Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8ce8947-d451-4685-9ed8-73575b987c15.roa
File:                     b8ce8947-d451-4685-9ed8-73575b987c15.roa (raw, json)
Hash identifier:          R0tBd7LeQ1mMfoDzxvRGBu6563wKktGdikNV+TmC0Mc=
Subject key identifier:   C4:00:27:B0:DC:00:A2:F6:88:96:C2:62:16:21:9B:6E:8C:07:79:5B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4BB39F4571576DF463B4D1C68F33FAEA890DD19D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8ce8947-d451-4685-9ed8-73575b987c15.roa
Signing time:             Tue 04 Nov 2025 00:21:33 +0000
ROA not before:           Tue 04 Nov 2025 00:21:33 +0000
ROA not after:            Tue 09 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f25:c000::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b3:9f:45:71:57:6d:f4:63:b4:d1:c6:8f:33:fa:ea:89:0d:d1:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:21:33 2025 GMT
            Not After : Dec  9 23:59:59 2025 GMT
        Subject: serialNumber=d77db7c452c096fd06dbe4a5be29efa9664fc2bf54b622cb96b68f051eb58cb0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9d:aa:5c:52:bc:56:66:03:22:90:fc:02:19:
                    25:80:76:99:bc:52:df:58:b0:1a:43:1e:c2:ec:54:
                    2f:f6:99:29:e6:d6:9b:4a:a0:ad:e8:35:78:86:f6:
                    c4:9c:1d:b7:80:68:74:db:05:73:f0:28:8a:31:cb:
                    3a:99:8a:71:c6:ec:03:48:01:d2:27:84:69:5b:ee:
                    7d:2d:77:4e:eb:e5:9a:51:2c:28:5c:48:f0:32:c7:
                    69:24:22:20:a9:6b:4d:d6:b1:35:b1:f8:28:8f:53:
                    b8:48:1f:21:dc:2b:a1:e0:e9:55:02:e5:be:5d:56:
                    e1:2c:81:b8:ca:06:d7:b4:0d:5d:ec:13:55:4f:ed:
                    e1:dd:36:d6:2a:c0:8f:a5:3b:9a:8b:c4:8f:71:ed:
                    d2:e6:b2:e6:6d:9b:b3:7d:83:e1:6c:bf:38:00:46:
                    22:01:4f:c5:75:c7:5b:c2:ff:ff:3a:c0:90:b4:56:
                    3e:70:b2:12:bb:01:50:a8:92:23:ed:81:7d:b7:7e:
                    ac:30:3f:b1:8d:7c:eb:e9:4f:9a:e7:39:3a:ef:d6:
                    22:e4:d0:43:e4:42:7c:c8:b7:fc:8e:d9:04:9c:0c:
                    ae:0c:6d:2c:87:ef:40:67:7f:d1:0c:d6:13:59:fa:
                    21:96:97:5c:c5:39:60:4e:35:00:06:41:d8:16:57:
                    dc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:00:27:B0:DC:00:A2:F6:88:96:C2:62:16:21:9B:6E:8C:07:79:5B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8ce8947-d451-4685-9ed8-73575b987c15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f25:c000::/37

    Signature Algorithm: sha256WithRSAEncryption
         0e:41:d5:db:af:d4:3a:63:f9:7c:bb:5b:20:66:cb:4a:53:2a:
         eb:d9:29:ec:23:76:21:54:14:9d:b2:4d:80:76:2a:f4:c2:1c:
         2e:67:c9:c7:cb:5a:25:0c:f6:0e:34:0d:40:75:76:31:67:39:
         fd:24:6e:23:8e:02:e8:5a:a3:bf:2b:ae:7c:76:1f:1c:80:ee:
         66:59:57:17:21:2e:78:11:91:a4:8e:71:70:bf:28:9a:70:a7:
         62:68:ea:0c:12:8d:ad:69:e1:d2:6a:20:0a:46:1d:08:b8:8e:
         ad:7d:ce:a8:7b:06:71:d9:5f:55:ed:8c:7c:7c:28:41:03:a1:
         e4:9c:88:67:67:e1:bb:fb:01:e4:91:11:72:9e:57:9b:de:58:
         d7:f1:5c:f0:a2:dc:4a:62:fc:88:91:18:29:76:6c:b9:a8:5a:
         8c:9f:99:c4:d9:ec:91:64:a6:f4:38:33:95:a4:40:38:16:a9:
         01:ff:97:32:8c:53:41:ea:2c:39:8a:fe:ef:54:ac:78:a3:92:
         fe:3b:f7:18:6b:09:dd:0c:79:10:09:9d:91:ea:72:6e:03:1a:
         f1:e8:90:94:26:9f:ac:de:04:51:90:48:b3:5b:26:90:80:53:
         4b:4c:57:eb:90:a0:a5:27:5a:cf:7c:70:c9:4b:76:3f:d8:6f:
         04:15:c5:85
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----