Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6731eb50-d436-42ae-bcc6-90d9e6f43edf.roa
File:                     6731eb50-d436-42ae-bcc6-90d9e6f43edf.roa (raw, json)
Hash identifier:          4Orb/+V2H+NZrohp9qgQ8XbuXuDay9wBYgmDEwyL1eI=
Subject key identifier:   27:1F:14:AF:54:33:E6:12:E1:52:67:09:E1:87:59:F5:A5:D1:90:CE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2F626AB6583105CF4A176605377E26FFDF244D7A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6731eb50-d436-42ae-bcc6-90d9e6f43edf.roa
Signing time:             Tue 04 Nov 2025 00:21:34 +0000
ROA not before:           Tue 04 Nov 2025 00:21:34 +0000
ROA not after:            Tue 09 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff6:1000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:62:6a:b6:58:31:05:cf:4a:17:66:05:37:7e:26:ff:df:24:4d:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:21:34 2025 GMT
            Not After : Dec  9 23:59:59 2025 GMT
        Subject: serialNumber=878367fd289e09ca1f369b8537fcf0fa15c6c7defda54f34f57a2692b9c0099f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b3:60:cb:76:8a:78:0d:7f:ac:93:be:65:df:
                    14:a1:cd:56:e6:0c:80:2c:88:5a:24:59:f4:e2:2a:
                    fd:5f:4a:28:5d:db:07:ed:52:d7:d9:48:c4:a5:df:
                    4f:28:6a:e8:74:19:b0:f7:65:5f:02:df:49:a3:55:
                    df:7c:a7:83:7d:95:6b:07:f2:16:89:9c:16:16:7c:
                    aa:22:4a:69:76:c6:fe:aa:1f:86:b0:b1:01:62:bb:
                    60:fe:21:5e:39:48:7a:2e:06:70:28:87:a3:c8:50:
                    ba:4b:fc:2a:7e:86:02:b4:66:4a:3e:53:33:b7:1c:
                    33:aa:06:90:4c:9b:05:8e:ca:ed:b4:91:f1:d5:bf:
                    e1:cb:0d:3d:ee:54:fe:0e:a5:ac:a8:a9:fe:08:ec:
                    42:2b:c0:b5:97:31:1b:c3:d9:a0:52:af:7e:bd:d8:
                    21:1b:a0:6b:3d:1e:35:c8:4e:02:6a:00:30:a5:35:
                    4c:88:4a:93:97:1b:ba:3a:51:21:2a:b9:ee:49:05:
                    91:06:f8:10:14:21:2d:9e:24:6e:c5:8e:2a:0a:c0:
                    b4:e3:82:c6:fd:c4:5c:b0:a9:7b:44:4f:02:f0:6f:
                    e1:e4:0d:7d:51:8d:5c:bb:31:9f:8a:d0:72:1c:c6:
                    81:ec:c0:24:61:e2:8e:f0:5f:b5:88:d8:59:ca:af:
                    37:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1F:14:AF:54:33:E6:12:E1:52:67:09:E1:87:59:F5:A5:D1:90:CE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6731eb50-d436-42ae-bcc6-90d9e6f43edf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff6:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:c1:7e:b7:2b:01:f7:1c:f2:00:ad:e5:35:89:1d:da:49:3a:
         95:67:9d:97:02:20:e4:a2:d2:62:8e:f4:ad:aa:88:cc:f1:6e:
         51:3f:ed:5f:0a:06:17:c6:11:6a:b2:eb:8b:be:01:dd:d5:a0:
         21:09:a5:d3:34:de:88:3d:30:d3:78:b9:86:a5:0f:9e:f4:c1:
         7e:9f:f4:5b:b0:f9:52:c6:bc:41:de:95:59:28:d0:d3:65:ef:
         67:b1:0b:f1:4e:a1:e4:00:a4:39:7b:64:37:36:f4:d5:b6:92:
         99:3b:b0:7e:4d:86:9d:f1:78:ab:b6:f2:d1:73:da:ba:18:58:
         07:25:df:68:4d:82:ab:b4:13:5b:b0:33:8a:ea:f5:a9:ac:ef:
         36:e5:bc:a0:f3:fa:13:6e:05:a3:d7:f3:ac:d4:36:b3:2d:7c:
         b7:56:06:f7:3e:2f:6c:04:e1:a1:13:87:a1:b9:4f:5f:d0:bd:
         1d:49:4d:fc:8c:eb:bb:58:25:e8:ea:f4:8c:ba:74:bc:c3:17:
         51:11:e1:d7:1e:81:07:41:5f:47:a2:11:27:81:4f:5a:4b:19:
         dc:b5:e4:70:86:cc:07:59:76:8a:ed:43:a6:fe:9f:48:cf:d5:
         a9:24:84:c2:5b:f6:9b:e4:4c:7b:3a:0d:77:db:36:ef:1c:13:
         c3:12:28:30
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----