Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5735f995-cb72-4444-bddf-a7091da94ebb.roa
File:                     5735f995-cb72-4444-bddf-a7091da94ebb.roa (raw, json)
Hash identifier:          5rt0Labrm3Rj6X9N6cSLe1V10oX3YBJcp+r7VAC0zLY=
Subject key identifier:   12:E1:01:A0:7A:C3:44:64:D9:1B:EC:FC:BE:73:0A:6D:8A:90:43:6F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       78C78D6E355935D99D4912733813E4A0A1082F78
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5735f995-cb72-4444-bddf-a7091da94ebb.roa
Signing time:             Tue 07 Oct 2025 00:43:27 +0000
ROA not before:           Tue 07 Oct 2025 00:43:27 +0000
ROA not after:            Tue 11 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fff:2c00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c7:8d:6e:35:59:35:d9:9d:49:12:73:38:13:e4:a0:a1:08:2f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  7 00:43:27 2025 GMT
            Not After : Nov 11 23:59:59 2025 GMT
        Subject: serialNumber=cadcd13e4ea052bf3ecb2a1328adbc830f91c6d9b39aa7a644a4d920475a1ad4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:15:51:60:2d:e6:28:d9:7b:a3:71:14:0c:99:
                    ac:65:82:49:6b:7a:f7:99:6d:02:57:56:42:35:03:
                    56:09:33:a8:3a:9e:06:ef:c4:fa:d8:5d:9b:76:63:
                    e6:60:04:f6:83:a1:8e:8d:09:4a:41:17:e1:13:63:
                    2c:8b:34:17:91:53:86:6b:bc:1a:6b:15:09:3f:6a:
                    0a:d5:85:c7:0a:83:ec:43:c7:4f:68:4f:33:92:19:
                    f4:0e:b7:ab:f0:db:55:36:8c:18:da:a1:00:bc:31:
                    87:52:49:ad:74:83:44:ba:9d:c4:5c:65:2e:9f:ca:
                    a3:76:43:6d:3e:b1:fb:d3:0b:9d:1a:35:01:5c:22:
                    8c:29:ef:47:2e:0d:af:70:c8:71:5d:e2:fc:62:da:
                    be:ed:48:6a:33:f6:b1:d8:d0:18:36:25:1f:aa:54:
                    e0:9a:79:10:eb:aa:e8:a2:fc:e2:47:3c:dc:35:82:
                    e9:7a:1f:f9:5d:d9:83:47:26:35:c6:28:a9:d9:6b:
                    98:1c:76:e9:0e:a0:30:5a:4d:f9:56:86:a9:6b:39:
                    54:8d:00:14:b0:4c:de:17:87:8f:04:0d:5d:3b:21:
                    a3:be:f1:7d:76:a8:b7:ee:82:04:da:ca:99:c9:70:
                    b5:7a:14:92:8f:e8:8f:67:30:da:a9:90:2f:f3:8b:
                    ea:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E1:01:A0:7A:C3:44:64:D9:1B:EC:FC:BE:73:0A:6D:8A:90:43:6F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5735f995-cb72-4444-bddf-a7091da94ebb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:2c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         20:5a:6c:0b:42:d0:8d:19:a7:7c:7e:df:2a:72:e5:9c:80:6b:
         93:f3:68:6f:1e:77:ac:38:b3:12:b4:ca:03:76:64:d2:13:dc:
         b5:15:ee:95:2f:69:91:29:75:1a:10:9b:e5:ba:2e:5c:fd:f6:
         d5:1c:7f:f6:d0:85:5a:e2:fb:bf:9d:2b:7c:a1:16:94:5b:44:
         a3:bb:d7:6d:d8:71:7a:61:c5:57:29:82:59:45:63:c6:58:6c:
         70:18:96:56:c9:de:22:7f:0d:31:2c:22:2d:8e:64:09:ec:7c:
         8c:7a:74:9a:ac:b8:31:04:c6:bc:55:b9:7a:1b:71:b1:e1:4a:
         b3:2a:ef:49:a9:76:8a:4d:75:a3:ce:ff:8e:d4:5a:1b:e4:ca:
         5d:0b:7e:54:29:de:33:26:82:70:17:a7:14:09:58:98:0e:44:
         f9:ee:96:9d:92:00:0f:f1:82:b5:7c:1d:3f:87:62:dc:90:3f:
         ca:41:b2:c0:ac:96:94:2d:bf:87:c0:33:07:ff:a9:d5:dd:9d:
         80:5f:8c:9e:47:fe:ec:a2:cb:f0:78:97:56:f9:43:f3:d0:26:
         15:3b:a5:dd:0d:0f:73:8b:98:92:51:79:35:a9:ad:f1:e4:8e:
         f7:55:ed:f5:e1:62:68:6f:32:2d:4a:f9:77:f6:10:92:1d:5d:
         17:7e:39:f9
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUeMeNbjVZNdmdSRJzOBPkoKEIL3gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDA3MDA0MzI3WhcNMjUxMTExMjM1OTU5
WjB6MUkwRwYDVQQFE0BjYWRjZDEzZTRlYTA1MmJmM2VjYjJhMTMyOGFkYmM4MzBm
OTFjNmQ5YjM5YWE3YTY0NGE0ZDkyMDQ3NWExYWQ0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCGFVFgLeYo2XujcRQMmaxlgklreveZbQJXVkI1A1YJM6g6
ngbvxPrYXZt2Y+ZgBPaDoY6NCUpBF+ETYyyLNBeRU4ZrvBprFQk/agrVhccKg+xD
x09oTzOSGfQOt6vw21U2jBjaoQC8MYdSSa10g0S6ncRcZS6fyqN2Q20+sfvTC50a
NQFcIowp70cuDa9wyHFd4vxi2r7tSGoz9rHY0Bg2JR+qVOCaeRDrquii/OJHPNw1
gul6H/ld2YNHJjXGKKnZa5gcdukOoDBaTflWhqlrOVSNABSwTN4Xh48EDV07IaO+
8X12qLfuggTaypnJcLV6FJKP6I9nMNqpkC/zi+ovAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUEuEBoHrDRGTZG+z8vnMKbYqQQ28wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzU3MzVmOTk1LWNiNzItNDQ0NC1iZGRmLWE3MDkxZGE5NGViYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB//LDANBgkqhkiG9w0BAQsFAAOCAQEAIFpsC0LQjRmnfH7fKnLlnIBr
k/Nobx53rDizErTKA3Zk0hPctRXulS9pkSl1GhCb5bouXP321Rx/9tCFWuL7v50r
fKEWlFtEo7vXbdhxemHFVymCWUVjxlhscBiWVsneIn8NMSwiLY5kCex8jHp0mqy4
MQTGvFW5ehtxseFKsyrvSal2ik11o87/jtRaG+TKXQt+VCneMyaCcBenFAlYmA5E
+e6WnZIAD/GCtXwdP4di3JA/ykGywKyWlC2/h8AzB/+p1d2dgF+Mnkf+7KLL8HiX
VvlD89AmFTul3Q0Pc4uYklF5Namt8eSO91Xt9eFiaG8yLUr5d/YQkh1dF345+Q==
-----END CERTIFICATE-----