Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ee79c98-182f-4893-8e2e-0282a7731dda.roa
File:                     3ee79c98-182f-4893-8e2e-0282a7731dda.roa (raw, json)
Hash identifier:          hf5VYzZ/f+/wBamqbY0a7kMxti6Q/eE4TW/OSa+AC7U=
Subject key identifier:   EA:DA:CC:43:56:51:28:0F:96:8E:2E:62:98:6F:BF:B9:86:9E:95:CA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       484D3B8CF4EF9EF67565EA4D2C17B516998790A4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ee79c98-182f-4893-8e2e-0282a7731dda.roa
Signing time:             Sun 26 Oct 2025 00:20:05 +0000
ROA not before:           Sun 26 Oct 2025 00:20:05 +0000
ROA not after:            Sun 30 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1e:8000::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:4d:3b:8c:f4:ef:9e:f6:75:65:ea:4d:2c:17:b5:16:99:87:90:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 26 00:20:05 2025 GMT
            Not After : Nov 30 23:59:59 2025 GMT
        Subject: serialNumber=17cebd2c99b78b6b7083f8995a0e2642239e9e47b7b9f953146df61700879afe, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:45:17:d3:ab:38:92:47:f8:00:c3:e5:30:3e:
                    b8:7c:ee:33:96:81:31:1c:09:70:5b:26:cc:08:55:
                    a0:55:31:c9:f9:44:6c:7e:3e:d6:c1:a1:d5:57:e3:
                    00:a1:fb:46:c2:69:ac:e8:9f:92:59:5a:1b:44:0c:
                    00:15:b8:2a:93:3a:73:63:b3:7f:f6:ca:5a:1c:7c:
                    c8:14:f9:64:91:c3:98:1a:9c:cc:f8:ba:d6:8b:d9:
                    f8:89:93:ac:d8:01:84:c5:31:48:bd:b7:51:36:5d:
                    2e:b8:5f:14:ce:d2:3a:05:c0:9a:2b:26:9a:e1:f8:
                    34:a9:9f:a3:a0:56:90:c4:b0:5b:0e:27:a4:a8:40:
                    52:02:ed:d6:ce:e4:b7:23:45:d7:72:e0:c9:25:4c:
                    d7:53:af:fd:19:cf:5d:6e:04:12:5f:0e:3a:89:af:
                    73:cd:a2:f3:28:be:48:98:f0:86:4e:19:a3:58:ce:
                    f7:cf:a0:a3:16:9e:88:1e:29:f7:bb:02:e5:dd:54:
                    38:12:cd:70:17:11:4a:0d:36:08:20:bb:c0:f1:ca:
                    b7:16:a7:e3:26:83:68:28:81:eb:39:9f:ff:36:83:
                    66:1c:e4:39:62:89:21:5d:53:22:ab:f5:10:95:9f:
                    78:5e:ea:7e:5e:ec:4f:c1:d4:e8:36:41:6c:51:01:
                    c0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DA:CC:43:56:51:28:0F:96:8E:2E:62:98:6F:BF:B9:86:9E:95:CA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ee79c98-182f-4893-8e2e-0282a7731dda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1e:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         13:4c:bb:11:94:f9:f2:44:fb:bc:8c:3a:a3:f9:bd:8c:7c:c5:
         b9:26:3f:0f:1c:73:56:ee:a9:4e:db:72:e4:87:78:db:32:c1:
         d5:39:86:2d:9b:e4:f9:bc:74:06:f1:62:86:da:72:19:80:2d:
         d8:21:90:27:82:eb:05:bc:68:ae:f7:e8:14:22:d9:34:06:ee:
         36:31:aa:2e:ae:39:8e:01:93:10:2d:f9:70:a4:22:de:52:46:
         70:92:11:6f:19:51:90:a1:78:0b:b1:00:8a:1e:40:eb:d8:7b:
         49:49:56:22:9a:20:be:a6:ca:e7:e7:09:12:26:78:25:b3:ee:
         22:b8:d2:4d:47:0b:aa:85:c1:85:cd:d5:ee:6a:b4:62:f2:eb:
         7b:28:7f:70:b1:ca:8d:3e:cc:42:63:33:02:75:51:1a:24:9b:
         9f:45:56:fe:2b:e6:6f:08:94:6c:f0:c0:b2:44:9a:14:bf:41:
         25:ce:4e:50:f0:88:96:2f:82:88:0d:c7:ad:93:10:51:72:ab:
         d5:29:5c:04:ef:0b:1f:2a:a0:1e:9c:32:8a:3b:4a:39:32:24:
         1c:91:a4:0d:eb:2c:35:3a:ce:54:60:74:f2:d9:16:06:83:ea:
         1b:a8:15:6b:a4:8a:9a:e4:b6:6f:5b:3b:7a:21:f3:73:1d:21:
         46:5f:86:bf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----