Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9f6fff0-b02c-4852-9d36-8f9ebf538470.roa
File:                     d9f6fff0-b02c-4852-9d36-8f9ebf538470.roa (raw, json)
Hash identifier:          WR7foEYDeevk8XGCYg0HZ1mwEU8vxuEMiPhON3XngDc=
Subject key identifier:   7A:5B:04:2C:A9:20:A7:36:2B:2A:82:69:40:9D:19:60:AC:75:52:F4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2295A98F9270D918779B20DBF4110DE42B1280E6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9f6fff0-b02c-4852-9d36-8f9ebf538470.roa
Signing time:             Fri 31 Oct 2025 00:30:48 +0000
ROA not before:           Fri 31 Oct 2025 00:30:48 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f61:ec40::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:95:a9:8f:92:70:d9:18:77:9b:20:db:f4:11:0d:e4:2b:12:80:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 31 00:30:48 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=f098441078ed94b92b7672179de2d0ef855f3a21fcb74345dc006b80ed533663, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0b:2a:a3:d5:04:91:59:b9:bd:57:ec:19:2d:
                    2a:81:56:c4:b1:ae:c6:89:f0:26:0a:2f:2f:61:ba:
                    58:d4:e6:4a:e7:0f:0f:7d:85:05:c0:87:12:95:12:
                    79:4b:4e:f4:8e:89:ae:e2:90:a2:d8:e2:d5:3e:6c:
                    65:fd:a2:24:59:0a:db:ed:9a:b9:d2:f9:4a:0c:d1:
                    2c:82:10:77:91:f4:13:93:2a:db:58:d7:bb:d2:0e:
                    c6:ca:35:58:d1:1c:fb:e6:91:e9:35:a7:09:2e:1a:
                    15:e4:89:3d:5b:6e:07:84:98:c8:d2:00:1d:42:e6:
                    c2:55:0a:34:9a:8a:b9:58:95:2c:88:ef:bf:b3:4f:
                    a9:7c:b8:aa:62:5e:e5:39:7d:98:58:dc:ae:e7:9a:
                    95:89:b2:c7:15:70:f5:48:3d:89:0e:5e:dd:81:96:
                    e0:ab:84:2c:fe:4a:1b:32:95:cd:29:dd:0b:ca:1b:
                    7c:4b:35:bc:90:08:f9:49:2b:07:c0:63:ee:1a:ab:
                    3f:32:b5:f5:49:4d:f3:95:95:06:86:cc:79:25:a6:
                    36:14:01:9f:b6:e8:33:f5:49:f7:13:8d:94:ef:c1:
                    39:e7:64:36:5d:8a:dc:4e:1c:79:75:7c:2c:5d:08:
                    e2:f1:43:bc:4a:52:57:d0:01:50:84:cb:4d:7f:a4:
                    8a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:5B:04:2C:A9:20:A7:36:2B:2A:82:69:40:9D:19:60:AC:75:52:F4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9f6fff0-b02c-4852-9d36-8f9ebf538470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:ec40::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:14:d5:a7:e6:8b:1c:92:43:51:ab:df:f1:61:da:8a:e7:45:
         ef:6e:c6:b9:49:03:19:c7:4f:c5:c9:a8:67:44:21:69:db:e9:
         f9:fb:60:10:6e:da:62:72:bd:71:0c:5b:f0:fd:ef:d8:52:50:
         fb:cc:b8:ac:11:1b:b3:05:57:ed:23:41:fc:62:c9:04:53:a4:
         dd:f0:25:4d:a9:3d:6e:40:56:7d:13:53:73:45:11:8c:76:78:
         c1:81:c4:e7:b4:77:53:d0:99:78:42:ed:13:74:e1:c0:fa:7f:
         17:5f:b6:6a:ce:f5:b3:82:25:23:d0:93:c8:de:da:2a:c2:bb:
         42:fd:17:88:b1:28:a5:72:c0:1f:77:b6:2a:5c:7f:50:8b:f1:
         0e:b2:c6:e3:25:78:f7:22:9b:8b:a4:ff:b9:fe:e2:d3:11:40:
         c6:94:88:9e:44:e0:52:93:e7:83:8f:64:4b:66:8d:85:9b:ff:
         ac:47:89:ab:cc:e5:78:5e:b5:53:d1:2f:41:c4:db:9a:10:2e:
         23:0a:b6:45:70:0d:e8:5f:11:23:c8:4a:cd:eb:dd:d2:e5:6b:
         c3:77:f0:0e:de:59:d0:c6:a9:aa:cb:05:7e:56:5f:31:90:ba:
         6d:61:1d:f0:08:7f:53:61:93:4c:d4:65:97:7c:ba:5e:a4:0b:
         34:22:8b:19
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----