Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8420826-a4f4-4292-a458-ce267ddf8415.roa
File:                     c8420826-a4f4-4292-a458-ce267ddf8415.roa (raw, json)
Hash identifier:          Ocs980ZtgpaiylHXGXspZ7oeNY+bfTiF6YXJOOXsYIQ=
Subject key identifier:   96:22:EA:6E:06:62:45:C8:AD:1B:6B:5D:1E:31:A5:A9:96:C0:6E:DE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0272B9C2DD3D4F6427CF80E89EF654FEDF8BC2BD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8420826-a4f4-4292-a458-ce267ddf8415.roa
Signing time:             Fri 17 Oct 2025 21:10:06 +0000
ROA not before:           Fri 17 Oct 2025 21:10:06 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f38:6080::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:72:b9:c2:dd:3d:4f:64:27:cf:80:e8:9e:f6:54:fe:df:8b:c2:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 21:10:06 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=34554eaa4e1554b4956f035346661431bb6b6a67275f4bd6a7f9e12c9790661e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:13:d0:03:76:d5:d6:e7:b4:d5:ae:a6:70:01:
                    ac:26:28:8d:a9:35:fc:7e:64:af:64:7c:65:30:8f:
                    76:ab:d8:2c:a1:44:46:21:4b:c5:e3:6b:ff:66:04:
                    bf:1a:80:47:a0:b9:97:86:e4:ae:c9:08:3a:c3:13:
                    fa:94:2c:d1:24:47:b9:b9:bf:9a:b6:05:f9:39:83:
                    ac:31:a0:d0:67:ac:cc:b0:38:42:ee:51:34:a8:16:
                    c4:f3:77:75:5a:91:f7:00:b2:14:94:e9:25:8e:fe:
                    44:49:7f:33:19:75:28:3e:dc:b7:8f:13:6a:fd:76:
                    4b:3d:22:ae:64:3a:18:eb:52:ba:ea:f5:91:39:d4:
                    4c:fd:5a:47:26:4f:75:ae:81:0c:78:a2:22:22:79:
                    8d:a5:22:32:90:24:ba:88:f5:86:a4:e5:2a:86:b4:
                    1f:0f:e2:01:57:1e:93:75:94:ac:6c:cd:e6:81:56:
                    97:2a:8d:f8:2b:f9:5b:c0:32:8f:1e:ad:17:87:ed:
                    49:9a:6b:f7:ea:33:7c:ea:a3:9e:7c:6e:7e:c2:4b:
                    e4:44:36:fa:a0:70:a6:f4:a5:cf:1a:c7:a3:bf:a3:
                    a7:10:7a:a9:ce:e8:f7:fa:70:7b:7e:99:1a:d6:c0:
                    3d:4f:39:88:bc:35:38:c9:c3:57:6d:b4:71:ca:24:
                    4e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:22:EA:6E:06:62:45:C8:AD:1B:6B:5D:1E:31:A5:A9:96:C0:6E:DE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8420826-a4f4-4292-a458-ce267ddf8415.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f38:6080::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:56:ce:b2:cb:49:ab:50:22:18:20:49:51:1f:20:5b:a7:fe:
         24:82:0b:14:01:07:27:15:7a:66:46:ca:34:a8:1d:19:da:34:
         55:03:d7:e2:38:31:24:c4:ef:a3:90:1c:ef:b0:2d:09:af:3e:
         32:6b:8f:6f:54:55:3d:88:34:2b:78:40:d6:fe:7b:7c:18:ac:
         0b:b2:7b:97:7a:c0:ef:6c:0c:36:22:da:f1:59:1d:97:1f:43:
         13:38:d1:96:27:89:1e:bc:a6:d1:37:39:01:df:5c:f3:55:ad:
         51:69:b6:ea:e4:f6:31:18:b9:55:06:33:41:42:10:35:a7:db:
         ae:e7:89:01:0e:00:b9:3f:41:3c:b5:85:59:0e:62:1b:24:75:
         8a:bd:8d:fa:bb:b2:98:27:0d:88:11:1b:90:79:c8:e1:c5:ce:
         15:a9:7f:a6:04:d7:f2:9c:60:b5:42:be:1b:47:b3:05:60:cf:
         56:43:72:47:86:7e:8a:e8:78:18:ec:12:66:62:03:a4:ae:ee:
         df:c7:81:1d:d3:2f:70:b0:25:da:f5:0e:0b:19:a1:e4:62:b2:
         3b:23:0b:06:2b:81:d5:c7:17:03:4d:43:0d:9e:fd:3a:fe:8c:
         39:52:e3:3e:de:50:ed:d5:29:74:16:3b:20:5f:0b:08:af:96:
         ff:5f:86:2a
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUAnK5wt09T2Qnz4DonvZU/t+Lwr0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE3MjExMDA2WhcNMjUxMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0AzNDU1NGVhYTRlMTU1NGI0OTU2ZjAzNTM0NjY2MTQzMWJi
NmI2YTY3Mjc1ZjRiZDZhN2Y5ZTEyYzk3OTA2NjFlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCVE9ADdtXW57TVrqZwAawmKI2pNfx+ZK9kfGUwj3ar2Cyh
REYhS8Xja/9mBL8agEeguZeG5K7JCDrDE/qULNEkR7m5v5q2Bfk5g6wxoNBnrMyw
OELuUTSoFsTzd3VakfcAshSU6SWO/kRJfzMZdSg+3LePE2r9dks9Iq5kOhjrUrrq
9ZE51Ez9WkcmT3WugQx4oiIieY2lIjKQJLqI9Yak5SqGtB8P4gFXHpN1lKxszeaB
Vpcqjfgr+VvAMo8erReH7Umaa/fqM3zqo558bn7CS+RENvqgcKb0pc8ax6O/o6cQ
eqnO6Pf6cHt+mRrWwD1POYi8NTjJw1dttHHKJE7FAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUliLqbgZiRcitG2tdHjGlqZbAbt4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2M4NDIwODI2LWE0ZjQtNDI5Mi1hNDU4LWNlMjY3ZGRmODQxNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB84YIAwDQYJKoZIhvcNAQELBQADggEBAI5WzrLLSatQIhggSVEfIFun
/iSCCxQBBycVemZGyjSoHRnaNFUD1+I4MSTE76OQHO+wLQmvPjJrj29UVT2INCt4
QNb+e3wYrAuye5d6wO9sDDYi2vFZHZcfQxM40ZYniR68ptE3OQHfXPNVrVFpturk
9jEYuVUGM0FCEDWn267niQEOALk/QTy1hVkOYhskdYq9jfq7spgnDYgRG5B5yOHF
zhWpf6YE1/KcYLVCvhtHswVgz1ZDckeGforoeBjsEmZiA6Su7t/HgR3TL3CwJdr1
DgsZoeRisjsjCwYrgdXHFwNNQw2e/Tr+jDlS4z7eUO3VKXQWOyBfCwivlv9fhio=
-----END CERTIFICATE-----