Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/317aa5f2-e2fd-44a6-8ee1-f18aa61c0689.roa
File:                     317aa5f2-e2fd-44a6-8ee1-f18aa61c0689.roa (raw, json)
Hash identifier:          OvLw3lKcuBBn7QcFur2wwmBMw3M5L9fE5YW92QK2nNM=
Subject key identifier:   A4:69:E6:90:8C:7D:C1:2A:62:55:87:1D:9B:3F:27:53:68:3D:4B:4C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       05A75D80BD5439C792369D8E10184BC5D9521902
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/317aa5f2-e2fd-44a6-8ee1-f18aa61c0689.roa
Signing time:             Fri 28 Mar 2025 17:31:14 +0000
ROA not before:           Fri 28 Mar 2025 17:31:14 +0000
ROA not after:            Fri 02 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f11:8000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a7:5d:80:bd:54:39:c7:92:36:9d:8e:10:18:4b:c5:d9:52:19:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 28 17:31:14 2025 GMT
            Not After : May  2 23:59:59 2025 GMT
        Subject: serialNumber=7272fc6ae71e1093e535f37e8a4bccc7453b488c602dad1bb9648aa59b15fccf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c3:57:b4:58:ef:4b:dc:e6:fd:56:cf:09:a8:
                    75:12:a1:cb:bc:49:a0:61:09:e5:a9:c3:ad:4e:13:
                    a8:3a:7d:29:e3:28:f3:88:d8:b8:5a:4f:76:7f:3d:
                    b5:15:00:b1:e2:c1:8c:ae:f1:a2:3e:a1:ce:56:e8:
                    cc:8a:7d:7a:ee:5c:24:2a:8d:11:ef:00:af:57:28:
                    c9:3c:09:a3:df:db:24:bf:c9:df:d8:cb:1e:df:89:
                    bf:3a:a6:32:66:10:f3:7c:f4:b9:23:a0:5d:cb:3b:
                    f8:db:96:ea:5f:78:7f:0f:34:39:37:3f:f9:88:c0:
                    cb:04:54:a7:9c:a5:a8:bd:e6:74:0e:bc:b6:4b:21:
                    78:eb:64:de:4b:0c:7c:f2:bf:82:dc:9b:ad:ae:31:
                    6b:e9:e8:63:10:9a:65:4e:82:e3:1a:55:a3:d2:45:
                    a9:2f:da:94:89:fb:eb:bf:5e:10:42:78:e3:1a:23:
                    b4:fc:03:1e:55:e6:5d:42:99:e7:a4:8a:e7:8d:36:
                    99:20:77:f2:5e:ef:04:4f:9e:f7:9f:b3:f0:2b:18:
                    da:60:cd:7a:73:64:3d:b9:5c:98:bc:bf:1b:18:8f:
                    8d:dc:4d:da:d5:0b:f4:e3:91:09:c0:8c:60:c1:6b:
                    d0:90:6a:29:a3:e5:03:2d:0e:04:23:c6:ec:2f:3c:
                    f6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:69:E6:90:8C:7D:C1:2A:62:55:87:1D:9B:3F:27:53:68:3D:4B:4C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/317aa5f2-e2fd-44a6-8ee1-f18aa61c0689.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f11:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         46:4d:b3:d3:2b:f9:fe:23:0a:2c:75:e0:a3:d7:81:e0:0a:e6:
         25:e9:65:60:5c:af:2a:07:46:3f:43:32:d4:04:56:9f:ca:11:
         2f:80:3f:00:6b:9b:11:66:1f:73:1e:71:9a:24:d4:69:1c:f3:
         33:c9:95:58:1a:53:fe:b2:0c:92:5d:4b:ce:bf:54:7f:77:d0:
         ee:40:7b:6a:51:d4:59:36:d3:96:99:42:5d:46:e2:fa:d8:49:
         23:58:b0:c9:41:86:91:ac:64:83:34:59:89:43:8f:1c:74:b7:
         6b:2e:45:ec:ad:2b:e8:55:5f:6c:28:6a:95:fc:d9:d1:9d:0e:
         9d:cf:f4:0f:bf:d3:7d:6b:0c:01:bb:cb:d7:ec:d0:f8:dd:09:
         d2:4c:ba:ad:76:fb:69:c7:91:21:95:1b:da:a4:f5:47:52:7b:
         c9:5d:01:a0:a4:9f:4a:4d:b9:1f:ab:e5:0b:37:f8:ff:c6:83:
         3d:53:eb:8b:b7:b9:82:4b:fd:2b:e5:96:33:84:f9:81:bb:ec:
         a5:02:66:59:b1:6c:17:9e:c9:e4:7c:0f:07:8e:b3:aa:a9:a0:
         a6:65:5b:a4:d9:32:5b:76:44:0d:86:0e:62:69:50:06:c1:8a:
         40:27:6a:d1:8c:b8:e2:23:c4:13:c2:56:95:ae:2e:68:b1:68:
         91:ca:61:4e
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUBaddgL1UOceSNp2OEBhLxdlSGQIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTczMTE0WhcNMjUwNTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A3MjcyZmM2YWU3MWUxMDkzZTUzNWYzN2U4YTRiY2NjNzQ1
M2I0ODhjNjAyZGFkMWJiOTY0OGFhNTliMTVmY2NmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCsw1e0WO9L3Ob9Vs8JqHUSocu8SaBhCeWpw61OE6g6fSnj
KPOI2LhaT3Z/PbUVALHiwYyu8aI+oc5W6MyKfXruXCQqjRHvAK9XKMk8CaPf2yS/
yd/Yyx7fib86pjJmEPN89LkjoF3LO/jblupfeH8PNDk3P/mIwMsEVKecpai95nQO
vLZLIXjrZN5LDHzyv4Lcm62uMWvp6GMQmmVOguMaVaPSRakv2pSJ++u/XhBCeOMa
I7T8Ax5V5l1CmeekiueNNpkgd/Je7wRPnvefs/ArGNpgzXpzZD25XJi8vxsYj43c
TdrVC/TjkQnAjGDBa9CQaimj5QMtDgQjxuwvPPaFAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUpGnmkIx9wSpiVYcdmz8nU2g9S0wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzMxN2FhNWYyLWUyZmQtNDRhNi04ZWUxLWYxOGFhNjFjMDY4OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8RgDANBgkqhkiG9w0BAQsFAAOCAQEARk2z0yv5/iMKLHXgo9eB4Arm
JellYFyvKgdGP0My1ARWn8oRL4A/AGubEWYfcx5xmiTUaRzzM8mVWBpT/rIMkl1L
zr9Uf3fQ7kB7alHUWTbTlplCXUbi+thJI1iwyUGGkaxkgzRZiUOPHHS3ay5F7K0r
6FVfbChqlfzZ0Z0Onc/0D7/TfWsMAbvL1+zQ+N0J0ky6rXb7aceRIZUb2qT1R1J7
yV0BoKSfSk25H6vlCzf4/8aDPVPri7e5gkv9K+WWM4T5gbvspQJmWbFsF57J5HwP
B46zqqmgpmVbpNkyW3ZEDYYOYmlQBsGKQCdq0Yy44iPEE8JWla4uaLFokcphTg==
-----END CERTIFICATE-----