Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4c919f7-0b3c-4caf-adc1-3e1fca45f396.roa
File:                     e4c919f7-0b3c-4caf-adc1-3e1fca45f396.roa (raw, json)
Hash identifier:          4XibXsNff0m1rkP/1aWqFyCvDroDvqjS1rpYiMO8dHE=
Subject key identifier:   A6:5F:44:8B:B2:D0:B7:FD:21:8A:40:1F:3A:6E:64:51:34:C0:50:C9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7182D79CC0E06ED4C6C657CF051B18C848944900
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4c919f7-0b3c-4caf-adc1-3e1fca45f396.roa
Signing time:             Sat 18 Oct 2025 04:50:50 +0000
ROA not before:           Sat 18 Oct 2025 04:50:50 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:6020::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:82:d7:9c:c0:e0:6e:d4:c6:c6:57:cf:05:1b:18:c8:48:94:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 04:50:50 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=114859c62c3c4a1cd015b45f96bf5f00c392c9d32208a7496d02e95f9d2a8948, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:03:36:89:21:14:67:4c:50:bf:fc:a2:da:97:
                    9a:70:dc:5b:f5:d3:e6:5d:81:37:43:71:7c:5e:00:
                    d3:b8:5c:0b:7a:00:56:2a:71:33:8d:bd:c5:5a:0a:
                    fa:22:25:cb:f6:de:c9:60:02:cd:65:eb:6f:23:98:
                    3f:69:a2:c5:11:16:d8:89:35:45:75:38:25:33:c4:
                    07:39:62:00:51:83:e2:71:e4:9d:b0:79:6a:e8:1f:
                    78:27:e6:d0:1b:dc:7a:40:5e:5d:fc:1a:e3:3a:9a:
                    8a:1a:f9:99:33:cc:fc:d8:22:e9:19:5b:f2:28:e2:
                    74:af:7e:31:99:18:e5:d1:c4:23:64:cf:bf:21:bd:
                    f6:a9:94:a5:d9:eb:64:9b:c9:b9:d9:58:1f:e6:dd:
                    dc:72:04:3e:55:b0:4f:d4:39:f2:72:2d:da:4a:df:
                    56:f8:87:50:f8:d7:fd:7d:d5:fd:e6:61:30:0d:e5:
                    c4:76:cf:52:7c:d6:7d:82:db:d0:ce:1b:c1:47:5c:
                    09:df:14:00:40:47:33:2d:20:ff:e7:df:0e:01:34:
                    16:7a:40:99:a7:be:17:bc:6a:35:dc:d2:03:c4:e2:
                    c8:0a:13:6e:ec:74:aa:78:c4:aa:17:02:95:ac:c1:
                    26:e4:9f:f0:bf:f0:84:56:4a:93:b9:95:ff:bd:68:
                    ba:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:5F:44:8B:B2:D0:B7:FD:21:8A:40:1F:3A:6E:64:51:34:C0:50:C9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4c919f7-0b3c-4caf-adc1-3e1fca45f396.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:6020::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:bf:1d:e9:37:e5:2a:61:8e:36:d4:98:ed:cf:e7:48:58:a7:
         54:1f:7b:e4:d6:fd:a8:46:87:0a:fc:14:47:89:dd:f4:95:d3:
         63:72:ec:9a:82:92:ca:ab:39:bc:2a:ca:ac:2b:5f:e4:bd:ab:
         69:88:65:92:7a:1d:cc:d4:eb:b0:91:ef:bf:27:55:e3:fb:ec:
         b8:b1:8e:a6:d8:41:33:8d:75:f6:f3:58:c3:3e:99:0b:be:82:
         85:b0:34:6a:3a:9a:5f:7f:4d:6f:90:fc:16:14:57:49:1d:ab:
         a1:43:19:b7:91:a7:81:6b:9f:12:dd:45:01:0f:f0:b9:04:8d:
         6a:b2:40:1d:49:e4:e0:d0:6a:ec:c1:02:b1:b8:c0:5f:8d:63:
         ad:5c:71:12:9d:e0:c7:3a:71:ec:82:c5:42:8e:74:96:c3:ba:
         9b:b5:5c:d2:62:a7:37:99:09:46:0e:d1:bb:9b:82:77:a0:5d:
         f7:46:1d:75:62:14:15:e9:ae:52:f9:0c:86:53:23:78:32:17:
         ef:75:ef:2c:37:7a:1e:33:b5:4e:39:cf:44:25:22:45:ac:41:
         6f:5c:e5:ce:2d:d3:e6:3d:80:5b:14:69:01:f0:d0:30:a6:b2:
         63:f5:95:87:ac:55:24:4a:35:cd:0b:d3:96:72:84:28:e2:5c:
         33:7b:2d:52
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUcYLXnMDgbtTGxlfPBRsYyEiUSQAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDQ1MDUwWhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0AxMTQ4NTljNjJjM2M0YTFjZDAxNWI0NWY5NmJmNWYwMGMz
OTJjOWQzMjIwOGE3NDk2ZDAyZTk1ZjlkMmE4OTQ4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCVAzaJIRRnTFC//KLal5pw3Fv10+ZdgTdDcXxeANO4XAt6
AFYqcTONvcVaCvoiJcv23slgAs1l628jmD9posURFtiJNUV1OCUzxAc5YgBRg+Jx
5J2weWroH3gn5tAb3HpAXl38GuM6mooa+ZkzzPzYIukZW/Io4nSvfjGZGOXRxCNk
z78hvfaplKXZ62SbybnZWB/m3dxyBD5VsE/UOfJyLdpK31b4h1D41/191f3mYTAN
5cR2z1J81n2C29DOG8FHXAnfFABARzMtIP/n3w4BNBZ6QJmnvhe8ajXc0gPE4sgK
E27sdKp4xKoXApWswSbkn/C/8IRWSpO5lf+9aLqXAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUpl9Ei7LQt/0hikAfOm5kUTTAUMkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2U0YzkxOWY3LTBiM2MtNGNhZi1hZGMxLTNlMWZjYTQ1ZjM5Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB//YCAwDQYJKoZIhvcNAQELBQADggEBAIm/Hek35SphjjbUmO3P50hY
p1Qfe+TW/ahGhwr8FEeJ3fSV02Ny7JqCksqrObwqyqwrX+S9q2mIZZJ6HczU67CR
778nVeP77LixjqbYQTONdfbzWMM+mQu+goWwNGo6ml9/TW+Q/BYUV0kdq6FDGbeR
p4FrnxLdRQEP8LkEjWqyQB1J5ODQauzBArG4wF+NY61ccRKd4Mc6ceyCxUKOdJbD
upu1XNJipzeZCUYO0bubgnegXfdGHXViFBXprlL5DIZTI3gyF+917yw3eh4ztU45
z0QlIkWsQW9c5c4t0+Y9gFsUaQHw0DCmsmP1lYesVSRKNc0L05ZyhCjiXDN7LVI=
-----END CERTIFICATE-----