Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a8c5a5b-1366-464c-89ae-c6aaa66ca213.roa
File:                     4a8c5a5b-1366-464c-89ae-c6aaa66ca213.roa (raw, json)
Hash identifier:          +P6fG8hgpT963tp1RNc/q3Ze36kFtlGAYY4wHhHirTY=
Subject key identifier:   84:6F:99:96:53:F1:37:6B:63:FA:57:95:73:4D:30:DA:19:10:8D:DD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1EBA2E49D57BBBA8B3F5475AF6CB62ABD7E5C638
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a8c5a5b-1366-464c-89ae-c6aaa66ca213.roa
Signing time:             Tue 28 Oct 2025 00:41:25 +0000
ROA not before:           Tue 28 Oct 2025 00:41:25 +0000
ROA not after:            Tue 02 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffe:4000::/39 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ba:2e:49:d5:7b:bb:a8:b3:f5:47:5a:f6:cb:62:ab:d7:e5:c6:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 28 00:41:25 2025 GMT
            Not After : Dec  2 23:59:59 2025 GMT
        Subject: serialNumber=5b5dffd6a8c953c94e94ca7c139c8d77a87b6a1e25ec01b746cdce45271a0a57, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5d:6c:6e:b8:5c:ad:21:00:8d:8e:f7:8c:4e:
                    cd:71:65:54:31:c0:e2:01:64:54:36:68:6a:77:5f:
                    9d:20:ec:b1:51:c7:69:ee:0e:45:0f:d7:c8:14:5f:
                    33:76:ef:e9:d1:5b:e0:fe:d3:89:8c:9e:45:fe:7c:
                    cb:1a:30:48:e2:b6:29:f6:e8:93:9e:5e:c2:42:37:
                    71:34:3e:c2:ff:b6:bf:5a:29:ae:3b:cd:78:a5:9c:
                    11:9a:e4:10:0f:38:93:32:af:1c:6a:cf:da:43:80:
                    8a:07:58:ee:ef:20:f7:5f:99:87:54:78:97:e9:54:
                    47:fd:b0:01:d7:ca:e0:9a:61:24:c1:d5:5f:33:af:
                    e8:c0:8a:eb:a8:a4:4e:f2:62:66:5e:20:26:a4:2e:
                    12:f0:84:4e:8a:23:0e:59:bd:81:67:92:f4:f8:ca:
                    68:6c:80:cf:cb:c7:91:98:1c:bd:06:7e:1d:b7:fc:
                    24:c6:9c:21:77:11:49:3a:8c:4f:b5:37:f4:20:e5:
                    f7:1f:06:0d:76:b6:24:32:9d:16:34:37:21:5b:33:
                    80:4f:0b:a7:2e:d6:a4:15:8c:a1:b4:15:5b:fe:db:
                    a2:9f:c0:e8:b4:94:5c:d0:06:0d:d3:7a:2f:86:08:
                    c8:63:48:d1:a3:b7:8c:b0:08:59:58:da:82:0f:37:
                    f0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:6F:99:96:53:F1:37:6B:63:FA:57:95:73:4D:30:DA:19:10:8D:DD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a8c5a5b-1366-464c-89ae-c6aaa66ca213.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffe:4000::/39

    Signature Algorithm: sha256WithRSAEncryption
         2c:4d:d0:8a:77:62:eb:58:4f:4d:d3:55:ac:4b:d0:45:3f:e1:
         a5:21:5a:0b:d9:b3:06:ef:ec:3e:0d:a3:e1:a4:33:b7:ee:ae:
         63:cb:41:e4:d4:93:8f:4a:7b:70:8c:1c:6f:eb:8a:03:b7:52:
         2c:7c:89:44:93:d6:ec:e9:1d:5d:cf:e5:e3:44:e1:59:b3:9a:
         30:b6:b8:82:fb:44:23:c3:57:d4:d1:16:51:9b:8c:65:15:b0:
         e9:a3:1e:7d:97:f0:dc:cd:6b:06:19:05:6f:78:3e:cb:c8:ef:
         79:89:e2:ca:2c:89:dc:16:8e:de:b7:68:27:01:41:2c:85:05:
         f9:d0:c4:b3:cf:19:62:4f:f1:1b:96:11:f3:17:61:6c:e0:c0:
         4a:1f:f4:e3:a1:ad:ef:e9:5e:1c:5d:76:7b:58:b9:f4:f2:17:
         3b:2a:02:bf:ae:52:f7:28:b8:f4:ff:4f:e2:cd:44:d9:21:c2:
         7d:0a:70:ec:bb:4a:90:07:6b:e0:83:7a:f7:b9:67:c4:91:50:
         1a:f3:f2:6c:6a:44:c9:6d:45:04:1c:1e:1d:fd:fe:78:9b:7f:
         81:11:3b:98:83:a6:10:3f:93:ca:3f:4f:45:bf:0f:fd:50:1d:
         5d:ca:a3:72:65:45:47:ab:7d:a0:e4:3b:27:c9:8d:6b:7a:86:
         9b:12:e0:0f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----