Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b93398ae-736f-4632-95ed-fd5f6d517f9d.roa
File:                     b93398ae-736f-4632-95ed-fd5f6d517f9d.roa (raw, json)
Hash identifier:          Gl7ohLFbFuQjzfXEZo1EAo11/Pa1362q7NCL1QMxGCU=
Subject key identifier:   6E:87:7C:D7:1D:05:B2:1F:2C:15:8B:20:95:A8:81:C9:C7:3A:63:F4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1FFB368DF64A950753103ABF4B53FC1F53FC5BC6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b93398ae-736f-4632-95ed-fd5f6d517f9d.roa
Signing time:             Fri 17 Oct 2025 21:05:38 +0000
ROA not before:           Fri 17 Oct 2025 21:05:38 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f38:8020::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:fb:36:8d:f6:4a:95:07:53:10:3a:bf:4b:53:fc:1f:53:fc:5b:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 21:05:38 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=839e3aae3cad24d6af1464c849e562d4ed10a739d19e950fe48f167c33a27bdb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:46:37:fc:a7:e3:ea:91:20:d1:85:0f:83:af:
                    32:82:40:06:fb:10:bf:12:2a:98:28:c1:18:56:92:
                    be:46:ae:55:66:86:9f:b4:6b:56:12:24:5f:a3:09:
                    7b:87:9a:6b:35:ae:a0:9b:92:5f:65:01:97:f1:f4:
                    cd:50:4c:05:d0:f8:25:a9:08:5b:22:27:35:02:5b:
                    64:0b:54:83:3a:c0:d5:ee:f3:5d:63:40:5a:24:ee:
                    92:e0:de:25:d6:3c:61:19:13:7b:8d:25:5b:ff:92:
                    52:ac:fe:3a:1f:f4:a4:54:66:90:79:2d:e5:f5:b6:
                    55:2d:45:b6:93:eb:a5:1f:9d:6e:d9:0c:67:e9:2b:
                    6c:0c:df:5e:76:cd:d2:00:d2:ca:ab:98:9f:d8:0b:
                    c4:85:b4:cf:73:34:45:aa:d9:94:f4:be:39:f4:05:
                    b5:32:9f:1c:32:e8:9f:45:a3:12:80:40:c2:17:94:
                    d7:32:17:b0:0a:bd:46:a3:28:94:f3:0c:9b:c6:8c:
                    1b:f9:83:16:ae:b1:c7:df:28:ef:09:a3:f3:8c:d2:
                    3a:8b:59:d7:1d:d5:c5:83:3c:2b:bf:ee:b9:72:00:
                    81:20:2c:3f:78:a8:ac:6e:c4:d5:4d:f5:a9:3d:81:
                    a3:cb:ab:6f:97:19:25:25:99:21:2b:ce:02:d2:cb:
                    d2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:87:7C:D7:1D:05:B2:1F:2C:15:8B:20:95:A8:81:C9:C7:3A:63:F4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b93398ae-736f-4632-95ed-fd5f6d517f9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f38:8020::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:38:7c:fc:47:bf:19:c5:66:52:c7:ce:0e:cd:56:0a:12:44:
         ed:79:92:87:bb:c0:39:cb:f1:b2:4b:65:47:4e:3b:e1:c0:60:
         a4:1b:1e:43:2e:4e:50:b3:67:11:11:28:54:aa:b8:bc:a5:9c:
         1d:e2:a0:7d:09:44:15:d7:ab:25:91:76:7c:85:7e:20:20:cc:
         0a:27:c8:3e:9d:39:7f:e5:dd:7d:20:80:33:5a:ba:55:36:7c:
         60:4a:82:54:4e:8d:ee:f7:b8:51:5b:78:af:97:6a:f5:93:90:
         39:cc:51:ca:c5:62:2f:04:db:4f:d6:9b:29:92:32:03:72:ee:
         c8:c8:62:62:c7:6a:2b:c8:d5:f2:b4:28:ad:9c:9b:54:09:8b:
         cd:21:37:f1:75:98:26:a2:2b:4a:2e:49:4f:5d:ea:05:a9:5f:
         52:3a:28:65:f0:56:7f:b3:60:3e:f5:4f:8e:04:d5:dc:af:b7:
         3e:15:8f:79:c8:71:22:07:1d:a1:7d:9e:f2:48:58:90:a1:66:
         cb:10:18:db:b8:34:5c:de:06:5a:ac:c7:ab:84:6e:2d:ce:ba:
         e4:22:7c:48:a3:b3:01:6e:05:ab:17:2f:4a:ba:b3:1f:0f:df:
         72:b5:5d:9b:a6:ba:40:7c:4c:8b:b2:38:69:66:17:28:07:86:
         b4:01:19:1f
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUH/s2jfZKlQdTEDq/S1P8H1P8W8YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE3MjEwNTM4WhcNMjUxMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A4MzllM2FhZTNjYWQyNGQ2YWYxNDY0Yzg0OWU1NjJkNGVk
MTBhNzM5ZDE5ZTk1MGZlNDhmMTY3YzMzYTI3YmRiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvRjf8p+PqkSDRhQ+DrzKCQAb7EL8SKpgowRhWkr5GrlVm
hp+0a1YSJF+jCXuHmms1rqCbkl9lAZfx9M1QTAXQ+CWpCFsiJzUCW2QLVIM6wNXu
811jQFok7pLg3iXWPGEZE3uNJVv/klKs/jof9KRUZpB5LeX1tlUtRbaT66UfnW7Z
DGfpK2wM3152zdIA0sqrmJ/YC8SFtM9zNEWq2ZT0vjn0BbUynxwy6J9FoxKAQMIX
lNcyF7AKvUajKJTzDJvGjBv5gxauscffKO8Jo/OM0jqLWdcd1cWDPCu/7rlyAIEg
LD94qKxuxNVN9ak9gaPLq2+XGSUlmSErzgLSy9IbAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUbod81x0Fsh8sFYsglaiBycc6Y/QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2I5MzM5OGFlLTczNmYtNDYzMi05NWVkLWZkNWY2ZDUxN2Y5ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB84gCAwDQYJKoZIhvcNAQELBQADggEBAHo4fPxHvxnFZlLHzg7NVgoS
RO15koe7wDnL8bJLZUdOO+HAYKQbHkMuTlCzZxERKFSquLylnB3ioH0JRBXXqyWR
dnyFfiAgzAonyD6dOX/l3X0ggDNaulU2fGBKglROje73uFFbeK+XavWTkDnMUcrF
Yi8E20/WmymSMgNy7sjIYmLHaivI1fK0KK2cm1QJi80hN/F1mCaiK0ouSU9d6gWp
X1I6KGXwVn+zYD71T44E1dyvtz4Vj3nIcSIHHaF9nvJIWJChZssQGNu4NFzeBlqs
x6uEbi3OuuQifEijswFuBasXL0q6sx8P33K1XZumukB8TIuyOGlmFygHhrQBGR8=
-----END CERTIFICATE-----