Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91bf7848-3999-4493-bb9a-0d9915c1accb.roa
File:                     91bf7848-3999-4493-bb9a-0d9915c1accb.roa (raw, json)
Hash identifier:          FD3fWrJ0SuTg9ghZcs+GTwmjkQ9e0ujOLG2ZszpJs2w=
Subject key identifier:   B8:9C:18:76:D4:F1:5B:67:5C:55:3C:BD:31:44:CE:CD:75:1F:80:A7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4E4C1426E13C0D11221D6423C0F8D5404E682ACE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91bf7848-3999-4493-bb9a-0d9915c1accb.roa
Signing time:             Fri 03 Oct 2025 00:11:14 +0000
ROA not before:           Fri 03 Oct 2025 00:11:14 +0000
ROA not after:            Fri 07 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffd:80e1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:4c:14:26:e1:3c:0d:11:22:1d:64:23:c0:f8:d5:40:4e:68:2a:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  3 00:11:14 2025 GMT
            Not After : Nov  7 23:59:59 2025 GMT
        Subject: serialNumber=d07aed2660d9fa4f21d2bcade4a71adc0bdb7297c22ee606f1c5950b6e67a6af, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:69:b4:8b:e5:7a:be:36:a7:eb:ae:b0:dd:e4:
                    e7:08:41:1c:ab:93:48:ac:61:c5:07:2d:e6:d7:9d:
                    e6:50:a0:d5:3d:5b:ce:fd:c0:e7:da:d0:42:b8:67:
                    9b:f2:18:7a:e6:69:25:0c:94:df:82:8b:1f:72:aa:
                    a4:4d:23:20:1c:a5:e0:76:18:f6:2b:67:76:7e:74:
                    61:d9:68:b9:c8:65:9e:fa:06:91:6c:26:62:9a:2c:
                    e2:6d:3c:a3:6e:8b:de:f8:8b:b7:7b:6a:12:e5:c6:
                    9a:97:7e:df:1a:e3:a4:58:9d:5c:a0:c1:f7:01:5f:
                    74:d9:a5:e7:1f:be:d7:28:48:da:22:fe:86:76:e0:
                    dc:74:3d:76:5b:4b:ac:62:cd:2a:71:1b:ef:3d:37:
                    a2:4c:e0:9b:fc:8c:df:20:61:14:da:f4:4b:42:63:
                    37:37:22:fa:70:77:55:e2:fd:e9:4c:62:66:58:e2:
                    d1:be:11:8e:ad:65:06:c9:fd:27:25:21:19:6d:aa:
                    9d:3a:c3:7c:54:f1:87:c1:12:39:36:bf:34:cd:3d:
                    1a:82:d9:c7:f4:92:15:96:5a:46:52:a0:b3:93:af:
                    f0:38:d2:70:73:d2:31:2b:f9:e7:c4:c4:fc:c9:97:
                    3b:6a:6f:ab:4b:4f:25:13:d4:87:de:25:d3:61:26:
                    18:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9C:18:76:D4:F1:5B:67:5C:55:3C:BD:31:44:CE:CD:75:1F:80:A7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91bf7848-3999-4493-bb9a-0d9915c1accb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffd:80e1::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:af:5e:18:70:06:55:d4:1b:c3:33:66:ba:e0:3c:21:57:eb:
         5f:2e:a6:6f:02:f5:30:ad:34:15:56:da:08:9e:33:8c:33:1c:
         66:a3:28:97:b9:f4:01:e1:5d:9c:55:5b:2e:bd:04:80:f7:82:
         35:67:bb:51:b6:49:9a:1a:a3:34:a4:73:99:5b:02:28:87:9a:
         64:d8:c7:39:7a:0a:06:d1:23:4d:da:0d:66:8a:9d:72:82:b8:
         a4:5d:22:d5:04:a2:2e:82:2d:79:db:1a:d4:22:86:ce:74:05:
         59:a1:92:62:80:f3:27:f9:33:80:03:cd:2e:1d:83:ce:24:72:
         58:31:91:4b:66:84:4e:77:75:a0:d4:28:ce:31:77:8d:31:75:
         de:84:82:20:00:23:33:03:f3:46:fd:b7:fa:7c:2d:c7:b5:c5:
         58:a0:c0:14:66:32:a8:5b:12:81:2b:75:01:b9:d8:aa:7d:3c:
         93:84:73:14:24:55:00:97:04:e5:68:54:20:1b:b3:c7:da:db:
         86:2f:80:fa:4f:86:7e:64:93:e5:70:9d:28:b0:9b:87:ae:58:
         65:f5:d0:01:41:0e:49:cb:b3:c8:4d:8b:47:dc:6c:80:57:6c:
         3a:89:3e:c1:3b:bd:13:ff:59:41:e0:e0:e3:f9:55:47:54:3a:
         06:53:72:1f
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUTkwUJuE8DREiHWQjwPjVQE5oKs4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDAzMDAxMTE0WhcNMjUxMTA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BkMDdhZWQyNjYwZDlmYTRmMjFkMmJjYWRlNGE3MWFkYzBi
ZGI3Mjk3YzIyZWU2MDZmMWM1OTUwYjZlNjdhNmFmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDCabSL5Xq+NqfrrrDd5OcIQRyrk0isYcUHLebXneZQoNU9
W879wOfa0EK4Z5vyGHrmaSUMlN+Cix9yqqRNIyAcpeB2GPYrZ3Z+dGHZaLnIZZ76
BpFsJmKaLOJtPKNui974i7d7ahLlxpqXft8a46RYnVygwfcBX3TZpecfvtcoSNoi
/oZ24Nx0PXZbS6xizSpxG+89N6JM4Jv8jN8gYRTa9EtCYzc3Ivpwd1Xi/elMYmZY
4tG+EY6tZQbJ/SclIRltqp06w3xU8YfBEjk2vzTNPRqC2cf0khWWWkZSoLOTr/A4
0nBz0jEr+efExPzJlztqb6tLTyUT1IfeJdNhJhhHAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUuJwYdtTxW2dcVTy9MUTOzXUfgKcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzkxYmY3ODQ4LTM5OTktNDQ5My1iYjlhLTBkOTkxNWMxYWNjYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/9gOEwDQYJKoZIhvcNAQELBQADggEBAAavXhhwBlXUG8MzZrrgPCFX
618upm8C9TCtNBVW2gieM4wzHGajKJe59AHhXZxVWy69BID3gjVnu1G2SZoaozSk
c5lbAiiHmmTYxzl6CgbRI03aDWaKnXKCuKRdItUEoi6CLXnbGtQihs50BVmhkmKA
8yf5M4ADzS4dg84kclgxkUtmhE53daDUKM4xd40xdd6EgiAAIzMD80b9t/p8Lce1
xVigwBRmMqhbEoErdQG52Kp9PJOEcxQkVQCXBOVoVCAbs8fa24YvgPpPhn5kk+Vw
nSiwm4euWGX10AFBDknLs8hNi0fcbIBXbDqJPsE7vRP/WUHg4OP5VUdUOgZTch8=
-----END CERTIFICATE-----