Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04334486-364d-42d9-ae11-747401f80814.roa
File:                     04334486-364d-42d9-ae11-747401f80814.roa (raw, json)
Hash identifier:          LOfAQ5aseTs6l+AeppWzx7OIf56vw1XH8snZoYyzHSI=
Subject key identifier:   F6:DF:BA:FF:B5:73:C3:23:2E:E7:36:4F:AE:FC:B8:88:6A:EA:9D:69
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6382049FB0AA6D007F7A50064869657535796C14
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04334486-364d-42d9-ae11-747401f80814.roa
Signing time:             Sat 01 Nov 2025 00:41:02 +0000
ROA not before:           Sat 01 Nov 2025 00:41:02 +0000
ROA not after:            Sat 06 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fbb:2000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:82:04:9f:b0:aa:6d:00:7f:7a:50:06:48:69:65:75:35:79:6c:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:41:02 2025 GMT
            Not After : Dec  6 23:59:59 2025 GMT
        Subject: serialNumber=e2009bb5be59e6caeff2546dfae09fbd20c6c867128c238cb53da367b6419318, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a0:39:08:7c:5f:d4:8e:0b:d2:0f:1a:ae:9b:
                    dc:75:49:77:fc:95:9b:16:1c:f0:27:10:24:bc:ed:
                    db:fe:d0:a5:9c:b3:85:5e:28:05:8f:fe:82:9e:bf:
                    bb:c2:8e:79:70:c3:0f:1f:c0:41:3b:ad:41:89:05:
                    4d:93:54:86:54:01:23:0f:67:4d:ec:99:ac:c9:7b:
                    ad:d4:54:26:de:39:03:9c:90:48:d2:17:24:30:54:
                    19:81:2b:84:f2:7a:6a:8a:5b:19:5c:ce:69:55:0b:
                    a0:22:94:7e:7f:80:21:de:e0:60:8e:44:ce:ed:fa:
                    64:5e:e0:70:39:0a:a6:8a:77:0d:5b:f4:a6:f3:a9:
                    3a:8e:c0:e1:06:bf:40:8f:b5:d9:cd:04:0c:0a:6e:
                    18:1e:52:b9:9d:7d:5c:61:7b:d3:24:1e:a5:c7:62:
                    fa:df:a5:bf:f7:84:44:61:d0:33:6a:b7:22:a4:ca:
                    a0:61:12:b6:5c:a5:d3:16:60:44:4b:96:8d:f4:a2:
                    85:dc:a2:50:ef:d9:c8:fb:82:fe:98:2b:87:ef:20:
                    8f:75:01:f7:8e:f5:21:1e:5b:18:20:30:bb:6d:f4:
                    e2:bf:bc:88:43:7d:94:10:b1:c7:96:4d:be:a1:80:
                    b9:6a:20:d1:07:f0:a5:50:37:1c:b4:48:cc:0c:f5:
                    a8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DF:BA:FF:B5:73:C3:23:2E:E7:36:4F:AE:FC:B8:88:6A:EA:9D:69
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04334486-364d-42d9-ae11-747401f80814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fbb:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         26:15:3d:a0:e7:b3:ca:76:41:bb:7e:00:af:5c:34:4d:7e:2d:
         b1:9e:2d:9b:2f:9a:b0:e0:f3:0e:f7:4a:a3:81:96:de:88:cc:
         07:ec:bd:b4:f5:06:a8:4b:24:21:0a:54:83:4c:76:65:ea:81:
         ab:52:b2:a9:c1:9b:9e:85:97:1d:e2:4e:f3:83:a3:2a:79:7b:
         4f:b7:f2:8b:2f:11:6d:e1:70:8b:4b:35:22:e6:37:5b:1f:fb:
         40:0c:99:67:cb:45:f4:f9:a3:87:9f:ad:24:87:93:53:9a:e5:
         d4:5f:d7:be:a7:99:5d:42:fa:7f:d1:c4:3d:da:00:6f:2f:b7:
         c5:4c:c9:69:c9:3d:50:35:c1:3b:c3:be:5e:7b:72:28:64:2e:
         0e:90:a2:1e:90:be:ed:67:e3:aa:28:d8:af:a6:ab:bc:b2:a1:
         70:d4:84:22:1c:24:83:8e:1f:f9:96:9f:7e:10:ab:a2:3c:d5:
         1b:d2:06:03:d2:37:83:b8:90:b0:dc:15:81:28:a2:a5:59:c3:
         6a:9b:88:64:6c:b7:42:0e:ab:e6:c1:dd:b2:28:98:59:19:a2:
         2b:ab:e0:8e:77:6c:eb:92:8e:7d:cf:74:32:64:18:52:ec:aa:
         19:83:f7:bb:8a:28:2f:9b:e5:4c:40:c6:ad:9c:36:ee:12:cb:
         ab:88:54:cd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----