Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28fbaf7a-ef83-499b-8e53-0f8e657bd1e1.roa
File:                     28fbaf7a-ef83-499b-8e53-0f8e657bd1e1.roa (raw, json)
Hash identifier:          mH15oj5cnexptNveJWjkqZmNCYYTE2Ig6fgxILxRFBU=
Subject key identifier:   49:E5:00:0E:D5:FD:3C:91:98:2A:FD:EE:33:7E:9A:F9:72:85:B1:B1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7EB8CCE08E86B2A70A5327615946898AADEF2636
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28fbaf7a-ef83-499b-8e53-0f8e657bd1e1.roa
Signing time:             Wed 29 Oct 2025 07:24:59 +0000
ROA not before:           Wed 29 Oct 2025 07:24:59 +0000
ROA not after:            Wed 03 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fea:4040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b8:cc:e0:8e:86:b2:a7:0a:53:27:61:59:46:89:8a:ad:ef:26:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 29 07:24:59 2025 GMT
            Not After : Dec  3 23:59:59 2025 GMT
        Subject: serialNumber=41ddbcc272c4d16f2e697fe8ff04638dec530b5cbbb040ec11aa61b25ac21713, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:77:5d:3b:20:08:1c:37:ec:44:9c:ec:b9:9d:
                    8e:99:5e:28:b3:fb:86:d8:94:e8:e1:35:81:b9:55:
                    62:64:d6:f7:8b:7f:42:96:8a:2a:0b:84:8e:cb:49:
                    ba:00:b2:d0:2e:2c:df:27:7c:f5:da:05:f0:92:82:
                    d4:03:49:a3:01:f2:ff:54:4f:99:8a:42:75:ba:65:
                    18:1c:a2:17:ac:d1:91:fa:20:88:27:f7:64:30:b5:
                    a6:7b:84:68:52:ba:df:c6:8c:a4:6e:98:a5:d0:ba:
                    0b:68:c3:82:d5:ac:66:c9:10:f3:30:97:ab:7f:22:
                    34:9e:3c:56:8e:50:b7:88:51:da:1e:cf:03:6e:17:
                    80:23:cf:92:13:68:cc:55:76:21:1a:91:7a:43:37:
                    cd:8d:8a:8a:9a:86:b4:35:9a:63:d2:29:91:83:68:
                    1a:97:df:33:1e:50:cd:47:3f:34:5f:12:d8:0f:67:
                    ec:64:10:75:12:21:6c:68:46:e6:e4:81:45:08:f4:
                    71:70:9a:dc:c9:af:ed:5f:e3:f1:8a:a4:17:3c:2c:
                    0c:8b:85:2e:fc:5d:72:f2:fb:98:12:57:18:6c:88:
                    95:64:36:69:02:d9:6d:c2:8c:04:ab:69:50:41:58:
                    89:8c:df:a3:3a:cd:8d:ba:53:b3:0f:c8:14:f4:5d:
                    8c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E5:00:0E:D5:FD:3C:91:98:2A:FD:EE:33:7E:9A:F9:72:85:B1:B1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28fbaf7a-ef83-499b-8e53-0f8e657bd1e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fea:4040::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:10:b6:31:9e:5f:da:6c:28:d4:57:ca:a8:8e:fd:b8:9d:bf:
         ec:53:b7:b6:89:3b:5c:04:4b:0b:19:39:60:dd:65:99:b1:c7:
         4d:cc:74:73:a6:92:8b:80:50:5a:96:ab:ac:24:7f:d6:57:73:
         29:5d:64:e3:51:cd:ac:c0:7a:25:be:41:b2:17:92:1d:a2:72:
         0f:32:b2:70:cf:2d:26:de:ce:14:a0:4c:42:fa:3b:05:d6:94:
         33:6e:37:0f:01:e1:59:4c:41:4b:12:ee:10:4b:f2:7a:95:6f:
         06:b0:80:34:00:4a:90:cb:9f:82:d5:24:26:39:fb:15:ba:9f:
         09:e8:a3:a9:1f:ae:3b:dc:c8:14:4a:e9:8c:72:d7:ac:56:80:
         69:5e:88:8e:10:79:17:d4:67:19:4d:d0:8f:05:81:d0:88:82:
         fc:7e:86:32:d5:6a:0a:70:7b:8e:80:01:e4:44:86:74:53:04:
         63:f6:b9:4a:ae:74:a7:fb:ce:c8:2e:7b:91:39:6c:e1:5c:56:
         36:5a:71:0d:19:e8:ea:ad:16:b8:5d:32:d1:0b:e6:26:9b:d7:
         8c:f9:a8:56:37:fe:21:a6:ec:af:35:88:81:0f:af:18:d7:40:
         23:66:be:29:c5:db:80:01:1c:b3:92:4d:64:ab:20:44:2e:51:
         b8:44:76:a2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----