Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/890e8f94-59ce-46fd-8868-0f944004ff36.roa
File:                     890e8f94-59ce-46fd-8868-0f944004ff36.roa (raw, json)
Hash identifier:          dTvGf+TMa4BR8lPo2VwemxpGwEiDmIS2WHdZLkH4g/M=
Subject key identifier:   D1:0B:5F:02:33:3B:42:F6:D4:6F:64:E1:25:1B:36:EB:BC:5C:21:CA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4A11A951927A21F57AF2765CB815508A52CF4F18
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/890e8f94-59ce-46fd-8868-0f944004ff36.roa
Signing time:             Fri 17 Oct 2025 20:30:28 +0000
ROA not before:           Fri 17 Oct 2025 20:30:28 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:8190::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:11:a9:51:92:7a:21:f5:7a:f2:76:5c:b8:15:50:8a:52:cf:4f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 20:30:28 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=a31a50e6a42271b9476098fd7869d7606da877e2807b0a959e1b4c3a02bb6395, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f0:e3:9d:a2:9b:bf:7b:c4:5f:a4:c8:d5:9e:
                    43:f2:22:b9:b5:1b:ce:73:73:13:4c:ad:72:af:41:
                    34:ac:1a:ed:e9:35:ee:88:ae:1e:7a:25:8c:2c:19:
                    14:ac:1c:88:e5:1a:3a:dd:62:01:5b:96:5c:8f:5e:
                    90:9d:3e:ab:ee:2d:22:74:18:67:f0:bb:ff:e7:c7:
                    f6:12:89:de:b8:d0:af:72:97:1b:12:ff:7a:df:37:
                    f0:a4:ea:92:8c:2d:ac:8f:b0:bb:22:af:b3:84:82:
                    95:7f:95:7c:aa:f9:a9:91:c9:11:97:55:13:c2:11:
                    dc:50:86:1e:85:29:0a:1b:cb:8a:69:39:99:c9:1b:
                    42:53:62:93:9e:72:f4:bd:4c:f6:78:d3:16:16:79:
                    5d:0c:1a:8a:47:a9:f7:a6:9b:bb:d8:36:74:57:2d:
                    2c:28:33:d0:89:38:89:8d:e7:c6:8d:fa:2b:d0:e0:
                    bf:88:37:49:2c:99:b0:8c:6d:b7:2c:12:9e:e3:aa:
                    e6:94:0d:03:a0:bb:e0:ee:8c:17:63:ca:b3:45:87:
                    ea:d5:70:46:c8:bc:1f:52:02:17:fa:e9:b3:4e:21:
                    45:1a:7e:54:18:25:41:02:90:b8:7d:35:fa:c2:80:
                    fd:7c:9f:51:92:e3:24:23:71:0d:da:39:22:ed:9b:
                    10:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:0B:5F:02:33:3B:42:F6:D4:6F:64:E1:25:1B:36:EB:BC:5C:21:CA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/890e8f94-59ce-46fd-8868-0f944004ff36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:8190::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:89:7e:01:ea:41:39:cb:d2:1d:5d:c6:b1:42:67:bf:e5:9d:
         a6:1e:2d:c0:5b:1a:6c:e6:01:9c:67:9e:db:f5:f6:40:8c:b7:
         12:89:40:d7:47:df:2d:cb:fe:a7:64:7b:19:16:ca:f3:3b:d5:
         43:8b:d0:01:11:71:ea:66:66:cb:31:d3:61:1e:4e:ca:a7:c6:
         b3:dc:d5:91:9e:f9:a5:e8:3b:23:1f:09:cf:61:f0:44:fc:ed:
         40:02:32:de:59:d0:59:17:54:8a:72:c3:d9:7a:b5:9b:06:31:
         3c:9f:fb:13:10:30:ed:37:08:3e:5b:19:6f:0b:c9:5b:75:87:
         bd:3d:e4:14:0f:39:e2:3a:e4:95:55:d5:da:d6:df:44:58:4d:
         ac:b2:e9:c0:75:92:69:55:07:55:95:f6:b6:1a:5e:f8:69:5f:
         51:e8:a3:48:31:eb:77:0c:b3:3c:0e:a1:58:08:09:68:0a:9a:
         a1:f0:af:f9:52:64:89:27:5c:25:3f:ff:18:14:7e:d3:1a:27:
         ae:44:5f:cf:77:23:1f:35:9a:09:1e:f2:a8:8b:da:35:45:73:
         0b:7c:ee:9c:0f:af:62:64:03:fb:0e:0e:33:d0:97:51:6b:cd:
         46:76:3e:94:a1:14:e2:03:1c:5b:6a:d1:99:3e:65:ab:2e:51:
         c7:72:73:f6
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUShGpUZJ6IfV68nZcuBVQilLPTxgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE3MjAzMDI4WhcNMjUxMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BhMzFhNTBlNmE0MjI3MWI5NDc2MDk4ZmQ3ODY5ZDc2MDZk
YTg3N2UyODA3YjBhOTU5ZTFiNGMzYTAyYmI2Mzk1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC38OOdopu/e8RfpMjVnkPyIrm1G85zcxNMrXKvQTSsGu3p
Ne6Irh56JYwsGRSsHIjlGjrdYgFbllyPXpCdPqvuLSJ0GGfwu//nx/YSid640K9y
lxsS/3rfN/Ck6pKMLayPsLsir7OEgpV/lXyq+amRyRGXVRPCEdxQhh6FKQoby4pp
OZnJG0JTYpOecvS9TPZ40xYWeV0MGopHqfemm7vYNnRXLSwoM9CJOImN58aN+ivQ
4L+IN0ksmbCMbbcsEp7jquaUDQOgu+DujBdjyrNFh+rVcEbIvB9SAhf66bNOIUUa
flQYJUECkLh9NfrCgP18n1GS4yQjcQ3aOSLtmxDxAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU0QtfAjM7QvbUb2ThJRs267xcIcowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzg5MGU4Zjk0LTU5Y2UtNDZmZC04ODY4LTBmOTQ0MDA0ZmYzNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB8AgZAwDQYJKoZIhvcNAQELBQADggEBAJGJfgHqQTnL0h1dxrFCZ7/l
naYeLcBbGmzmAZxnntv19kCMtxKJQNdH3y3L/qdkexkWyvM71UOL0AERcepmZssx
02EeTsqnxrPc1ZGe+aXoOyMfCc9h8ET87UACMt5Z0FkXVIpyw9l6tZsGMTyf+xMQ
MO03CD5bGW8LyVt1h7095BQPOeI65JVV1drW30RYTayy6cB1kmlVB1WV9rYaXvhp
X1Hoo0gx63cMszwOoVgICWgKmqHwr/lSZIknXCU//xgUftMaJ65EX893Ix81mgke
8qiL2jVFcwt87pwPr2JkA/sODjPQl1FrzUZ2PpShFOIDHFtq0Zk+ZasuUcdyc/Y=
-----END CERTIFICATE-----