Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4eb1d45c-0bfc-46a3-97c6-d73b28cd8a0e.roa
File:                     4eb1d45c-0bfc-46a3-97c6-d73b28cd8a0e.roa (raw, json)
Hash identifier:          bnJDuo2W2Zmje4a/jvXu+ROP2jT4TC3CaQk0LKQMm+I=
Subject key identifier:   DF:F2:2E:C2:7B:E8:44:5E:E1:64:A7:3B:85:74:BC:14:B7:FD:44:93
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3680B7DB8F1AAD40FF340FD06B4D4AB8B140620C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4eb1d45c-0bfc-46a3-97c6-d73b28cd8a0e.roa
Signing time:             Tue 28 Oct 2025 00:20:47 +0000
ROA not before:           Tue 28 Oct 2025 00:20:47 +0000
ROA not after:            Tue 02 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fa0:5000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:80:b7:db:8f:1a:ad:40:ff:34:0f:d0:6b:4d:4a:b8:b1:40:62:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 28 00:20:47 2025 GMT
            Not After : Dec  2 23:59:59 2025 GMT
        Subject: serialNumber=4147c96b3590711e33291d136da7e24328b0952cbe2c7ec76135ee205d5d3d69, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4d:53:8c:e9:4c:0e:6c:f3:eb:6d:26:d7:78:
                    38:30:46:2f:65:10:f3:2a:99:c9:e9:96:fb:52:41:
                    2f:e1:f1:dc:4d:ab:08:5b:93:e7:3a:70:be:8e:f5:
                    36:4f:39:18:ee:c5:49:08:4a:5f:23:25:a3:14:64:
                    14:f3:6e:77:53:6d:d9:40:4b:43:79:6c:d6:33:30:
                    21:8b:2b:b9:73:19:a3:94:d8:c2:54:83:60:02:3f:
                    37:29:01:df:1d:01:fe:22:9f:4f:c2:01:97:56:3a:
                    bc:9d:c8:36:90:e9:f5:40:5a:a5:fe:e5:48:fa:cf:
                    6b:36:28:e0:93:64:ff:e5:3b:b3:be:3c:f0:ac:25:
                    f2:de:6c:fb:23:e4:bf:d1:7a:16:7b:93:ec:a2:f3:
                    c6:36:0d:a5:80:45:1e:cf:6b:70:de:0f:31:6d:8e:
                    d9:22:c6:f7:c6:83:86:31:27:e5:5f:90:8b:ad:c9:
                    bf:12:51:f5:3f:f8:55:09:69:7f:3a:37:89:ea:ea:
                    96:f0:20:42:65:f9:2d:2a:8f:9a:48:76:87:b2:ff:
                    a4:c0:f6:b7:59:e0:37:05:9b:10:2c:ce:ab:82:a5:
                    97:fb:47:98:7a:24:2d:f0:a5:26:19:70:b7:6c:1e:
                    31:cf:87:5f:c5:28:b0:9d:e1:35:a3:73:b6:fb:28:
                    eb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F2:2E:C2:7B:E8:44:5E:E1:64:A7:3B:85:74:BC:14:B7:FD:44:93
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4eb1d45c-0bfc-46a3-97c6-d73b28cd8a0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fa0:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         c8:4e:98:99:48:e5:a0:a5:3d:57:99:0c:59:db:d1:9b:ab:d4:
         f3:a1:64:6f:51:af:f9:65:c4:58:d2:fe:72:1d:85:5a:89:0a:
         ca:a1:05:5d:24:c8:49:15:8f:00:44:b2:ba:a0:05:e4:71:b4:
         1a:38:2a:5e:d6:13:47:32:c8:45:fa:78:9f:cc:4f:8e:20:01:
         a4:a0:2b:4c:da:b9:a7:67:c8:ca:0c:56:fc:20:cc:04:2e:76:
         8f:e1:43:2d:0c:9a:e8:91:e6:6f:86:3f:a1:86:6a:b8:d2:41:
         7e:5b:a1:ed:96:c8:bb:71:1c:67:7e:42:df:15:b1:27:47:2b:
         d0:19:b1:71:ac:f5:17:d3:88:a2:01:50:0c:3d:70:9c:2c:4f:
         b1:2f:73:43:27:52:1f:6c:52:41:37:da:2d:43:61:b2:74:e4:
         31:10:21:2c:65:47:3c:50:08:7c:8e:32:30:94:0f:99:9e:46:
         5a:86:45:dd:9a:ab:50:59:21:5a:fd:6b:d0:5b:6d:28:ab:73:
         4b:83:03:cf:76:f4:41:ee:ab:5b:81:a3:04:52:6d:36:63:6b:
         41:fa:fb:ee:6f:62:70:ab:5a:ec:2c:41:ad:fe:3f:6b:b7:a4:
         f4:06:df:c1:c2:8e:de:e4:9c:94:76:31:94:f8:4c:cc:10:4e:
         a6:86:a9:34
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----