Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d27bbac6-d621-4795-814e-7e30e51a759b.roa
File:                     d27bbac6-d621-4795-814e-7e30e51a759b.roa (raw, json)
Hash identifier:          Y+FUtw/eUUL/VUw+MB8GSGC3oHUvoPbOVAP+SMWjscA=
Subject key identifier:   10:49:B7:4C:FC:F1:6A:E7:45:D8:75:6E:35:79:20:B2:75:92:28:C0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7BFAC00FEFC33FF5C44743D8D7112213E7866D28
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d27bbac6-d621-4795-814e-7e30e51a759b.roa
Signing time:             Sat 18 Oct 2025 04:01:46 +0000
ROA not before:           Sat 18 Oct 2025 04:01:46 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:4140::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:fa:c0:0f:ef:c3:3f:f5:c4:47:43:d8:d7:11:22:13:e7:86:6d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 04:01:46 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=227eb9b5c78995142225541bf809fb7dc1f6c80c98c094cb95e98efc286914a8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:88:49:44:38:f4:b9:a3:a6:1d:f4:70:d9:dc:
                    56:c6:27:b3:dc:f7:51:39:27:5d:21:42:cf:0c:01:
                    51:e8:4a:07:cc:e3:05:95:3f:2c:f3:69:ea:bc:53:
                    1b:df:33:02:b6:bb:84:a0:df:86:77:9c:22:35:83:
                    34:b8:77:b6:d5:51:4b:c9:c2:63:1b:89:66:4e:0e:
                    fd:84:38:0c:8b:3f:7d:ef:63:7d:b9:04:1f:4f:90:
                    59:c0:05:74:c1:57:d6:79:ee:f1:33:12:1d:60:58:
                    de:c7:b3:e2:56:08:fd:79:1c:2e:e1:96:0a:5d:b8:
                    e4:23:23:55:eb:73:de:ac:34:2b:0b:e6:88:9a:b2:
                    e6:8a:e2:c4:d5:bd:8a:7b:b5:be:a5:02:a3:46:5e:
                    13:e8:aa:70:ee:63:97:3f:76:7c:f6:26:f1:29:13:
                    03:30:d2:60:05:27:d2:02:10:7b:57:0d:ff:3e:58:
                    3a:a1:74:dc:cd:06:29:87:be:f1:cf:5d:23:dd:1f:
                    5a:88:a2:14:e7:dc:52:d6:e7:27:ce:58:79:f9:3f:
                    cf:c5:30:13:be:93:8d:90:79:3a:ef:84:24:14:29:
                    6c:f5:38:c5:17:ca:e8:af:fc:d0:b5:82:fd:81:46:
                    c9:05:d8:cc:7a:b6:4c:f2:97:bf:8c:0f:70:37:5d:
                    32:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:49:B7:4C:FC:F1:6A:E7:45:D8:75:6E:35:79:20:B2:75:92:28:C0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d27bbac6-d621-4795-814e-7e30e51a759b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:4140::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:51:0a:ae:98:49:3e:65:c3:68:fe:9b:8d:99:60:56:3d:8d:
         1b:95:7b:63:61:6f:9f:6e:57:44:31:9b:09:18:00:d6:8d:ef:
         51:af:02:89:d7:c3:33:7e:0a:a2:c4:a1:19:96:f1:db:52:52:
         bc:d3:01:51:fe:e4:82:7f:01:37:df:0c:3e:db:a8:c4:57:a6:
         1c:21:a5:92:64:88:20:d2:ad:5e:df:0f:8f:06:e7:90:96:8a:
         a3:d9:51:a7:56:39:03:9c:81:e1:bf:dd:98:a0:88:65:6c:0f:
         03:96:d0:53:63:76:08:98:f1:20:c8:60:7f:29:a9:0c:59:84:
         ea:38:ce:9f:fe:37:16:52:28:ab:2b:71:b7:5a:47:90:62:9c:
         15:49:ad:35:c2:3b:cc:58:bd:29:85:72:17:18:32:dc:ea:a7:
         50:5d:7b:02:68:5e:40:b6:2c:e0:9b:af:ba:80:ea:a5:e9:3d:
         e4:a1:17:a9:30:3d:33:9c:3e:4b:05:ac:4b:b2:8f:81:b5:57:
         1c:f3:17:82:20:52:c2:50:53:21:34:21:23:2c:9f:10:75:57:
         85:6b:5e:45:89:8c:94:ae:66:68:19:c7:f7:3e:96:9e:aa:97:
         23:76:a1:9d:b4:ee:95:23:76:04:00:70:31:26:78:3b:f2:85:
         30:6d:35:9c
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUe/rAD+/DP/XER0PY1xEiE+eGbSgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDQwMTQ2WhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0AyMjdlYjliNWM3ODk5NTE0MjIyNTU0MWJmODA5ZmI3ZGMx
ZjZjODBjOThjMDk0Y2I5NWU5OGVmYzI4NjkxNGE4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDEiElEOPS5o6Yd9HDZ3FbGJ7Pc91E5J10hQs8MAVHoSgfM
4wWVPyzzaeq8UxvfMwK2u4Sg34Z3nCI1gzS4d7bVUUvJwmMbiWZODv2EOAyLP33v
Y325BB9PkFnABXTBV9Z57vEzEh1gWN7Hs+JWCP15HC7hlgpduOQjI1Xrc96sNCsL
5oiasuaK4sTVvYp7tb6lAqNGXhPoqnDuY5c/dnz2JvEpEwMw0mAFJ9ICEHtXDf8+
WDqhdNzNBimHvvHPXSPdH1qIohTn3FLW5yfOWHn5P8/FMBO+k42QeTrvhCQUKWz1
OMUXyuiv/NC1gv2BRskF2Mx6tkzyl7+MD3A3XTKLAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUEEm3TPzxaudF2HVuNXkgsnWSKMAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2QyN2JiYWM2LWQ2MjEtNDc5NS04MTRlLTdlMzBlNTFhNzU5Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB8AQUAwDQYJKoZIhvcNAQELBQADggEBACxRCq6YST5lw2j+m42ZYFY9
jRuVe2Nhb59uV0QxmwkYANaN71GvAonXwzN+CqLEoRmW8dtSUrzTAVH+5IJ/ATff
DD7bqMRXphwhpZJkiCDSrV7fD48G55CWiqPZUadWOQOcgeG/3ZigiGVsDwOW0FNj
dgiY8SDIYH8pqQxZhOo4zp/+NxZSKKsrcbdaR5BinBVJrTXCO8xYvSmFchcYMtzq
p1BdewJoXkC2LOCbr7qA6qXpPeShF6kwPTOcPksFrEuyj4G1VxzzF4IgUsJQUyE0
ISMsnxB1V4VrXkWJjJSuZmgZx/c+lp6qlyN2oZ207pUjdgQAcDEmeDvyhTBtNZw=
-----END CERTIFICATE-----