Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80d26464-05c9-4f2b-ba80-8facd3bbef1f.roa
File:                     80d26464-05c9-4f2b-ba80-8facd3bbef1f.roa (raw, json)
Hash identifier:          f5qc9EKWlUtgJmui1lSZZ1IRgK4JOWBBQhTxIozxWYE=
Subject key identifier:   F4:D3:1F:DB:93:F6:94:39:93:0B:FA:7A:25:D6:CD:1C:51:0F:0B:82
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4007CA793F5C7DE0C8E6326E1C2C0F09659040CE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80d26464-05c9-4f2b-ba80-8facd3bbef1f.roa
Signing time:             Sat 18 Oct 2025 02:20:07 +0000
ROA not before:           Sat 18 Oct 2025 02:20:07 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f38:1000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:07:ca:79:3f:5c:7d:e0:c8:e6:32:6e:1c:2c:0f:09:65:90:40:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 02:20:07 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=937e1333b52f40a2d21c117470659c0d1369ad091c768c6b9f1f04b2bd0e8a7d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:94:6d:f4:c4:d8:6b:c7:8d:6d:93:60:42:ee:
                    d8:40:c2:b4:78:28:ca:68:ad:78:95:c3:3f:9b:3a:
                    b8:29:e5:2c:44:51:cb:ed:f7:35:c5:0b:3f:35:5a:
                    b7:e0:14:f6:5a:c2:ea:c7:7b:8e:3c:35:61:dc:c6:
                    07:79:c0:f0:17:cf:99:28:9d:f9:3d:f2:c9:ac:fe:
                    a7:6a:99:61:0d:09:14:ea:7b:0e:16:3c:f4:b9:ee:
                    be:b6:79:0c:e9:c8:19:f7:e6:07:f3:15:32:92:a8:
                    e0:e3:20:39:c4:9a:06:9f:b1:df:89:a9:68:8f:c8:
                    c7:8b:39:a3:34:ec:61:77:9d:f0:8c:cf:a1:21:27:
                    9a:9d:39:19:24:cf:e4:ae:30:04:17:e6:ce:ee:a4:
                    1e:7d:bd:2e:47:8f:77:75:2f:9d:cf:1d:4b:25:84:
                    3c:7b:eb:5c:b2:14:ce:16:15:1c:90:46:e5:5f:1f:
                    8a:b3:47:26:a6:2c:66:36:61:54:49:46:3c:c7:91:
                    e9:13:f8:21:41:0c:f8:13:1f:a7:56:04:4c:c9:6b:
                    4a:33:30:1d:b0:2f:f0:45:2a:c3:d7:e3:6c:22:99:
                    ea:45:77:66:0a:95:cc:f4:93:b4:6f:2f:d5:6f:93:
                    7e:44:be:1f:63:51:e2:48:38:70:48:b3:00:c3:7b:
                    7c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D3:1F:DB:93:F6:94:39:93:0B:FA:7A:25:D6:CD:1C:51:0F:0B:82
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80d26464-05c9-4f2b-ba80-8facd3bbef1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f38:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         5b:8f:7d:b0:fd:0c:b9:6e:f6:05:c0:bc:93:e0:44:b6:a2:2f:
         2c:a1:49:c5:e4:a3:a5:e2:90:75:f5:0c:ea:fc:12:14:12:aa:
         3c:4b:ce:ef:34:df:20:b2:1b:fc:54:a1:53:b1:68:fc:5f:f1:
         a8:c9:b4:91:ca:33:2b:0d:8c:d9:a8:22:46:16:89:72:43:3a:
         dd:b9:e2:c2:8d:8f:54:23:99:fd:81:c9:7b:b6:97:7b:16:3a:
         13:df:75:42:2a:2c:4f:10:33:2c:92:69:46:28:df:0f:46:bc:
         61:f3:17:c6:95:8d:d7:34:b7:64:bd:6e:e3:c9:71:3d:39:68:
         0b:b8:cf:3b:ba:40:29:ab:68:c8:18:4f:3e:37:00:4e:18:5e:
         39:47:d6:55:33:2a:dc:68:51:f2:4a:c4:3a:e1:ce:5f:2a:ca:
         08:8c:97:3b:11:4f:cd:0e:bc:7d:1d:9d:98:9d:7e:cb:4a:54:
         fc:ac:0f:97:3c:fd:24:83:a3:e1:69:91:11:f5:2d:56:4d:7c:
         60:e6:4a:59:83:8c:1a:15:5a:9d:c1:48:50:f7:fb:07:28:0f:
         0e:2b:9d:55:75:bc:17:50:8b:9a:3f:0e:c9:5d:18:b3:6c:4b:
         c9:cc:4d:20:4f:79:76:14:cc:51:fa:d8:63:87:c3:ac:f5:3a:
         41:3f:e7:c4
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUQAfKeT9cfeDI5jJuHCwPCWWQQM4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDIyMDA3WhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A5MzdlMTMzM2I1MmY0MGEyZDIxYzExNzQ3MDY1OWMwZDEz
NjlhZDA5MWM3NjhjNmI5ZjFmMDRiMmJkMGU4YTdkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCdlG30xNhrx41tk2BC7thAwrR4KMporXiVwz+bOrgp5SxE
Ucvt9zXFCz81WrfgFPZawurHe448NWHcxgd5wPAXz5konfk98sms/qdqmWENCRTq
ew4WPPS57r62eQzpyBn35gfzFTKSqODjIDnEmgafsd+JqWiPyMeLOaM07GF3nfCM
z6EhJ5qdORkkz+SuMAQX5s7upB59vS5Hj3d1L53PHUslhDx761yyFM4WFRyQRuVf
H4qzRyamLGY2YVRJRjzHkekT+CFBDPgTH6dWBEzJa0ozMB2wL/BFKsPX42wimepF
d2YKlcz0k7RvL9Vvk35Evh9jUeJIOHBIswDDe3xnAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQU9NMf25P2lDmTC/p6JdbNHFEPC4IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzgwZDI2NDY0LTA1YzktNGYyYi1iYTgwLThmYWNkM2JiZWYxZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB84EDANBgkqhkiG9w0BAQsFAAOCAQEAW499sP0MuW72BcC8k+BEtqIv
LKFJxeSjpeKQdfUM6vwSFBKqPEvO7zTfILIb/FShU7Fo/F/xqMm0kcozKw2M2agi
RhaJckM63bniwo2PVCOZ/YHJe7aXexY6E991QiosTxAzLJJpRijfD0a8YfMXxpWN
1zS3ZL1u48lxPTloC7jPO7pAKatoyBhPPjcAThheOUfWVTMq3GhR8krEOuHOXyrK
CIyXOxFPzQ68fR2dmJ1+y0pU/KwPlzz9JIOj4WmREfUtVk18YOZKWYOMGhVancFI
UPf7BygPDiudVXW8F1CLmj8OyV0Ys2xLycxNIE95dhTMUfrYY4fDrPU6QT/nxA==
-----END CERTIFICATE-----