Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6eec4c3-a22b-44b7-9abf-9e7b2bd1b310.roa
File:                     e6eec4c3-a22b-44b7-9abf-9e7b2bd1b310.roa (raw, json)
Hash identifier:          2qQXvWZmk/Ro13yZfRQoVr4SJSj8jm3MePY8YqOGS+8=
Subject key identifier:   5B:F5:89:77:62:93:6A:AF:43:33:E0:78:61:CA:AD:7E:D4:A5:44:7B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       080BC13B0FD1F735798AA15038E0D241FE4156F5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6eec4c3-a22b-44b7-9abf-9e7b2bd1b310.roa
Signing time:             Wed 22 Oct 2025 00:10:07 +0000
ROA not before:           Wed 22 Oct 2025 00:10:07 +0000
ROA not after:            Wed 26 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f68:6040::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:0b:c1:3b:0f:d1:f7:35:79:8a:a1:50:38:e0:d2:41:fe:41:56:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 22 00:10:07 2025 GMT
            Not After : Nov 26 23:59:59 2025 GMT
        Subject: serialNumber=7340c8ee8afbd1f0edf493ef65aed2f9b5ddf3e807b96ba98826065217382e10, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d4:9c:69:4e:f0:5a:10:3b:46:af:b0:cc:ff:
                    27:95:ad:24:34:21:6a:44:a8:5a:77:a8:e5:a8:56:
                    a6:3e:97:61:8d:00:a6:45:10:35:33:e5:f1:ab:a9:
                    bd:d7:c1:b0:e5:b3:e6:2c:6b:be:f0:87:ea:8b:41:
                    4f:81:e3:52:6b:c3:07:14:1a:34:4e:82:cc:93:0e:
                    c4:ba:56:49:42:e5:99:ce:cb:68:be:b0:c8:a2:a0:
                    81:eb:2a:33:35:aa:66:cb:8c:b5:c4:2b:52:00:f6:
                    8a:b8:7f:59:57:1d:15:bf:7e:fb:d4:65:69:84:19:
                    24:22:59:d6:d5:91:e3:ab:97:f8:1d:8a:d8:00:f2:
                    c8:1b:b8:37:1e:da:e9:08:00:e5:6b:3f:66:69:4d:
                    48:65:6d:40:92:a3:01:86:14:23:f9:29:05:d1:bd:
                    b5:0c:c2:b2:f4:31:68:05:1a:4f:87:f8:8a:43:25:
                    92:86:72:fd:e1:f1:05:f8:02:66:d3:79:d6:5f:ab:
                    ee:aa:50:67:c7:57:a4:cc:26:ee:7d:d2:09:4d:7e:
                    f4:e1:ed:1b:de:ad:4f:fd:cf:e5:11:21:13:22:2c:
                    41:a7:4f:56:3b:5b:a9:40:62:a6:46:57:02:07:39:
                    fb:51:d4:02:9b:39:e7:fd:a1:bc:4f:13:af:f8:f5:
                    a4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F5:89:77:62:93:6A:AF:43:33:E0:78:61:CA:AD:7E:D4:A5:44:7B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6eec4c3-a22b-44b7-9abf-9e7b2bd1b310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f68:6040::/46

    Signature Algorithm: sha256WithRSAEncryption
         c9:5d:7b:c8:85:7e:3b:ea:aa:86:92:ab:a6:f9:1f:6a:be:0f:
         a5:a1:d4:64:9e:05:3d:eb:d1:7c:e9:20:8b:a8:bc:09:72:8c:
         11:2f:e9:f6:61:7c:ad:1f:99:da:18:2c:0f:c2:96:f8:9a:61:
         30:3c:e2:75:63:5c:88:40:3d:0b:c5:be:c8:2b:9f:23:a5:56:
         7e:79:18:34:a5:ac:4f:65:ad:bd:8a:35:c5:1f:d2:76:3c:71:
         bb:34:2e:2f:19:75:b8:60:f8:4b:fc:67:18:b9:04:83:e4:39:
         ff:7a:4a:74:a5:3f:f7:61:db:39:2c:07:ff:ee:19:27:56:7c:
         1e:d6:47:f9:34:ec:d7:4b:d0:fc:10:14:44:c8:09:7f:f2:e9:
         32:79:11:24:55:88:c1:c7:96:db:b8:48:d9:75:29:ef:c3:88:
         fe:ed:78:c5:e7:27:61:ba:32:e6:f9:48:dd:3f:e9:64:10:71:
         ec:2a:5f:b7:4a:5d:ad:97:6e:41:47:e8:04:54:89:fb:ba:15:
         34:3f:89:a6:1b:43:f2:ba:f6:71:7f:0b:1e:2b:01:23:dc:39:
         60:a7:77:68:54:f3:3e:b5:15:f8:58:af:32:c7:53:57:5f:e9:
         7f:59:ed:b6:07:b3:63:f5:74:a9:85:6f:b2:c4:a0:95:b2:bb:
         7e:32:5e:9f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----