Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c52e18b-fee3-46ba-ae6c-b7259010f0e7.roa
File:                     4c52e18b-fee3-46ba-ae6c-b7259010f0e7.roa (raw, json)
Hash identifier:          ZlnHOIFgoaj4oTp8wS+VqrNCte6WJqT0zgUWzJxbxqw=
Subject key identifier:   AC:52:64:EC:90:C9:E0:52:55:89:A6:3C:87:75:64:8E:F6:23:F1:C8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       730333706A25F5077058B623D61C3F5B00DE6C66
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c52e18b-fee3-46ba-ae6c-b7259010f0e7.roa
Signing time:             Sat 18 Oct 2025 00:51:38 +0000
ROA not before:           Sat 18 Oct 2025 00:51:38 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f36:4000::/39 maxlen: 39
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:03:33:70:6a:25:f5:07:70:58:b6:23:d6:1c:3f:5b:00:de:6c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 00:51:38 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=29a3c1b99d3a98bde6976aa0d75bce02e87a4b2991130fc2f30228133a7af605, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:07:75:c4:e8:64:44:51:c6:17:2c:41:56:f0:
                    fa:c9:10:ad:ee:a2:fe:e4:e4:fe:61:2b:47:7f:9e:
                    a3:77:f7:1f:ce:af:65:90:31:0b:79:40:e0:c9:83:
                    0a:eb:f1:79:91:1f:2a:80:20:f9:bb:ea:b4:0c:3f:
                    5d:ce:ec:81:72:cf:f7:a8:f9:d5:75:da:b9:99:48:
                    21:72:9f:67:e7:1e:20:b4:b9:a1:6d:92:da:2e:a2:
                    62:72:cf:73:56:da:15:95:bc:e8:4b:67:55:61:91:
                    1d:e1:dd:29:97:46:e8:4b:38:87:54:10:6c:23:f8:
                    bd:68:d1:18:0a:1e:db:51:de:bf:cb:57:f8:a4:44:
                    e4:eb:0a:31:90:5a:24:22:1c:39:d2:79:ff:5d:87:
                    d0:8c:65:b5:33:11:48:ce:f8:08:90:0a:8d:35:04:
                    9f:a1:85:72:69:59:10:b6:cd:2f:d7:73:5d:33:22:
                    d2:4e:d8:0d:7e:e2:ae:07:36:86:46:7c:23:75:b9:
                    b0:6e:99:ab:1b:24:d5:1a:36:54:97:08:af:92:5d:
                    2c:ed:66:e2:1e:ff:ab:d3:aa:4c:fa:84:5b:5d:69:
                    7e:6a:eb:bf:5e:cb:1b:88:d3:b7:f1:a8:3c:05:e4:
                    52:c2:f1:ea:a8:cf:a3:15:ee:3b:fa:4e:db:14:48:
                    89:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:52:64:EC:90:C9:E0:52:55:89:A6:3C:87:75:64:8E:F6:23:F1:C8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c52e18b-fee3-46ba-ae6c-b7259010f0e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f36:4000::/39

    Signature Algorithm: sha256WithRSAEncryption
         31:52:b2:2d:d8:56:fe:2e:c0:1a:b8:d1:d7:34:ee:bb:a9:4b:
         17:bd:86:5e:2b:a4:85:57:7c:0a:0e:e3:89:a4:f6:b1:a1:0f:
         35:f5:1c:53:f4:b7:f0:d3:d7:3a:89:cb:8e:f1:5d:2e:79:8b:
         a7:af:1e:00:67:9a:dc:c2:7a:22:e1:4d:87:45:46:0f:7b:23:
         65:76:57:ce:66:66:81:ac:49:6e:96:0c:eb:ef:1c:65:b6:5c:
         be:ba:17:cd:f9:25:e7:0f:51:49:f5:53:ab:5e:1b:f3:e7:f6:
         f0:d1:2e:71:88:9f:7e:62:0d:78:99:35:b1:69:59:7a:76:13:
         a0:18:74:96:f2:55:37:8a:18:4e:b5:1c:16:28:0b:6e:c0:41:
         65:50:7a:99:ed:3e:88:3e:45:7e:d7:36:41:54:9f:bb:f7:39:
         93:76:9c:b7:c6:cb:74:d4:3e:fe:1e:14:7d:9d:5b:62:d2:38:
         9e:fe:4e:8b:70:c3:d5:63:79:8f:5b:6c:cc:d4:e1:e4:66:d9:
         72:61:74:80:70:1a:ab:e8:2a:9f:86:5a:3d:97:91:2a:a9:b4:
         b9:42:58:e2:df:29:98:77:ac:d5:16:67:8f:c2:21:5c:79:5c:
         ad:06:a3:d1:63:5c:78:da:11:70:0d:45:16:b1:d0:54:03:e6:
         5c:98:b2:6b
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUcwMzcGol9QdwWLYj1hw/WwDebGYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDA1MTM4WhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0AyOWEzYzFiOTlkM2E5OGJkZTY5NzZhYTBkNzViY2UwMmU4
N2E0YjI5OTExMzBmYzJmMzAyMjgxMzNhN2FmNjA1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDeB3XE6GREUcYXLEFW8PrJEK3uov7k5P5hK0d/nqN39x/O
r2WQMQt5QODJgwrr8XmRHyqAIPm76rQMP13O7IFyz/eo+dV12rmZSCFyn2fnHiC0
uaFtktouomJyz3NW2hWVvOhLZ1VhkR3h3SmXRuhLOIdUEGwj+L1o0RgKHttR3r/L
V/ikROTrCjGQWiQiHDnSef9dh9CMZbUzEUjO+AiQCo01BJ+hhXJpWRC2zS/Xc10z
ItJO2A1+4q4HNoZGfCN1ubBumasbJNUaNlSXCK+SXSztZuIe/6vTqkz6hFtdaX5q
679eyxuI07fxqDwF5FLC8eqoz6MV7jv6TtsUSImPAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUrFJk7JDJ4FJViaY8h3VkjvYj8cgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzRjNTJlMThiLWZlZTMtNDZiYS1hZTZjLWI3MjU5MDEwZjBlNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgEmAB82QDANBgkqhkiG9w0BAQsFAAOCAQEAMVKyLdhW/i7AGrjR1zTuu6lL
F72GXiukhVd8Cg7jiaT2saEPNfUcU/S38NPXOonLjvFdLnmLp68eAGea3MJ6IuFN
h0VGD3sjZXZXzmZmgaxJbpYM6+8cZbZcvroXzfkl5w9RSfVTq14b8+f28NEucYif
fmINeJk1sWlZenYToBh0lvJVN4oYTrUcFigLbsBBZVB6me0+iD5Fftc2QVSfu/c5
k3act8bLdNQ+/h4UfZ1bYtI4nv5Oi3DD1WN5j1tszNTh5GbZcmF0gHAaq+gqn4Za
PZeRKqm0uUJY4t8pmHes1RZnj8IhXHlcrQaj0WNceNoRcA1FFrHQVAPmXJiyaw==
-----END CERTIFICATE-----