Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/272b68bc-ad95-4c61-a057-e565a411a365.roa
File:                     272b68bc-ad95-4c61-a057-e565a411a365.roa (raw, json)
Hash identifier:          vbhWgRaUCGwKtpt9MywIG+N61gsvDImWfpiBDTtYIDY=
Subject key identifier:   5A:DB:BC:4E:B6:A9:3D:B8:53:20:23:85:F6:C9:19:69:67:EB:E6:B7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3C03EF620CA62A8283CBC00B90A8185C736EFE8C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/272b68bc-ad95-4c61-a057-e565a411a365.roa
Signing time:             Sun 19 Oct 2025 00:41:30 +0000
ROA not before:           Sun 19 Oct 2025 00:41:30 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ff3:8090::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:03:ef:62:0c:a6:2a:82:83:cb:c0:0b:90:a8:18:5c:73:6e:fe:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 00:41:30 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=a5caac34f3e2a909f6d476fe96ffdfa68b3d02c554fdf36e785be37e718ed6d1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cd:dc:ae:04:3a:34:18:8b:0b:5c:6a:d5:eb:
                    bb:23:19:f3:91:09:ec:42:f5:b4:b2:14:31:9b:50:
                    1b:44:5e:ad:a0:9a:3d:42:bb:ba:89:25:bb:ec:a6:
                    91:f6:6a:85:d0:c7:24:58:9f:97:b3:cc:7d:57:db:
                    af:02:66:6e:fc:4a:cc:d1:01:9f:b0:ad:4b:d9:40:
                    95:30:29:50:8e:7c:38:ff:cf:49:9c:ae:86:e0:78:
                    f3:96:e1:30:60:b2:bc:4a:25:73:b5:b9:1f:4f:48:
                    60:35:16:9d:f7:53:a8:2b:57:ed:03:47:b2:53:bd:
                    db:c0:a8:50:dc:f6:d6:37:72:81:6d:9c:a2:a3:05:
                    44:14:0e:0e:12:fd:8d:26:14:97:da:68:cb:4d:5e:
                    d9:0a:19:5c:28:5e:df:9a:93:2f:ed:14:6b:f5:9d:
                    b8:a1:97:14:62:82:0e:d9:69:3c:82:fc:49:b8:d6:
                    43:b0:84:23:db:d4:11:bd:7e:83:cf:18:1c:2d:6b:
                    ac:f1:94:3d:c9:e2:b7:05:ea:55:bd:74:31:44:b8:
                    cb:8a:9b:09:b6:e9:23:f1:84:17:49:82:03:c3:89:
                    21:75:9a:26:a0:59:91:97:49:ed:fa:ed:11:85:d6:
                    34:b8:fc:51:11:ec:a6:44:00:0d:be:5f:26:14:41:
                    7c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:DB:BC:4E:B6:A9:3D:B8:53:20:23:85:F6:C9:19:69:67:EB:E6:B7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/272b68bc-ad95-4c61-a057-e565a411a365.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:8090::/46

    Signature Algorithm: sha256WithRSAEncryption
         d8:8d:08:1a:d2:b6:e2:4a:3c:cf:a3:1c:10:8a:3f:20:21:89:
         5f:ed:d6:54:c6:0c:24:9a:96:a6:bf:65:f9:98:c8:45:82:b0:
         0d:7d:fa:af:ba:34:ed:1a:da:aa:4e:a7:18:99:2a:a9:db:05:
         20:d8:68:42:ed:b4:04:4d:ac:ba:8e:64:51:bb:da:92:29:7d:
         ac:0e:7f:47:c4:d0:a0:da:9f:ab:6e:2c:fd:a3:04:d8:f8:1a:
         ef:04:76:24:28:00:32:1e:61:b8:53:48:4b:0a:0b:4f:9f:5c:
         01:77:c8:d3:f7:1f:16:c9:4b:26:26:f9:bd:e6:ae:1e:5d:19:
         aa:34:a9:6a:91:13:2d:ea:13:19:9f:fa:fa:24:46:33:3e:5c:
         dd:90:e3:9e:34:3e:23:ce:8c:ea:4e:a6:73:6c:98:3b:5d:20:
         bf:fd:c9:60:28:fc:e1:e8:3f:99:cb:a9:cd:17:41:50:bf:b5:
         6d:21:93:d3:68:fe:eb:85:e7:54:9a:1b:aa:5e:8d:38:53:95:
         11:4a:66:ca:76:ea:5d:15:1b:63:96:e3:61:44:c2:56:d0:ee:
         8a:b3:d5:3a:00:95:3a:0a:9e:c3:06:8e:2d:e1:b4:f3:6e:3b:
         8f:f6:c0:37:b3:1a:d4:1f:38:c6:e0:2e:cb:1f:a8:05:54:10:
         1b:c8:91:df
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUPAPvYgymKoKDy8ALkKgYXHNu/owwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDA0MTMwWhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BhNWNhYWMzNGYzZTJhOTA5ZjZkNDc2ZmU5NmZmZGZhNjhi
M2QwMmM1NTRmZGYzNmU3ODViZTM3ZTcxOGVkNmQxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCozdyuBDo0GIsLXGrV67sjGfORCexC9bSyFDGbUBtEXq2g
mj1Cu7qJJbvsppH2aoXQxyRYn5ezzH1X268CZm78SszRAZ+wrUvZQJUwKVCOfDj/
z0mcrobgePOW4TBgsrxKJXO1uR9PSGA1Fp33U6grV+0DR7JTvdvAqFDc9tY3coFt
nKKjBUQUDg4S/Y0mFJfaaMtNXtkKGVwoXt+aky/tFGv1nbihlxRigg7ZaTyC/Em4
1kOwhCPb1BG9foPPGBwta6zxlD3J4rcF6lW9dDFEuMuKmwm26SPxhBdJggPDiSF1
miagWZGXSe367RGF1jS4/FER7KZEAA2+XyYUQXyTAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUWtu8TrapPbhTICOF9skZaWfr5rcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzI3MmI2OGJjLWFkOTUtNGM2MS1hMDU3LWU1NjVhNDExYTM2NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAB/zgJAwDQYJKoZIhvcNAQELBQADggEBANiNCBrStuJKPM+jHBCKPyAh
iV/t1lTGDCSalqa/ZfmYyEWCsA19+q+6NO0a2qpOpxiZKqnbBSDYaELttARNrLqO
ZFG72pIpfawOf0fE0KDan6tuLP2jBNj4Gu8EdiQoADIeYbhTSEsKC0+fXAF3yNP3
HxbJSyYm+b3mrh5dGao0qWqREy3qExmf+vokRjM+XN2Q4540PiPOjOpOpnNsmDtd
IL/9yWAo/OHoP5nLqc0XQVC/tW0hk9No/uuF51SaG6pejThTlRFKZsp26l0VG2OW
42FEwlbQ7oqz1ToAlToKnsMGji3htPNuO4/2wDezGtQfOMbgLssfqAVUEBvIkd8=
-----END CERTIFICATE-----