Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7488d36c-11a1-4b7f-ad9e-71af6b1fa8ba.roa
File:                     7488d36c-11a1-4b7f-ad9e-71af6b1fa8ba.roa (raw, json)
Hash identifier:          zrRXl28ElsSc2htwYtz9+/JQIbj2Yrqsg6rwtlyfq98=
Subject key identifier:   CF:87:49:8F:12:D0:D8:6B:CE:F4:8C:E6:A7:99:74:E7:5A:8D:EB:5F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       79C7B400E63CB63B1C7A59A7FFE1185E7C5544B0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7488d36c-11a1-4b7f-ad9e-71af6b1fa8ba.roa
Signing time:             Sun 26 Oct 2025 00:21:02 +0000
ROA not before:           Sun 26 Oct 2025 00:21:02 +0000
ROA not after:            Sun 30 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff1:c000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c7:b4:00:e6:3c:b6:3b:1c:7a:59:a7:ff:e1:18:5e:7c:55:44:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 26 00:21:02 2025 GMT
            Not After : Nov 30 23:59:59 2025 GMT
        Subject: serialNumber=ec74adc7bd98b6173beead671c5035fb2815be24cf418ade40138d8a6be9f219, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ee:c9:24:6f:6b:9c:b4:89:6f:32:d4:39:2f:
                    61:9d:26:80:e0:0e:bf:03:6c:61:f4:e2:81:83:55:
                    1f:74:ec:4f:cc:52:8d:16:ad:94:c5:08:b9:7d:df:
                    24:40:ea:7a:b1:90:dd:cf:9e:67:7e:2a:5f:c4:b5:
                    42:9a:24:17:4e:26:8d:57:07:4f:de:93:60:ab:4d:
                    1b:55:e4:86:cd:46:eb:7a:82:2c:a6:b1:f1:36:8c:
                    dc:dd:31:4e:a0:96:8f:95:f1:ba:c3:46:b6:6d:ae:
                    18:f8:ce:4c:a4:90:50:b0:e4:95:4b:09:aa:6f:da:
                    e6:68:d8:3d:de:9d:88:4b:e9:a7:4c:09:7b:eb:de:
                    c6:58:aa:ab:43:99:cf:ee:b5:4b:0f:49:5b:78:df:
                    17:c9:8b:49:66:eb:f3:69:b5:9a:8b:02:95:14:2e:
                    4a:ca:03:d8:eb:91:4d:65:9d:a2:6f:c9:8f:bd:e6:
                    79:25:d1:d3:c3:46:4e:3a:6f:07:0e:35:82:ce:68:
                    c7:a7:8c:3b:74:c9:a1:36:1a:ea:b9:b4:80:43:b7:
                    8f:99:ad:08:99:3b:a5:eb:8f:fb:da:b7:bc:a7:0e:
                    b1:3a:94:72:13:c0:f4:9d:d2:b6:65:19:55:9f:fc:
                    cd:db:d7:0c:21:2f:f2:52:94:69:99:c3:55:67:c2:
                    fd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:87:49:8F:12:D0:D8:6B:CE:F4:8C:E6:A7:99:74:E7:5A:8D:EB:5F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7488d36c-11a1-4b7f-ad9e-71af6b1fa8ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff1:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         59:98:21:7d:9b:e4:53:d0:9d:8a:65:5a:31:14:9d:22:6c:ad:
         0b:80:67:5d:25:cc:9e:56:ee:07:1e:e2:6e:e8:97:57:49:90:
         81:47:37:ec:7c:31:5f:63:0d:15:b6:78:fe:e5:f3:db:b3:80:
         38:05:ef:fc:ba:8b:43:d1:e2:b7:56:5d:6c:94:fd:66:88:98:
         0a:dd:62:7f:72:4b:8b:1c:4c:81:12:3e:b3:d2:20:52:52:c8:
         09:ed:9a:b7:c2:44:03:96:0c:36:b4:ef:e5:01:80:f4:67:f7:
         19:5a:4f:de:65:c2:ad:d4:31:ba:6d:cd:47:6c:0d:a3:98:56:
         fd:fc:c0:86:df:37:b6:f3:5b:2f:44:25:b4:08:06:a6:75:30:
         cd:52:f3:5a:fb:46:59:44:75:ac:8b:2c:ad:50:54:6e:64:5f:
         b7:d4:9b:32:08:49:2d:80:7c:dd:8d:67:a0:2f:90:d2:4f:10:
         b9:ce:9a:ae:3b:7e:37:3d:f5:38:9c:2a:d3:e0:b6:ed:1d:e1:
         9f:b1:64:d9:28:08:10:f3:7f:a0:e5:ec:8b:a6:fe:47:db:88:
         cd:2f:df:59:8a:9f:8c:3d:b9:9a:51:93:df:ec:c8:11:0a:0d:
         88:7e:01:8a:c2:01:70:57:2e:32:75:25:af:63:59:c5:2b:80:
         12:6a:6b:00
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----