Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2b86293-a6d6-4aef-a1fa-91171f2e774e.roa
File:                     f2b86293-a6d6-4aef-a1fa-91171f2e774e.roa (raw, json)
Hash identifier:          NWphxVM0dl5hqXIRD0WrLr88RlZM4rJvzfvPwpSAk2I=
Subject key identifier:   4B:85:FA:5B:3B:08:9B:FC:0D:98:7F:5E:D2:3E:D0:FE:7C:ED:9B:DD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       293DD7338E9F8DD82E0B76111EC4EE49C904B0A7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2b86293-a6d6-4aef-a1fa-91171f2e774e.roa
Signing time:             Sat 18 Oct 2025 01:00:06 +0000
ROA not before:           Sat 18 Oct 2025 01:00:06 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f2c:8000::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:3d:d7:33:8e:9f:8d:d8:2e:0b:76:11:1e:c4:ee:49:c9:04:b0:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 01:00:06 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=a28803a5f808e17bdb3ab798734646ea4c4b9e58c198a800937e02e96579022a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:22:98:60:d5:a2:65:37:12:26:9d:7d:f8:70:
                    35:dd:0c:9f:eb:be:37:70:b0:0b:9a:74:de:be:98:
                    3b:ba:95:72:3b:3f:03:d0:31:ac:f6:31:1f:41:e7:
                    98:b0:ee:75:3d:83:96:76:48:44:25:a9:a1:37:ed:
                    12:37:49:3e:a3:99:e5:82:51:61:93:37:f1:30:e4:
                    e5:79:e8:a9:64:41:d0:ca:e1:bc:e8:48:e1:48:47:
                    42:f6:70:a5:0a:67:4e:d0:f2:64:4e:22:03:2e:c4:
                    80:64:a0:59:c2:1d:ab:5c:44:18:95:f3:77:93:80:
                    d0:d9:1e:a8:d3:b4:2b:eb:1b:42:bf:4f:3d:0f:84:
                    fa:4d:03:57:5f:18:12:ad:57:04:7d:56:58:f0:29:
                    1b:25:eb:da:c1:d5:7a:2b:45:48:46:5d:23:49:bd:
                    3d:c6:b7:5b:1b:f4:38:29:ed:46:23:9b:23:8e:80:
                    2f:90:b1:a9:e0:5b:ab:07:36:cd:29:8e:1f:ad:4e:
                    ff:15:b6:91:e5:09:80:4c:97:73:ba:c4:b8:b0:c3:
                    8a:0e:9c:6e:88:38:ab:e2:9c:de:99:ad:6e:eb:4f:
                    53:53:73:99:9e:98:77:3a:9c:f8:9e:b8:6c:54:15:
                    51:61:c4:e8:53:1d:d9:55:c6:71:92:79:73:f7:6d:
                    f6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:85:FA:5B:3B:08:9B:FC:0D:98:7F:5E:D2:3E:D0:FE:7C:ED:9B:DD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2b86293-a6d6-4aef-a1fa-91171f2e774e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f2c:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c8:91:cd:db:cc:b4:f9:c6:08:1e:79:7e:8e:63:ac:ff:56:81:
         fc:c8:6c:fd:3d:de:a8:e3:e9:70:b9:6e:7f:e6:85:60:db:d6:
         49:01:39:dc:92:19:35:0d:1c:f7:62:6a:5b:17:0e:90:2a:fe:
         c7:55:b2:62:20:77:c8:5f:c6:2b:23:fe:fd:38:56:06:00:d2:
         13:34:db:dd:59:9b:3d:6f:ba:b5:a3:7a:3f:6e:b1:e7:4b:a0:
         86:5a:e2:38:56:b9:44:b5:16:27:c5:20:21:b8:1b:c5:c4:56:
         b0:84:14:be:ea:ba:fa:ba:56:73:b6:f0:77:5c:53:0b:ea:23:
         99:3e:3c:4f:32:8b:a1:0f:61:f1:0d:8f:82:d9:b2:b1:9f:2e:
         94:6f:ac:c9:38:68:c1:09:7f:33:5a:89:e8:8b:31:83:1a:81:
         ba:0a:0a:96:9b:9e:1c:6c:1c:73:cb:39:fe:cc:fc:42:93:ab:
         6d:a4:aa:e7:0b:08:79:0b:a5:61:3f:2b:bf:b9:67:cb:df:83:
         f2:2b:70:14:ff:d5:49:5d:b8:02:65:11:d1:95:2f:d2:8e:5f:
         45:9d:b6:2f:8c:af:aa:32:1c:2f:e1:79:30:c6:6f:d1:cd:af:
         fd:63:6b:a2:2b:0d:5f:7e:26:23:c3:52:02:31:cb:7e:e6:b9:
         89:1e:58:00
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUKT3XM46fjdguC3YRHsTuSckEsKcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDEwMDA2WhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BhMjg4MDNhNWY4MDhlMTdiZGIzYWI3OTg3MzQ2NDZlYTRj
NGI5ZTU4YzE5OGE4MDA5MzdlMDJlOTY1NzkwMjJhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDDIphg1aJlNxImnX34cDXdDJ/rvjdwsAuadN6+mDu6lXI7
PwPQMaz2MR9B55iw7nU9g5Z2SEQlqaE37RI3ST6jmeWCUWGTN/Ew5OV56KlkQdDK
4bzoSOFIR0L2cKUKZ07Q8mROIgMuxIBkoFnCHatcRBiV83eTgNDZHqjTtCvrG0K/
Tz0PhPpNA1dfGBKtVwR9VljwKRsl69rB1XorRUhGXSNJvT3Gt1sb9Dgp7UYjmyOO
gC+QsangW6sHNs0pjh+tTv8VtpHlCYBMl3O6xLiww4oOnG6IOKvinN6ZrW7rT1NT
c5memHc6nPieuGxUFVFhxOhTHdlVxnGSeXP3bfbZAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUS4X6WzsIm/wNmH9e0j7Q/nztm90wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2YyYjg2MjkzLWE2ZDYtNGFlZi1hMWZhLTkxMTcxZjJlNzc0ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8sgDANBgkqhkiG9w0BAQsFAAOCAQEAyJHN28y0+cYIHnl+jmOs/1aB
/Mhs/T3eqOPpcLluf+aFYNvWSQE53JIZNQ0c92JqWxcOkCr+x1WyYiB3yF/GKyP+
/ThWBgDSEzTb3VmbPW+6taN6P26x50ughlriOFa5RLUWJ8UgIbgbxcRWsIQUvuq6
+rpWc7bwd1xTC+ojmT48TzKLoQ9h8Q2PgtmysZ8ulG+syThowQl/M1qJ6IsxgxqB
ugoKlpueHGwcc8s5/sz8QpOrbaSq5wsIeQulYT8rv7lny9+D8itwFP/VSV24AmUR
0ZUv0o5fRZ22L4yvqjIcL+F5MMZv0c2v/WNroisNX34mI8NSAjHLfua5iR5YAA==
-----END CERTIFICATE-----