Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70910449-79e8-4e64-b195-4ef11d5694c4.roa
File:                     70910449-79e8-4e64-b195-4ef11d5694c4.roa (raw, json)
Hash identifier:          fkdgPFIWKre550fnox/wxXAW5chaeb3BtXwE/XnL16s=
Subject key identifier:   0C:C3:AD:EB:A0:6D:7C:4E:26:EC:52:64:4F:DE:7C:A0:CE:D4:B8:6D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       29625E7CA19E70333B8E8AAD449C0542CF085971
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70910449-79e8-4e64-b195-4ef11d5694c4.roa
Signing time:             Sat 18 Oct 2025 03:51:42 +0000
ROA not before:           Sat 18 Oct 2025 03:51:42 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:60c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:62:5e:7c:a1:9e:70:33:3b:8e:8a:ad:44:9c:05:42:cf:08:59:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 03:51:42 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=74aa4eaa60601b070459402e89897d6eb60b100a30eda49ca80c469abd7af78f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b2:9c:ed:1a:00:6d:b5:d6:64:b4:02:63:58:
                    0a:06:c5:75:74:0a:88:79:f0:03:63:58:ae:20:44:
                    7c:2c:ae:8c:8d:22:dc:57:2c:80:a9:10:6d:87:14:
                    ea:1e:f6:f8:4b:6d:70:ad:c5:f1:71:d5:ae:ee:5a:
                    b7:8f:95:9d:0e:b8:ad:bb:f1:b8:45:07:37:6a:23:
                    d4:e8:77:ac:18:50:ed:78:50:30:54:1c:a3:81:bb:
                    6d:d1:b6:d1:7c:2a:79:00:13:4b:d2:da:38:e7:97:
                    1a:4b:91:2f:30:22:e5:87:d8:23:6e:59:a4:cd:4e:
                    f0:c4:1c:ff:41:d9:30:e0:f4:31:16:31:c2:67:f5:
                    a3:ec:bc:72:87:74:83:5a:cd:dc:fe:8d:45:de:c9:
                    40:48:a6:3d:c1:1d:d7:0d:9c:72:1d:34:3e:56:7d:
                    b3:5a:3e:74:29:ec:a6:c3:b7:31:c5:b3:08:cd:92:
                    1e:6b:e1:e1:ab:c1:d7:b8:e1:4a:74:40:a4:e3:c8:
                    80:b0:bb:aa:c8:70:2b:9c:46:79:50:09:db:dd:aa:
                    49:8f:ab:e9:23:e6:e4:7f:2e:aa:ec:ba:13:1b:f4:
                    8f:1a:fe:74:7e:36:7e:c0:6b:96:c9:81:38:e0:8b:
                    bf:31:78:0c:1a:43:a3:32:0a:c1:d5:3f:33:5e:cd:
                    e0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C3:AD:EB:A0:6D:7C:4E:26:EC:52:64:4F:DE:7C:A0:CE:D4:B8:6D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70910449-79e8-4e64-b195-4ef11d5694c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:60c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         ca:1a:a9:37:91:49:2c:79:cb:98:d1:75:3b:88:e0:ae:83:db:
         da:c0:ff:62:7c:b5:49:f9:53:ef:3f:2e:34:03:ce:2b:ef:43:
         71:bf:af:e0:82:a6:fe:b5:a1:43:21:a0:57:71:87:ba:cc:04:
         a0:54:99:14:63:eb:58:7d:61:f8:98:f8:44:de:f0:46:cd:f4:
         62:bf:a3:34:1f:01:8e:4f:30:66:63:08:34:fc:a7:0d:3b:b3:
         4b:89:e0:37:fb:cb:e3:ed:02:20:ce:51:84:2e:9b:fd:d5:1f:
         7d:55:1a:27:b8:43:58:1f:d0:83:bc:93:b6:2a:ec:45:29:37:
         46:d9:d5:38:a9:54:0b:20:3d:6d:1a:7d:ed:fc:2f:32:9a:81:
         7d:9c:06:b4:46:1c:b1:23:21:4d:7e:84:83:fe:1f:5f:e9:ca:
         81:fd:f0:86:77:b7:d2:2c:8f:44:83:f2:a6:03:bd:99:74:86:
         b3:e2:44:67:27:32:b2:11:3d:74:b8:c4:13:57:27:32:d9:12:
         31:11:64:9d:b4:07:db:7a:a0:b3:2f:83:ca:c3:47:be:56:b6:
         74:6f:31:da:b5:27:45:a0:e4:1f:42:f1:86:7e:1d:03:8f:53:
         98:76:80:38:1d:5b:aa:50:9b:3a:c0:24:70:01:a2:22:2a:0a:
         ec:c9:a1:6d
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUKWJefKGecDM7joqtRJwFQs8IWXEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDM1MTQyWhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A3NGFhNGVhYTYwNjAxYjA3MDQ1OTQwMmU4OTg5N2Q2ZWI2
MGIxMDBhMzBlZGE0OWNhODBjNDY5YWJkN2FmNzhmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC3spztGgBttdZktAJjWAoGxXV0Coh58ANjWK4gRHwsroyN
ItxXLICpEG2HFOoe9vhLbXCtxfFx1a7uWrePlZ0OuK278bhFBzdqI9Tod6wYUO14
UDBUHKOBu23RttF8KnkAE0vS2jjnlxpLkS8wIuWH2CNuWaTNTvDEHP9B2TDg9DEW
McJn9aPsvHKHdINazdz+jUXeyUBIpj3BHdcNnHIdND5WfbNaPnQp7KbDtzHFswjN
kh5r4eGrwde44Up0QKTjyICwu6rIcCucRnlQCdvdqkmPq+kj5uR/LqrsuhMb9I8a
/nR+Nn7Aa5bJgTjgi78xeAwaQ6MyCsHVPzNezeD9AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUDMOt66BtfE4m7FJkT958oM7UuG0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzcwOTEwNDQ5LTc5ZTgtNGU2NC1iMTk1LTRlZjExZDU2OTRjNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB//YMAwDQYJKoZIhvcNAQELBQADggEBAMoaqTeRSSx5y5jRdTuI4K6D
29rA/2J8tUn5U+8/LjQDzivvQ3G/r+CCpv61oUMhoFdxh7rMBKBUmRRj61h9YfiY
+ETe8EbN9GK/ozQfAY5PMGZjCDT8pw07s0uJ4Df7y+PtAiDOUYQum/3VH31VGie4
Q1gf0IO8k7Yq7EUpN0bZ1TipVAsgPW0afe38LzKagX2cBrRGHLEjIU1+hIP+H1/p
yoH98IZ3t9Isj0SD8qYDvZl0hrPiRGcnMrIRPXS4xBNXJzLZEjERZJ20B9t6oLMv
g8rDR75WtnRvMdq1J0Wg5B9C8YZ+HQOPU5h2gDgdW6pQmzrAJHABoiIqCuzJoW0=
-----END CERTIFICATE-----