Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b05131b8-4833-44c2-8643-e3eecf382e9e.roa
File:                     b05131b8-4833-44c2-8643-e3eecf382e9e.roa (raw, json)
Hash identifier:          MBY9xfm16l8KbnXjPLosyFxkET+NjVM1dyjcOAuYFw4=
Subject key identifier:   B7:18:73:D4:62:E1:79:ED:A4:C2:E6:AA:99:87:A8:C2:0E:56:C0:7C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       61EA7EE26C7B9EE942449AA5A60EE8101BA1FA7B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b05131b8-4833-44c2-8643-e3eecf382e9e.roa
Signing time:             Fri 17 Oct 2025 20:11:11 +0000
ROA not before:           Fri 17 Oct 2025 20:11:11 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:1080::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ea:7e:e2:6c:7b:9e:e9:42:44:9a:a5:a6:0e:e8:10:1b:a1:fa:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 20:11:11 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=8c6281bb82b87d4021fa182322e777295c82aec9c8cb8c13e753b17262a5ae1a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fc:54:ae:6d:78:5c:d9:ff:08:fe:74:af:82:
                    e9:a1:92:38:90:ac:85:75:7d:d8:a6:d1:e7:a8:a1:
                    a9:0e:37:df:c6:f3:38:bd:93:65:83:3d:de:fa:4e:
                    c2:0d:61:21:d1:bf:e4:1a:00:53:ad:8d:ec:43:57:
                    77:a1:cc:22:b8:27:0b:08:d8:36:19:2d:04:c9:85:
                    e2:15:8e:4c:64:66:eb:27:cb:c3:da:35:94:a6:e1:
                    bb:9b:e5:47:7f:91:38:b4:fc:d3:06:cd:5a:20:1a:
                    da:72:99:e8:36:c5:70:b0:ea:e8:d1:a5:21:ff:7e:
                    70:d8:74:a3:13:d3:9f:48:33:e6:8f:51:dc:02:bd:
                    5b:b2:2d:66:2d:2e:01:d6:28:0b:85:40:62:f2:ea:
                    4d:5e:52:23:1f:cc:cd:c3:c8:fe:9f:6b:81:58:3f:
                    cc:0c:58:a1:6f:c8:35:c4:16:40:f3:4a:0e:91:63:
                    31:21:4f:91:fe:e4:ce:fa:e5:e2:87:22:d5:dd:cb:
                    03:88:07:34:3b:20:0a:1f:66:cc:1b:cf:b4:10:c3:
                    80:1a:1b:1b:f3:62:6c:b2:ba:0d:4e:93:75:e3:4f:
                    c1:c4:f8:fd:46:bb:68:f5:73:31:1d:70:61:63:79:
                    37:b9:33:35:cb:11:ca:1b:55:06:63:b1:bb:53:03:
                    bf:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:18:73:D4:62:E1:79:ED:A4:C2:E6:AA:99:87:A8:C2:0E:56:C0:7C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b05131b8-4833-44c2-8643-e3eecf382e9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:1080::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:6e:1a:10:43:8e:f7:01:9a:2e:de:af:e0:73:8a:7f:bb:85:
         91:ef:33:e4:a2:52:7c:f6:a4:c3:c8:12:f5:3f:c8:cc:1d:5d:
         a0:7c:95:2e:df:5b:93:0d:4e:c8:7a:52:ae:0c:08:be:f1:0f:
         c2:2f:3a:02:cc:0e:71:93:3a:1a:05:45:4c:7c:19:0b:39:76:
         4f:d3:80:5a:b6:fb:6f:62:27:fc:5e:61:08:0d:e7:72:c6:c1:
         c8:5d:f7:6e:92:e1:0c:75:6b:71:15:45:62:91:f0:8b:20:0e:
         e0:2c:75:f7:92:07:04:b0:84:9e:20:36:4f:c7:6b:9c:72:5e:
         4c:ad:ca:55:17:4b:e1:3a:b1:b3:fa:ed:1f:a6:80:0d:f7:88:
         78:d8:95:25:80:13:eb:5b:e1:c9:0f:fe:31:2f:83:30:28:29:
         cc:7a:18:e1:3b:17:7f:05:4a:00:5e:d4:39:08:1c:e4:b2:3d:
         fe:9a:03:36:0f:0b:10:38:7b:2c:8f:cc:34:a1:6f:d9:08:a6:
         d9:45:b6:d4:f6:a9:82:26:cf:ae:d7:95:2b:3c:50:4f:a6:6e:
         20:1e:5d:8f:82:39:52:19:f4:f9:d0:c5:02:83:e9:da:c7:44:
         57:1d:d5:3a:ef:65:29:70:04:e9:73:79:c6:7c:8a:a8:18:d2:
         5c:28:b3:5e
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUYep+4mx7nulCRJqlpg7oEBuh+nswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE3MjAxMTExWhcNMjUxMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A4YzYyODFiYjgyYjg3ZDQwMjFmYTE4MjMyMmU3NzcyOTVj
ODJhZWM5YzhjYjhjMTNlNzUzYjE3MjYyYTVhZTFhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCS/FSubXhc2f8I/nSvgumhkjiQrIV1fdim0eeooakON9/G
8zi9k2WDPd76TsINYSHRv+QaAFOtjexDV3ehzCK4JwsI2DYZLQTJheIVjkxkZusn
y8PaNZSm4bub5Ud/kTi0/NMGzVogGtpymeg2xXCw6ujRpSH/fnDYdKMT059IM+aP
UdwCvVuyLWYtLgHWKAuFQGLy6k1eUiMfzM3DyP6fa4FYP8wMWKFvyDXEFkDzSg6R
YzEhT5H+5M765eKHItXdywOIBzQ7IAofZswbz7QQw4AaGxvzYmyyug1Ok3XjT8HE
+P1Gu2j1czEdcGFjeTe5MzXLEcobVQZjsbtTA7/3AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUtxhz1GLhee2kwuaqmYeowg5WwHwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2IwNTEzMWI4LTQ4MzMtNDRjMi04NjQzLWUzZWVjZjM4MmU5ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB8AEIAwDQYJKoZIhvcNAQELBQADggEBAFRuGhBDjvcBmi7er+Bzin+7
hZHvM+SiUnz2pMPIEvU/yMwdXaB8lS7fW5MNTsh6Uq4MCL7xD8IvOgLMDnGTOhoF
RUx8GQs5dk/TgFq2+29iJ/xeYQgN53LGwchd926S4Qx1a3EVRWKR8IsgDuAsdfeS
BwSwhJ4gNk/Ha5xyXkytylUXS+E6sbP67R+mgA33iHjYlSWAE+tb4ckP/jEvgzAo
Kcx6GOE7F38FSgBe1DkIHOSyPf6aAzYPCxA4eyyPzDShb9kIptlFttT2qYImz67X
lSs8UE+mbiAeXY+COVIZ9PnQxQKD6drHRFcd1TrvZSlwBOlzecZ8iqgY0lwos14=
-----END CERTIFICATE-----