Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01ec1176-f63e-4ca0-9194-ffea3c3f201f.roa
File:                     01ec1176-f63e-4ca0-9194-ffea3c3f201f.roa (raw, json)
Hash identifier:          lbN7jCYAybx9LwBVSI8hoPJ6QZW76K5V+8uamFRhick=
Subject key identifier:   43:B5:8A:81:56:F0:88:B6:F9:4F:04:0B:15:AC:C1:72:EC:CF:D9:89
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       51E807C549A2F50B8AE5A6ECC0DE2E5728118EF0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01ec1176-f63e-4ca0-9194-ffea3c3f201f.roa
Signing time:             Wed 29 Oct 2025 00:50:39 +0000
ROA not before:           Wed 29 Oct 2025 00:50:39 +0000
ROA not after:            Wed 03 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff3:34c0::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e8:07:c5:49:a2:f5:0b:8a:e5:a6:ec:c0:de:2e:57:28:11:8e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 29 00:50:39 2025 GMT
            Not After : Dec  3 23:59:59 2025 GMT
        Subject: serialNumber=811446aea0d7284e5117f99e5c7f63e1ac5c9ddf45509e263b45ff2307be6020, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c1:33:47:25:aa:dd:f8:c2:0a:a0:46:d7:8e:
                    dd:f0:aa:43:79:69:04:09:8c:28:49:19:19:5a:35:
                    50:e2:d4:58:f0:f2:a5:38:2c:23:88:2f:4d:dd:d1:
                    61:05:b4:e7:2b:e5:61:47:bc:d1:8a:8d:5c:e0:5c:
                    00:55:ba:59:30:ba:e9:d2:1b:86:22:82:27:e6:a3:
                    d2:37:87:2e:1c:e2:24:80:13:03:d2:30:63:5d:ea:
                    7e:38:6f:ae:09:05:5d:b7:d3:94:50:d5:d9:87:83:
                    44:36:b8:9e:ce:e0:ca:9a:c1:be:5c:66:e1:69:8d:
                    64:54:b1:e3:c2:17:e9:15:92:ab:d8:50:12:2b:d0:
                    25:77:5b:50:ad:f6:17:f8:92:85:ca:6f:ee:54:2c:
                    0a:ab:6a:16:59:2e:16:49:21:0c:75:a5:26:ba:7a:
                    7b:62:53:12:21:a4:c4:91:20:07:e6:af:ce:86:62:
                    fb:9d:06:96:b3:93:6d:e3:b3:a2:b5:4f:53:69:6d:
                    7e:0f:52:8c:a0:e4:6d:97:f7:10:09:f8:db:54:e0:
                    d5:fa:2a:7e:52:6c:59:64:24:7b:48:ef:f1:92:04:
                    22:98:ea:98:06:64:e0:52:0c:ab:ba:89:2c:14:81:
                    dd:6d:8f:7d:b3:20:f0:3b:83:56:88:60:d8:0d:f1:
                    01:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B5:8A:81:56:F0:88:B6:F9:4F:04:0B:15:AC:C1:72:EC:CF:D9:89
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01ec1176-f63e-4ca0-9194-ffea3c3f201f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:34c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         d0:06:b8:b9:c6:30:bf:17:76:b5:93:e6:e4:b5:ce:64:25:8c:
         dd:e7:7a:82:12:22:0a:d9:84:98:3e:a5:ec:a9:9d:85:ad:78:
         6e:01:af:9f:7f:1c:9a:c4:b2:54:2c:fa:04:2f:9a:f7:0a:70:
         6f:85:27:3b:b3:a4:c9:90:7f:89:1d:f6:70:9f:d5:8a:5d:f9:
         e0:a3:6b:83:c6:91:b7:ec:fc:ee:f8:bd:39:5b:d6:b5:f2:f1:
         e3:32:f2:74:2e:60:e1:96:6a:c5:9b:06:cf:29:d3:dc:a3:e2:
         4d:b6:cf:40:b2:6b:49:0e:00:a9:b7:9b:4e:d0:dc:96:5c:2f:
         31:5b:de:e3:b3:65:69:67:9f:22:e8:d1:c7:5e:d2:72:8c:b2:
         d7:d6:50:da:10:8c:30:a4:3a:42:b6:63:0a:7f:6e:af:b6:07:
         4e:69:d1:7b:f1:c9:b5:76:a0:39:12:e8:b1:f4:8b:a3:94:45:
         3c:34:2d:56:2a:6e:e2:ce:be:45:fc:7f:da:7f:17:31:6c:54:
         14:0b:87:06:7c:80:f6:0c:b2:84:87:df:78:3d:12:9e:06:fa:
         55:fe:b1:fe:b6:a9:95:04:c2:42:fd:16:f5:87:38:01:fa:ce:
         25:2f:1f:14:94:82:39:1f:c7:a0:d1:e0:76:d2:dd:ab:54:75:
         ba:06:3f:ff
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----