Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6aebe91-11fe-475b-8395-8eb21f912515.roa
File:                     f6aebe91-11fe-475b-8395-8eb21f912515.roa (raw, json)
Hash identifier:          AyYV6+Jw08oWsDVP0r5TQ6IRUCqdaDftQKBWwKR3KqA=
Subject key identifier:   0C:77:D7:1F:DB:52:18:AF:A9:43:DB:C3:85:0B:7C:72:B6:48:1E:9C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       374071E16B290E085E28B4763603ACA755D3E10C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6aebe91-11fe-475b-8395-8eb21f912515.roa
Signing time:             Fri 09 Oct 2026 01:11:44 +0000
ROA not before:           Fri 09 Oct 2026 01:11:44 +0000
ROA not after:            Thu 07 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fea:a400::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:40:71:e1:6b:29:0e:08:5e:28:b4:76:36:03:ac:a7:55:d3:e1:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  9 01:11:44 2026 GMT
            Not After : Jan  7 23:59:59 2027 GMT
        Subject: serialNumber=dee95af5e421321fd96465b4315705efcaaaee434e3957cca0682b2e5ac88d6f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:41:74:41:a5:0f:ab:d7:c8:fe:48:75:86:24:
                    98:f2:d2:5e:a9:a0:38:4a:e5:f4:cc:85:a1:a1:2a:
                    a7:47:7b:d7:2c:c1:06:d6:da:7c:cc:80:87:e3:74:
                    cc:27:ea:42:34:68:ee:a4:6a:c8:9a:bf:68:f1:37:
                    d8:7f:5b:4b:17:ce:ac:ec:4a:b6:03:46:9a:21:f6:
                    7b:52:97:18:6a:27:dd:dc:9a:46:f9:8e:6e:e6:92:
                    d6:ae:fc:29:3b:e2:2a:17:66:06:51:ff:ed:2f:69:
                    09:14:fa:17:f8:72:c5:ab:ea:d8:67:bf:d6:9d:a6:
                    15:33:8c:5f:14:14:93:e6:92:66:b0:0e:48:40:d8:
                    21:a3:10:93:97:17:8e:df:33:a3:73:33:a7:8a:23:
                    a0:f4:1e:ba:38:a9:e1:f4:e3:0c:40:4c:4c:32:f5:
                    e7:30:fe:25:57:e9:ae:4e:a6:52:66:1a:6a:86:1a:
                    c5:5b:df:27:c0:b4:41:92:6e:31:0a:49:6c:d3:d1:
                    39:b6:7e:64:3c:05:76:2d:2c:9d:a5:a2:c9:96:f5:
                    ac:c5:a3:51:c5:4e:ec:0b:46:c5:ff:0f:59:69:d2:
                    ba:59:46:66:3c:07:30:fd:1f:d2:41:06:1d:21:7e:
                    00:03:70:af:f4:9f:1b:4f:8e:0c:a1:68:43:b7:0c:
                    6b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:77:D7:1F:DB:52:18:AF:A9:43:DB:C3:85:0B:7C:72:B6:48:1E:9C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6aebe91-11fe-475b-8395-8eb21f912515.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fea:a400::/40

    Signature Algorithm: sha256WithRSAEncryption
         68:3b:e8:11:74:59:9e:5a:a5:71:02:dc:86:d4:bb:b6:2d:ef:
         23:53:28:e3:b4:69:0f:2b:f1:85:89:76:0a:55:f6:d5:f7:16:
         ad:12:c6:12:70:f2:3d:d8:d5:58:89:a4:f8:e3:c8:1c:8c:6c:
         ba:25:4d:00:87:d5:89:67:c4:78:1a:7a:08:dc:e5:c1:93:14:
         0c:e0:6f:1d:58:ad:45:9a:99:74:74:72:06:98:9d:56:ee:f0:
         c9:a7:b7:e6:7c:58:20:7f:ae:57:55:11:fa:8e:01:23:e2:04:
         3b:88:aa:26:f1:da:0b:12:e7:f1:de:a9:16:03:9e:32:23:14:
         92:f4:5c:5b:0e:5c:24:79:90:e3:df:d2:18:26:97:29:65:18:
         d2:12:eb:ad:a0:6f:b4:36:95:96:5c:05:e0:9c:cf:6b:ca:b6:
         b3:07:f7:6b:3d:8d:45:3a:49:54:a5:5a:41:f4:07:ff:aa:57:
         3d:96:d7:ac:29:81:d3:8e:48:30:31:8e:b5:3d:50:19:f9:ac:
         32:00:4f:c7:8d:5f:f3:28:e0:30:a1:c2:43:64:36:32:2e:be:
         20:b4:41:22:cc:3d:09:54:43:92:52:74:6f:52:94:70:fe:21:
         a9:da:85:1d:19:87:69:34:93:32:45:71:69:97:1d:8a:0b:96:
         73:c5:1f:1d
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUN0Bx4WspDgheKLR2NgOsp1XT4QwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA5MDExMTQ0WhcNMjcwMTA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BkZWU5NWFmNWU0MjEzMjFmZDk2NDY1YjQzMTU3MDVlZmNh
YWFlZTQzNGUzOTU3Y2NhMDY4MmIyZTVhYzg4ZDZmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDKQXRBpQ+r18j+SHWGJJjy0l6poDhK5fTMhaGhKqdHe9cs
wQbW2nzMgIfjdMwn6kI0aO6kasiav2jxN9h/W0sXzqzsSrYDRpoh9ntSlxhqJ93c
mkb5jm7mktau/Ck74ioXZgZR/+0vaQkU+hf4csWr6thnv9adphUzjF8UFJPmkmaw
DkhA2CGjEJOXF47fM6NzM6eKI6D0Hro4qeH04wxATEwy9ecw/iVX6a5OplJmGmqG
GsVb3yfAtEGSbjEKSWzT0Tm2fmQ8BXYtLJ2losmW9azFo1HFTuwLRsX/D1lp0rpZ
RmY8BzD9H9JBBh0hfgADcK/0nxtPjgyhaEO3DGvTAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUDHfXH9tSGK+pQ9vDhQt8crZIHpwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y2YWViZTkxLTExZmUtNDc1Yi04Mzk1LThlYjIxZjkxMjUxNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/qpDANBgkqhkiG9w0BAQsFAAOCAQEAaDvoEXRZnlqlcQLchtS7ti3v
I1Mo47RpDyvxhYl2ClX21fcWrRLGEnDyPdjVWImk+OPIHIxsuiVNAIfViWfEeBp6
CNzlwZMUDOBvHVitRZqZdHRyBpidVu7wyae35nxYIH+uV1UR+o4BI+IEO4iqJvHa
CxLn8d6pFgOeMiMUkvRcWw5cJHmQ49/SGCaXKWUY0hLrraBvtDaVllwF4JzPa8q2
swf3az2NRTpJVKVaQfQH/6pXPZbXrCmB045IMDGOtT1QGfmsMgBPx41f8yjgMKHC
Q2Q2Mi6+ILRBIsw9CVRDklJ0b1KUcP4hqdqFHRmHaTSTMkVxaZcdiguWc8UfHQ==
-----END CERTIFICATE-----