Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd987fdf-fceb-4729-86c7-c27b85de3cdb.roa
File:                     bd987fdf-fceb-4729-86c7-c27b85de3cdb.roa (raw, json)
Hash identifier:          OwyWUbXn0tCxeKVPEKFSnwo9DFHFKkxrgXw/neg4vYI=
Subject key identifier:   D8:18:EA:57:D8:12:9E:AF:D1:F6:4A:61:A5:72:09:F5:36:9F:34:08
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7172CA9D11820AC7995703DA7FECAB135E5670E7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd987fdf-fceb-4729-86c7-c27b85de3cdb.roa
Signing time:             Fri 10 Oct 2025 14:22:05 +0000
ROA not before:           Fri 10 Oct 2025 14:22:05 +0000
ROA not after:            Fri 14 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f29:c000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:72:ca:9d:11:82:0a:c7:99:57:03:da:7f:ec:ab:13:5e:56:70:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 10 14:22:05 2025 GMT
            Not After : Nov 14 23:59:59 2025 GMT
        Subject: serialNumber=8654e7dbba8e8ebcdb196995eda5904150f9418d50fafdfc6b21a17763f3dd55, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:44:2f:f2:00:6a:07:a6:13:44:bb:ce:ea:5e:
                    91:22:e1:49:af:dd:65:b7:9a:e5:e0:5b:3a:94:9f:
                    72:dc:9a:ce:90:24:69:fa:d8:a5:fb:2c:f3:18:2e:
                    01:94:ae:5d:a8:85:5e:38:b4:f0:d6:d7:0d:9b:6f:
                    4f:78:1f:10:77:a0:a0:13:65:4a:6e:7e:cd:7b:be:
                    4f:cf:0b:76:4a:18:74:fa:55:6d:df:ae:c9:8b:5f:
                    33:9f:a8:9d:5c:23:53:e4:ab:db:6d:37:01:70:45:
                    22:a7:71:f3:2c:7a:04:7a:34:9c:c8:5f:07:8e:c0:
                    ce:c3:b1:bb:d9:1a:4a:dc:5a:b7:e3:6e:6e:c3:31:
                    48:8f:e2:57:a4:be:de:fe:21:3d:0f:6f:ed:8c:21:
                    26:94:c0:53:c4:be:14:87:ca:13:1b:1d:e6:35:bb:
                    ff:fc:7f:6d:f2:a0:cf:d2:06:83:6c:7b:52:47:0c:
                    ae:75:59:19:43:d3:83:54:b6:cc:87:46:74:c8:8a:
                    37:b0:79:36:24:d9:15:ac:d2:46:a0:87:83:8d:bf:
                    f0:36:7b:7c:1c:c1:f6:f6:d6:c6:8e:7b:6b:7e:bb:
                    24:8f:6f:1a:c1:66:01:6f:ad:47:ba:18:9e:27:b7:
                    92:39:71:5e:94:68:be:a5:b4:f0:ca:43:f8:5b:a7:
                    b9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:18:EA:57:D8:12:9E:AF:D1:F6:4A:61:A5:72:09:F5:36:9F:34:08
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd987fdf-fceb-4729-86c7-c27b85de3cdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f29:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         bc:b1:47:50:8a:27:b4:ae:3b:fe:b7:0e:bb:36:2d:cb:78:c0:
         42:aa:da:98:9c:44:0d:0f:8c:0e:a9:7c:f3:4d:eb:bd:2d:04:
         98:9a:22:33:b2:99:2c:ca:3b:44:67:b7:f5:9c:37:39:72:18:
         41:aa:71:b7:f8:ad:1c:c8:32:b7:cc:69:ec:54:40:05:c5:64:
         b1:75:5f:0a:57:64:b9:b8:c6:8e:a8:24:7a:48:4d:7a:0b:b3:
         60:e6:a8:62:de:42:a5:8c:e6:d3:1a:5c:17:51:72:cc:fd:ee:
         96:5d:80:db:88:49:68:90:16:5d:2b:d3:2c:c9:36:ab:4d:fe:
         03:ed:ab:71:70:78:11:5d:0a:ec:cc:10:c1:9f:25:dc:a2:44:
         05:38:1b:ef:76:ee:5e:af:be:19:32:bd:b0:fd:ef:51:3d:87:
         8e:5c:a3:1d:78:85:16:c8:00:8c:d3:ae:5c:1a:04:2d:1d:e7:
         24:db:f4:b4:8f:bb:e1:e3:e7:b1:84:1b:a4:9d:a2:cb:f2:20:
         39:47:5f:a8:23:9c:ec:17:23:e4:74:81:b4:88:02:0b:aa:a8:
         0d:41:53:17:f2:7f:5e:a4:dd:7d:88:db:d1:86:8f:51:9b:6b:
         ad:39:59:31:88:39:06:44:47:ad:cd:1e:89:13:6b:a7:a5:67:
         2c:fd:65:c9
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUcXLKnRGCCseZVwPaf+yrE15WcOcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDEwMTQyMjA1WhcNMjUxMTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A4NjU0ZTdkYmJhOGU4ZWJjZGIxOTY5OTVlZGE1OTA0MTUw
Zjk0MThkNTBmYWZkZmM2YjIxYTE3NzYzZjNkZDU1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD0RC/yAGoHphNEu87qXpEi4Umv3WW3muXgWzqUn3Lcms6Q
JGn62KX7LPMYLgGUrl2ohV44tPDW1w2bb094HxB3oKATZUpufs17vk/PC3ZKGHT6
VW3frsmLXzOfqJ1cI1Pkq9ttNwFwRSKncfMsegR6NJzIXweOwM7DsbvZGkrcWrfj
bm7DMUiP4lekvt7+IT0Pb+2MISaUwFPEvhSHyhMbHeY1u//8f23yoM/SBoNse1JH
DK51WRlD04NUtsyHRnTIijeweTYk2RWs0kagh4ONv/A2e3wcwfb21saOe2t+uySP
bxrBZgFvrUe6GJ4nt5I5cV6UaL6ltPDKQ/hbp7kFAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQU2BjqV9gSnq/R9kphpXIJ9TafNAgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2JkOTg3ZmRmLWZjZWItNDcyOS04NmM3LWMyN2I4NWRlM2NkYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8pwDANBgkqhkiG9w0BAQsFAAOCAQEAvLFHUIontK47/rcOuzYty3jA
QqramJxEDQ+MDql8803rvS0EmJoiM7KZLMo7RGe39Zw3OXIYQapxt/itHMgyt8xp
7FRABcVksXVfCldkubjGjqgkekhNeguzYOaoYt5CpYzm0xpcF1FyzP3ull2A24hJ
aJAWXSvTLMk2q03+A+2rcXB4EV0K7MwQwZ8l3KJEBTgb73buXq++GTK9sP3vUT2H
jlyjHXiFFsgAjNOuXBoELR3nJNv0tI+74ePnsYQbpJ2iy/IgOUdfqCOc7Bcj5HSB
tIgCC6qoDUFTF/J/XqTdfYjb0YaPUZtrrTlZMYg5BkRHrc0eiRNrp6VnLP1lyQ==
-----END CERTIFICATE-----