Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55e8badf-419a-4e21-ae51-df5950add8d9.roa
File:                     55e8badf-419a-4e21-ae51-df5950add8d9.roa (raw, json)
Hash identifier:          Jd7YCIksutHVPJyWn0PjKpUjVO0q0/4hum5Mtw22VJ4=
Subject key identifier:   F7:8B:BE:87:A6:BF:24:06:93:90:D5:9A:40:44:48:99:4B:24:59:05
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7D7D1E5D066E222C5A19ABDBB3ACAE829B30751C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55e8badf-419a-4e21-ae51-df5950add8d9.roa
Signing time:             Tue 21 Oct 2025 00:40:52 +0000
ROA not before:           Tue 21 Oct 2025 00:40:52 +0000
ROA not after:            Tue 25 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f1a:c800::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:7d:1e:5d:06:6e:22:2c:5a:19:ab:db:b3:ac:ae:82:9b:30:75:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 21 00:40:52 2025 GMT
            Not After : Nov 25 23:59:59 2025 GMT
        Subject: serialNumber=0c28ef7b8c6ad2c035c6950a3d2082609a9ef297522c3fc7104aebbeffbf3b28, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9c:87:83:66:8f:8b:b4:f6:d5:ec:80:57:0a:
                    ff:a0:ec:38:d9:ab:db:59:0a:16:b6:de:bd:89:e1:
                    7d:ea:aa:b2:b7:40:14:b0:4b:f1:72:66:31:a0:e9:
                    41:8f:fc:0f:6e:0e:28:00:c6:b4:5d:fb:a5:a0:6c:
                    2a:3d:8f:08:b6:e5:08:78:c8:8b:d9:1f:46:a8:f3:
                    10:74:03:5f:2e:d1:70:83:0f:3f:8c:b9:d8:d2:4e:
                    95:59:d3:cc:77:5a:b7:9d:83:c0:a2:d3:04:53:6f:
                    e6:7c:ad:2f:a9:89:c5:e9:18:c7:06:b7:c1:02:b1:
                    45:b1:30:59:95:b3:76:78:3b:15:94:f8:75:57:a7:
                    7d:01:37:ad:03:8f:5e:8e:cf:68:ca:88:65:5d:cb:
                    5d:88:64:26:f3:43:9f:aa:16:b0:a5:84:7f:28:dd:
                    b3:48:cd:07:eb:ea:71:85:86:73:35:1c:db:4a:5d:
                    b6:4f:56:af:79:a6:fa:71:2c:58:e6:53:22:2c:ed:
                    39:ff:6b:b0:5d:3d:ef:99:d9:86:76:7e:0c:ac:61:
                    04:5a:98:c7:88:f5:84:28:69:7a:e2:c8:0c:cc:ac:
                    85:09:ac:05:3c:50:63:6d:80:1c:6f:bb:db:c1:c1:
                    2c:e7:94:bc:7e:a7:2c:71:a5:97:01:88:27:71:11:
                    87:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8B:BE:87:A6:BF:24:06:93:90:D5:9A:40:44:48:99:4B:24:59:05
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55e8badf-419a-4e21-ae51-df5950add8d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1a:c800::/37

    Signature Algorithm: sha256WithRSAEncryption
         31:37:8c:ab:46:82:39:51:0e:77:21:ff:68:ba:78:e6:ca:4d:
         91:60:22:2e:e6:b9:00:c6:72:fc:56:b9:75:97:2d:0d:68:d5:
         f3:78:9b:de:e1:e0:7d:7d:a6:bc:dc:19:dd:2b:1c:64:1e:11:
         42:07:8f:06:a1:03:35:e4:ac:f4:98:44:7f:0b:3c:5d:d5:7c:
         9c:03:57:aa:1b:ee:df:04:3b:33:4b:13:35:d4:88:6c:fa:34:
         f6:90:7e:75:af:94:35:37:25:0c:c2:38:9c:bb:a5:4e:2a:7a:
         4e:07:e4:cd:13:d6:2d:d1:3e:ca:c4:b3:02:46:fb:9f:37:98:
         d6:dc:92:0a:f4:4d:52:ae:48:95:66:49:0a:68:8d:28:36:bb:
         15:7e:f9:d9:80:68:67:4d:97:86:e9:af:d0:77:52:88:b1:8f:
         a0:0e:f6:31:36:14:0a:2f:49:f7:fa:67:7b:32:6f:08:f9:a9:
         c3:46:86:23:5a:9d:34:e5:c4:01:eb:c5:4c:a3:13:f7:9e:07:
         9f:ab:20:a9:8d:62:41:ff:b6:4a:b1:16:38:1b:3b:ce:65:a2:
         e5:5e:6d:4e:d2:e8:a1:17:ad:1c:72:4c:2c:f5:3c:a4:f1:dc:
         77:19:07:e5:c2:fc:70:5e:4f:10:52:16:dc:60:b7:67:c7:f0:
         a6:0a:5f:83
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----