Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0330ffc3-82c7-46fb-b3d9-d918bfc7c3f1.roa
File:                     0330ffc3-82c7-46fb-b3d9-d918bfc7c3f1.roa (raw, json)
Hash identifier:          IHoe8K9qGFFcO5PfmtJLBW9BId8SDe8zSWknGLy21FU=
Subject key identifier:   6A:7E:C2:71:E6:88:C9:48:15:AC:F6:D6:89:90:85:62:0F:6B:88:C4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7805786B027D27E3110FCAE2C4EC85450D22BCA1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0330ffc3-82c7-46fb-b3d9-d918bfc7c3f1.roa
Signing time:             Sat 01 Nov 2025 00:30:58 +0000
ROA not before:           Sat 01 Nov 2025 00:30:58 +0000
ROA not after:            Sat 06 Dec 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1ff4:5000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:05:78:6b:02:7d:27:e3:11:0f:ca:e2:c4:ec:85:45:0d:22:bc:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:30:58 2025 GMT
            Not After : Dec  6 23:59:59 2025 GMT
        Subject: serialNumber=76874efaf3546ed75a2fdadc954a871ce33b1c867d9c3c3e8a403b18f4042ffe, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8e:f1:a0:d9:af:2b:e2:92:8b:3f:a3:85:10:
                    c1:b7:db:7a:d9:07:9f:26:6b:ed:75:51:20:c9:9d:
                    37:70:7c:a1:39:f9:d7:43:8a:d7:5c:6b:e5:89:48:
                    dc:8c:44:5c:a8:28:b5:89:17:2a:90:2e:70:fa:3a:
                    bf:02:bc:04:b5:dd:99:ac:24:72:14:9c:75:44:69:
                    e7:6c:74:d7:ad:cc:33:de:2c:0e:1f:f4:f1:37:05:
                    c0:b1:0c:54:4b:82:94:32:ac:a1:91:ca:f2:f3:2b:
                    b0:00:c4:f8:08:ab:26:5d:8e:de:a4:b5:c7:8f:3a:
                    ba:a6:cd:05:83:ef:2d:d3:e3:08:a9:97:e7:46:f3:
                    c4:31:03:90:c6:bd:a1:1d:28:4c:c0:c7:d7:64:c5:
                    8d:63:33:20:d0:db:f5:63:40:45:e8:7a:ba:d5:bf:
                    c9:28:60:fe:19:b4:c8:67:bd:85:b2:c9:ab:37:d1:
                    2f:53:26:35:d1:9d:4b:b3:09:43:31:12:0b:05:e8:
                    f3:57:03:10:15:1b:54:b0:ab:1c:38:ec:e2:aa:0b:
                    71:ab:89:e9:b4:23:d5:b4:e6:76:d9:4a:81:20:27:
                    13:46:86:f4:84:2e:a9:7e:a8:88:7e:d8:9f:3a:e1:
                    47:13:23:05:d7:13:2a:64:1b:c1:67:d4:38:d8:af:
                    c2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:7E:C2:71:E6:88:C9:48:15:AC:F6:D6:89:90:85:62:0F:6B:88:C4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0330ffc3-82c7-46fb-b3d9-d918bfc7c3f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff4:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b8:8c:88:3f:dc:e0:1f:dd:38:54:51:b2:00:eb:1f:c1:64:df:
         e0:23:90:94:71:fd:07:21:da:a0:83:2c:1d:a7:43:5b:6a:04:
         08:fe:fa:56:72:37:74:f2:0c:c9:15:92:b2:a9:7c:c3:5d:be:
         9c:d5:e9:50:79:75:6d:9f:49:3b:70:2a:b3:6f:a4:d8:c1:8f:
         29:a6:ba:e0:9a:20:20:51:c9:d1:ba:b3:50:e8:12:d0:0b:e7:
         03:8d:41:f9:98:33:4c:81:19:97:5d:50:88:43:80:3a:b8:0d:
         ae:0e:9d:3c:d1:2e:c2:29:04:63:c8:f2:d4:b0:a4:d0:23:7e:
         bf:8a:4e:90:43:87:57:a0:5e:7c:62:5f:03:f7:d8:ac:36:6a:
         41:bc:1e:78:ca:35:43:ef:db:59:33:96:a5:73:58:34:93:c1:
         e1:66:da:01:4c:eb:32:0d:b4:c0:dd:64:ed:c2:e8:53:9f:3a:
         0f:c6:3c:f6:55:d1:0b:5c:66:7a:36:a2:c0:05:ca:08:ff:27:
         d9:16:b0:f7:7f:a4:2b:71:ae:88:b3:00:cd:73:38:41:98:05:
         bf:a6:f5:c6:5d:59:5a:18:49:c7:62:50:9f:7a:0a:37:60:60:
         3e:47:ed:8b:fe:3e:db:e3:f4:2d:64:c8:d4:e1:50:cf:68:b7:
         ce:d3:ff:4b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----