Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64c4cac5-bd6c-4ca5-84cb-f235a46201cd.roa
File:                     64c4cac5-bd6c-4ca5-84cb-f235a46201cd.roa (raw, json)
Hash identifier:          B3UOX+epQtnpxtsj+PuR5an+EjD+UcfwPhJjPgxVees=
Subject key identifier:   AC:F2:DB:A4:1D:F6:11:51:A5:2E:99:34:AB:CC:EF:F1:7F:61:16:16
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1C3CE89542A6F868480C7B6E1948554E077A6CA9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64c4cac5-bd6c-4ca5-84cb-f235a46201cd.roa
Signing time:             Wed 08 Oct 2025 00:12:43 +0000
ROA not before:           Wed 08 Oct 2025 00:12:43 +0000
ROA not after:            Wed 12 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fb8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:3c:e8:95:42:a6:f8:68:48:0c:7b:6e:19:48:55:4e:07:7a:6c:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  8 00:12:43 2025 GMT
            Not After : Nov 12 23:59:59 2025 GMT
        Subject: serialNumber=6e278438b4d67eff95728ba990f01b447aab1991a3bd0997f0fe17aa1cd70a40, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:10:b7:ef:f9:4d:d2:c4:ac:c1:2d:e1:fb:fd:
                    07:13:21:8a:78:96:6b:9b:e0:50:ec:37:e3:90:5e:
                    ca:94:3e:8d:21:e2:da:39:97:ac:a2:ca:95:d0:a8:
                    a9:7b:44:f7:1e:41:17:c3:70:e0:bd:ac:60:62:8c:
                    8d:db:09:e2:7b:da:b5:7d:8e:df:c8:29:95:17:d4:
                    3e:05:57:af:ed:2b:be:cc:f8:df:4e:82:d4:7b:5e:
                    fa:57:08:91:bf:23:ee:d7:dc:b4:66:a7:a8:4f:f0:
                    f1:f6:c6:98:1b:03:24:45:bf:73:7b:1a:d4:00:e1:
                    b6:cb:00:f8:73:8f:9e:e7:24:89:4e:40:ab:06:9a:
                    f5:c0:14:39:a0:86:e7:b0:4f:2b:cf:01:00:e6:5b:
                    c0:51:a4:39:8d:82:9d:4c:10:24:06:6e:03:5a:6d:
                    e2:17:dd:96:45:ee:5e:38:f2:fa:5d:20:76:a7:9c:
                    b0:07:be:9f:07:aa:0c:c0:46:2b:32:65:83:a6:c2:
                    37:e1:d0:a7:4e:4f:8e:c4:e5:03:da:96:67:17:1a:
                    77:e7:a5:2b:7f:ab:41:cc:32:67:f6:52:88:57:77:
                    09:4f:c1:2f:5a:29:c0:d3:3c:58:05:93:fb:be:6d:
                    73:4c:13:b3:54:c0:80:8c:2e:9f:e1:05:7d:1e:9a:
                    ea:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F2:DB:A4:1D:F6:11:51:A5:2E:99:34:AB:CC:EF:F1:7F:61:16:16
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64c4cac5-bd6c-4ca5-84cb-f235a46201cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:a9:6c:44:6a:36:89:61:4d:f4:9c:af:f9:b6:ef:68:49:3e:
         ba:d2:dc:72:67:29:89:a4:ed:3d:bd:75:89:17:3c:d3:8e:7c:
         da:ce:d0:cc:80:ac:49:5b:97:de:39:ed:4e:e3:aa:e3:d8:fd:
         e8:63:0d:36:24:d1:de:b9:64:39:20:fd:b3:8b:08:87:6b:4b:
         5a:4b:aa:b9:93:6b:cf:0d:b7:9e:cf:ae:a5:8f:ff:7b:79:c9:
         a0:c2:19:ca:28:22:03:38:f9:3b:3b:5f:e2:93:f0:1e:c5:55:
         b1:3d:64:c4:e7:9e:05:82:43:e8:db:fe:11:f7:79:54:0b:ba:
         03:8c:6e:e9:3a:1d:44:13:87:d0:f0:8a:af:e8:61:b2:05:e6:
         f3:1b:34:3b:c9:43:06:85:38:39:d2:a5:e7:e4:98:53:c2:d7:
         ee:10:36:50:31:6c:74:a1:0e:29:c3:d4:73:d2:c3:f0:c0:47:
         37:63:69:99:84:ed:5b:6d:e0:ef:ee:3c:0f:5d:40:b9:99:a1:
         a2:a7:26:0d:0c:02:3a:20:36:1c:1d:e1:00:02:4d:05:da:e9:
         00:d9:f9:65:f8:66:03:e3:25:2f:a8:e0:d6:2c:d7:cb:67:36:
         bd:9d:ca:7b:99:2c:9d:25:d4:0f:9c:1e:1b:3f:db:45:4e:f1:
         b3:77:53:5c
-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgIUHDzolUKm+GhIDHtuGUhVTgd6bKkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDA4MDAxMjQzWhcNMjUxMTEyMjM1OTU5
WjB6MUkwRwYDVQQFE0A2ZTI3ODQzOGI0ZDY3ZWZmOTU3MjhiYTk5MGYwMWI0NDdh
YWIxOTkxYTNiZDA5OTdmMGZlMTdhYTFjZDcwYTQwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCcELfv+U3SxKzBLeH7/QcTIYp4lmub4FDsN+OQXsqUPo0h
4to5l6yiypXQqKl7RPceQRfDcOC9rGBijI3bCeJ72rV9jt/IKZUX1D4FV6/tK77M
+N9OgtR7XvpXCJG/I+7X3LRmp6hP8PH2xpgbAyRFv3N7GtQA4bbLAPhzj57nJIlO
QKsGmvXAFDmghuewTyvPAQDmW8BRpDmNgp1MECQGbgNabeIX3ZZF7l448vpdIHan
nLAHvp8HqgzARisyZYOmwjfh0KdOT47E5QPalmcXGnfnpSt/q0HMMmf2UohXdwlP
wS9aKcDTPFgFk/u+bXNME7NUwICMLp/hBX0emuoxAgMBAAGjggKyMIICrjAdBgNV
HQ4EFgQUrPLbpB32EVGlLpk0q8zv8X9hFhYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzY0YzRjYWM1LWJkNmMtNGNhNS04NGNiLWYyMzVhNDYyMDFjZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC
MAcDBQAmAB+4MA0GCSqGSIb3DQEBCwUAA4IBAQB8qWxEajaJYU30nK/5tu9oST66
0txyZymJpO09vXWJFzzTjnzaztDMgKxJW5feOe1O46rj2P3oYw02JNHeuWQ5IP2z
iwiHa0taS6q5k2vPDbeez66lj/97ecmgwhnKKCIDOPk7O1/ik/AexVWxPWTE554F
gkPo2/4R93lUC7oDjG7pOh1EE4fQ8Iqv6GGyBebzGzQ7yUMGhTg50qXn5JhTwtfu
EDZQMWx0oQ4pw9Rz0sPwwEc3Y2mZhO1bbeDv7jwPXUC5maGipyYNDAI6IDYcHeEA
Ak0F2ukA2fll+GYD4yUvqODWLNfLZza9ncp7mSydJdQPnB4bP9tFTvGzd1Nc
-----END CERTIFICATE-----