Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5c81786-0e97-4a99-b30c-884b01e282fe.roa
File:                     e5c81786-0e97-4a99-b30c-884b01e282fe.roa (raw, json)
Hash identifier:          eBi632TG5tnF36oEKjJNOudsrz3IFpI4m6lZY+FZGV8=
Subject key identifier:   F8:FD:E7:57:01:97:37:50:8D:9F:D6:D7:7F:56:EE:23:44:3D:73:A6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       47ADF859EA3043A78F7CD6590F42816BA49963E0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5c81786-0e97-4a99-b30c-884b01e282fe.roa
Signing time:             Sat 18 Oct 2025 02:51:29 +0000
ROA not before:           Sat 18 Oct 2025 02:51:29 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1f70:2000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ad:f8:59:ea:30:43:a7:8f:7c:d6:59:0f:42:81:6b:a4:99:63:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 02:51:29 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=bc1bcf7657e2fe9de45a82ba108b094ba0ca1643641975f6c021afd400867851, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:45:3c:86:a9:14:30:4e:88:93:34:e9:11:2f:
                    94:ce:0b:10:03:71:97:08:03:a9:c0:8f:0a:33:3e:
                    dc:bf:52:78:25:83:16:a6:49:20:db:ab:c9:0a:0d:
                    b6:3c:83:c1:1f:fd:e8:46:67:46:5e:3a:f0:6d:8a:
                    3e:ec:ff:1f:d1:6c:17:0d:05:e1:16:2c:67:a6:11:
                    ee:64:f3:b6:bc:16:f8:01:c1:2c:53:2a:0d:6c:72:
                    f7:c6:7e:70:b7:58:73:d1:c7:0c:44:c8:c6:a5:0b:
                    33:ec:d4:14:d0:fe:0e:98:d4:96:79:a5:73:66:d8:
                    b7:1b:0b:63:32:db:7f:af:5b:e2:b3:4d:52:ba:2b:
                    ff:15:a3:60:c0:f8:7e:18:22:7e:59:3f:4c:61:c6:
                    dc:a7:d2:7d:b5:67:1b:9b:f4:b2:ec:8e:92:78:27:
                    b9:ac:54:17:17:a1:e1:dd:9e:e8:64:8e:88:dd:29:
                    d3:5f:3e:c6:da:0b:bd:10:5a:4b:1e:28:83:3e:83:
                    ca:f0:fd:17:13:d6:c6:4d:4f:71:cf:e3:1c:a2:61:
                    2d:bd:b8:c8:f1:3d:5c:26:68:6f:f5:ca:b7:58:70:
                    04:02:9f:fd:66:a0:d2:f9:fc:7f:53:38:e3:70:63:
                    12:85:30:da:dd:6c:b3:7c:c8:cc:6e:46:20:2f:dc:
                    87:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FD:E7:57:01:97:37:50:8D:9F:D6:D7:7F:56:EE:23:44:3D:73:A6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5c81786-0e97-4a99-b30c-884b01e282fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f70:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         ab:3b:4e:f8:37:cf:f2:20:8d:e0:9b:d7:01:b8:99:0d:d4:14:
         11:19:69:4f:d0:b8:92:05:7f:64:cb:51:9e:64:16:ec:ce:07:
         29:55:9b:ab:ad:23:fb:29:f2:2a:f6:77:49:47:1c:68:9b:97:
         83:6d:5e:a2:aa:b2:3a:ca:f7:20:f0:6f:c2:21:1a:af:7d:63:
         d6:0b:f3:41:54:56:5e:93:e1:01:72:8f:5d:cb:f9:ff:b1:25:
         3a:b5:1c:72:c0:58:32:b9:f9:55:4a:aa:1f:31:9b:ee:e4:03:
         db:ac:b2:d7:d3:fb:c6:e9:1f:10:99:5b:5a:da:9e:5c:ef:67:
         75:3e:44:e2:0a:dc:88:42:44:23:dd:29:8f:13:05:1c:b1:8a:
         12:0c:03:b3:ae:d7:6c:b8:5e:f4:80:ab:62:cb:57:fd:6a:60:
         0e:80:be:0c:34:61:8a:c7:4b:70:82:f6:7a:94:b6:c8:d5:9f:
         2f:b4:25:3a:bc:07:7f:7c:11:71:7f:06:b3:cc:04:3d:8f:c5:
         ba:36:fa:27:e7:67:34:be:b3:cb:ac:b5:3a:7d:59:07:6a:68:
         3f:4e:db:b4:b4:ce:a5:7e:75:31:f8:8a:2c:ee:cb:48:5f:ec:
         c0:f7:d5:f9:6a:f4:25:fc:1d:32:27:6e:87:f0:47:dd:7a:85:
         20:96:ff:ae
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUR634WeowQ6ePfNZZD0KBa6SZY+AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDI1MTI5WhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BiYzFiY2Y3NjU3ZTJmZTlkZTQ1YTgyYmExMDhiMDk0YmEw
Y2ExNjQzNjQxOTc1ZjZjMDIxYWZkNDAwODY3ODUxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvRTyGqRQwToiTNOkRL5TOCxADcZcIA6nAjwozPty/Ungl
gxamSSDbq8kKDbY8g8Ef/ehGZ0ZeOvBtij7s/x/RbBcNBeEWLGemEe5k87a8FvgB
wSxTKg1scvfGfnC3WHPRxwxEyMalCzPs1BTQ/g6Y1JZ5pXNm2LcbC2My23+vW+Kz
TVK6K/8Vo2DA+H4YIn5ZP0xhxtyn0n21Zxub9LLsjpJ4J7msVBcXoeHdnuhkjojd
KdNfPsbaC70QWkseKIM+g8rw/RcT1sZNT3HP4xyiYS29uMjxPVwmaG/1yrdYcAQC
n/1moNL5/H9TOONwYxKFMNrdbLN8yMxuRiAv3IeLAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQU+P3nVwGXN1CNn9bXf1buI0Q9c6YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2U1YzgxNzg2LTBlOTctNGE5OS1iMzBjLTg4NGIwMWUyODJmZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB9wIDANBgkqhkiG9w0BAQsFAAOCAQEAqztO+DfP8iCN4JvXAbiZDdQU
ERlpT9C4kgV/ZMtRnmQW7M4HKVWbq60j+ynyKvZ3SUccaJuXg21eoqqyOsr3IPBv
wiEar31j1gvzQVRWXpPhAXKPXcv5/7ElOrUccsBYMrn5VUqqHzGb7uQD26yy19P7
xukfEJlbWtqeXO9ndT5E4grciEJEI90pjxMFHLGKEgwDs67XbLhe9ICrYstX/Wpg
DoC+DDRhisdLcIL2epS2yNWfL7QlOrwHf3wRcX8Gs8wEPY/Fujb6J+dnNL6zy6y1
On1ZB2poP07btLTOpX51MfiKLO7LSF/swPfV+Wr0JfwdMiduh/BH3XqFIJb/rg==
-----END CERTIFICATE-----