Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6a0fa43-e52e-4248-9b98-297755d44b13.roa
File:                     b6a0fa43-e52e-4248-9b98-297755d44b13.roa (raw, json)
Hash identifier:          wg9c0ahbhfoXf2tw5VrfxZH29KOlwOxC2jWmfJQKIL8=
Subject key identifier:   F6:9A:AD:BA:CF:80:40:FF:98:2D:D9:96:D4:F4:42:80:E0:23:DF:A7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       20EA7CF43AA5FCAB5593D526C12B3C3B9B627E04
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6a0fa43-e52e-4248-9b98-297755d44b13.roa
Signing time:             Fri 17 Oct 2025 21:20:16 +0000
ROA not before:           Fri 17 Oct 2025 21:20:16 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ff2:80c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ea:7c:f4:3a:a5:fc:ab:55:93:d5:26:c1:2b:3c:3b:9b:62:7e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 21:20:16 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=ba67f6c24a8aaf3d8830c5aadb5292629cc14fb1ce8d1f6ffd31409880be4517, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7e:23:94:cb:bf:fc:0f:02:85:64:2f:a4:e7:
                    71:f8:54:de:0e:54:d5:b1:0b:70:7e:8f:5c:bf:e5:
                    6a:2e:55:2e:ce:d1:40:25:aa:7a:c5:6d:8c:13:5a:
                    c3:9f:d8:85:ed:60:66:c8:13:36:16:c7:27:c8:8b:
                    fb:bf:65:2d:31:42:d6:58:dc:2e:14:f8:e1:17:04:
                    04:4e:e3:a3:b2:a0:26:88:23:42:0a:67:54:a2:82:
                    98:ca:c6:39:69:a2:e8:98:1a:d5:8a:fc:0c:fd:31:
                    52:db:b0:7e:34:bc:22:26:6f:9a:e1:8b:a5:30:31:
                    b2:d3:34:82:60:f4:0c:f5:18:bd:ec:51:75:43:37:
                    6d:1e:7e:f0:49:9a:42:e0:f4:b9:69:05:6e:dc:88:
                    a0:78:76:72:5c:4b:b3:6b:b5:e5:90:ec:d3:7f:f6:
                    55:2a:22:f2:fe:10:82:3e:7e:18:90:05:19:25:e7:
                    bb:4f:4f:fb:6d:a7:be:ac:ce:9c:ec:5e:5c:f8:17:
                    83:7b:d6:70:8d:eb:e8:54:05:d1:1a:e7:f9:2b:54:
                    6f:14:ed:23:09:a1:48:21:70:5a:5e:70:4e:f4:8f:
                    92:f4:72:0c:0e:31:3f:26:58:7e:e3:67:96:a2:75:
                    cc:bb:43:1c:2c:2a:b5:2a:ad:2b:58:d1:f7:61:9b:
                    d9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9A:AD:BA:CF:80:40:FF:98:2D:D9:96:D4:F4:42:80:E0:23:DF:A7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6a0fa43-e52e-4248-9b98-297755d44b13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:80c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         ca:10:a6:8a:6b:a5:b9:cf:21:3f:c3:2c:e4:6d:b2:32:70:e5:
         84:8a:66:48:82:da:0c:cf:c0:44:04:e1:cb:cc:52:12:e3:b2:
         98:24:1d:21:96:77:93:b1:90:aa:7b:15:15:07:fb:f5:0b:e7:
         e0:45:48:49:ab:27:9d:5b:fc:2c:1f:1e:f4:49:76:08:4a:47:
         18:cf:82:2d:f1:1d:a6:92:a7:58:09:09:32:a3:8b:c0:bb:23:
         db:eb:45:55:8d:d5:a5:15:14:c5:25:df:48:71:45:67:61:3b:
         3f:4e:42:0a:e5:be:0a:85:0d:1a:89:5d:ca:7c:f1:3d:08:4f:
         92:90:76:bb:c2:5e:37:9e:8b:96:73:ba:88:e7:2e:b8:96:98:
         fe:a5:a4:c8:1f:30:01:83:1a:41:54:22:9f:a6:f4:ba:34:34:
         aa:b2:34:ce:f6:d8:50:f5:74:57:80:f5:c6:9f:c6:42:11:3d:
         06:5d:a2:86:e2:53:e5:71:c7:b8:8d:49:bc:ad:ae:87:19:c4:
         58:8a:f4:b0:1c:58:86:9f:56:a2:98:c5:01:8a:c6:7f:ea:f6:
         f8:f7:76:b0:ac:4d:b4:c0:99:74:fa:a7:c2:e4:76:08:c7:28:
         e2:2e:90:3a:7c:5f:37:ea:5c:b3:57:ab:28:f6:79:14:ee:c4:
         2f:f9:0d:8a
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUIOp89Dql/KtVk9UmwSs8O5tifgQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE3MjEyMDE2WhcNMjUxMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BiYTY3ZjZjMjRhOGFhZjNkODgzMGM1YWFkYjUyOTI2Mjlj
YzE0ZmIxY2U4ZDFmNmZmZDMxNDA5ODgwYmU0NTE3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCKfiOUy7/8DwKFZC+k53H4VN4OVNWxC3B+j1y/5WouVS7O
0UAlqnrFbYwTWsOf2IXtYGbIEzYWxyfIi/u/ZS0xQtZY3C4U+OEXBARO46OyoCaI
I0IKZ1SigpjKxjlpouiYGtWK/Az9MVLbsH40vCImb5rhi6UwMbLTNIJg9Az1GL3s
UXVDN20efvBJmkLg9LlpBW7ciKB4dnJcS7NrteWQ7NN/9lUqIvL+EII+fhiQBRkl
57tPT/ttp76szpzsXlz4F4N71nCN6+hUBdEa5/krVG8U7SMJoUghcFpecE70j5L0
cgwOMT8mWH7jZ5aidcy7QxwsKrUqrStY0fdhm9lTAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU9pqtus+AQP+YLdmW1PRCgOAj36cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2I2YTBmYTQzLWU1MmUtNDI0OC05Yjk4LTI5Nzc1NWQ0NGIxMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/ygMAwDQYJKoZIhvcNAQELBQADggEBAMoQpoprpbnPIT/DLORtsjJw
5YSKZkiC2gzPwEQE4cvMUhLjspgkHSGWd5OxkKp7FRUH+/UL5+BFSEmrJ51b/Cwf
HvRJdghKRxjPgi3xHaaSp1gJCTKji8C7I9vrRVWN1aUVFMUl30hxRWdhOz9OQgrl
vgqFDRqJXcp88T0IT5KQdrvCXjeei5ZzuojnLriWmP6lpMgfMAGDGkFUIp+m9Lo0
NKqyNM722FD1dFeA9cafxkIRPQZdoobiU+Vxx7iNSbytrocZxFiK9LAcWIafVqKY
xQGKxn/q9vj3drCsTbTAmXT6p8LkdgjHKOIukDp8XzfqXLNXqyj2eRTuxC/5DYo=
-----END CERTIFICATE-----