0:96:03:41:a0:35:bb:de:22:
         59:a9:34:3f:97:d4:9d:55:5f:00:e4:5f:4d:90:61:a2:d4:a3:
         b8:ca:48:aa:d2:9c:e5:92:1b:74:61:80:2a:4f:df:41:70:85:
         4b:e3:fc:ac:87:d5:bd:01:e8:af:2a:28:bb:95:ae:65:d8:b1:
         76:42:21:3e:3b:7e:c2:01:7d:7c:6d:62:6c:46:c8:91:70:7b:
         4b:c6:ae:2b:2a:e2:f9:e8:84:47:89:6a:26:55:03:36:5a:b4:
         e0:db:78:81:a7:e8:cf:93:64:ce:7c:76:82:fe:91:62:f3:f8:
         15:75:cf:28:e9:38:45:8e:48:76:c3:6f:dc:a1:4f:36:68:de:
         f8:33:88:99:86:95:0f:94:db:2b:ef:6a:09:17:e1:5b:74:6d:
         6e:c8:bc:e1:18:9a:c3:7f:a3:6c:52:14:23:be:8b:d3:98:09:
         7b:0e:24:b7:5c:38:d2:db:69:eb:af:44:22:87:21:4a:b9:0e:
         ca:0c:6c:89
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUOzypVeNCbOxitVWFPcpzBfRzQWwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDAzMDAxMjAwWhcNMjUxMTA3MjM1OTU5
WjB6MUkwRwYDVQQFE0A0MWVjMjA3ZjEwNjk0N2FkMzc1YjZhNzFhMzI2NDZhNzNj
NjNiM2Y2NzEzOTMwNzk0OTMzY2I3YTUwZjVlNmU5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCC85PcuwOfyn0wYQ/Dxwez8MyJy5TPvRraAFcyJdgd6gaB
pXq6csFQuSV6tc6iTC5SBo6JBE/v8kTko4DtVqbmuE4jPPC32lUsE6gVZlHgKcJj
zh8EMlU3J+lB6aVzH/2LFgRN9YQDl05hUv0NuMN2q2TTm1t5mrSkl6RBd0QP085R
bpCA6HgcS2BjKtz6Oh8KiYAex38FyN7z5cJsVGyFZ6IQQbe73KDJR9+8vlm8zsoK
0UEws68kQSydFL4U0u7ur2E3T21NtItLynTZzJiiQEjcvcnIOtwbyVxnd1zI+QSm
u/NgFHliQhp2eRfkMKKwDUVhKYI3ktkuqmFlMvljAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQU6ioSfXDeve17kilzWUScdvr2bZ0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE4MTc2NzhlLTA1ODAtNDQ3MS05NjQzLTY3M2QwNThkZWU1ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/5IDANBgkqhkiG9w0BAQsFAAOCAQEA1hBIFv2S9ddQrjoTjBNabRfN
ZSU/83wi1mzPY+Yu6FqfPdWqzX45HtTL7KlvhpXcBKby8h2KVjhq1xweM330wJYD
QaA1u94iWak0P5fUnVVfAORfTZBhotSjuMpIqtKc5ZIbdGGAKk/fQXCFS+P8rIfV
vQHoryoou5WuZdixdkIhPjt+wgF9fG1ibEbIkXB7S8auKyri+eiER4lqJlUDNlq0
4Nt4gafoz5Nkznx2gv6RYvP4FXXPKOk4RY5IdsNv3KFPNmje+DOImYaVD5TbK+9q
CRfhW3Rtbsi84Riaw3+jbFIUI76L05gJew4kt1w40ttp669EIochSrkOygxsiQ==
-----END CERTIFICATE-----