Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f189e5be-37a6-4672-9a92-e8d2041c8b2d.roa
File:                     f189e5be-37a6-4672-9a92-e8d2041c8b2d.roa (raw, json)
Hash identifier:          rN0Vbh15n8SZ+WpYpOfZtmzH4npQX9kbMzWa26hiX2g=
Subject key identifier:   92:7A:C0:D8:22:FE:99:EF:0A:47:D5:A4:C2:FB:E0:FB:94:4D:8D:50
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       57F64815481B5A17A5888D8484A48590700F0C63
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f189e5be-37a6-4672-9a92-e8d2041c8b2d.roa
Signing time:             Sat 01 Nov 2025 00:41:07 +0000
ROA not before:           Sat 01 Nov 2025 00:41:07 +0000
ROA not after:            Sat 06 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fff:81b0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:f6:48:15:48:1b:5a:17:a5:88:8d:84:84:a4:85:90:70:0f:0c:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:41:07 2025 GMT
            Not After : Dec  6 23:59:59 2025 GMT
        Subject: serialNumber=d06e0f65a3407f0f85ab2ce0098eade8e2bc2038fc1792e396bbbdcb01ac3c56, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:19:5e:57:18:9b:19:27:d8:75:e1:ad:3f:0a:
                    a3:4f:51:27:d2:0d:e9:66:94:bf:fc:20:38:20:b2:
                    66:59:3c:a5:0f:d2:02:88:22:a6:5f:a3:28:cf:62:
                    d1:84:52:de:1a:78:c8:eb:f0:bb:d6:14:b3:4c:86:
                    81:5c:17:37:d7:52:41:bb:93:fe:0a:3f:0a:35:21:
                    d3:8f:50:5b:04:18:b6:21:2d:79:b2:1f:b3:22:dd:
                    5b:8a:47:eb:9d:a7:13:13:88:55:80:91:fa:5d:e4:
                    40:7f:ea:2a:00:64:b1:2b:07:1a:3b:62:17:29:d5:
                    0c:5f:fe:a9:37:c8:95:dd:95:23:dc:c2:74:30:a3:
                    ed:08:d2:46:d8:c7:0c:d7:21:3f:f5:52:91:d3:d5:
                    e3:ec:b9:86:08:ca:d5:65:2c:2a:a0:8f:98:c9:af:
                    4d:18:b6:31:a2:f3:82:fb:fe:b6:fb:06:93:44:f9:
                    12:8b:38:e5:f4:93:da:88:8d:e0:77:e2:a5:48:ac:
                    7e:a0:5d:d2:ff:1c:fa:52:e1:a4:2a:38:5f:45:ea:
                    9f:e4:fc:a4:9e:a6:42:94:e7:6a:2b:23:ee:3a:a1:
                    ad:ea:47:6e:94:25:f0:9a:bf:4a:0e:f2:9c:05:d7:
                    3d:77:08:f1:13:26:ea:9f:12:42:bb:d1:1a:1d:1d:
                    fc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:7A:C0:D8:22:FE:99:EF:0A:47:D5:A4:C2:FB:E0:FB:94:4D:8D:50
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f189e5be-37a6-4672-9a92-e8d2041c8b2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:81b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         d7:3a:f3:56:f5:e6:82:50:01:bb:25:18:5f:c2:73:87:59:fb:
         af:f3:95:42:53:6a:d9:3a:08:bf:73:03:0c:57:64:2f:6f:b8:
         29:1b:75:5b:15:22:50:c5:dd:03:dd:02:bb:43:ee:20:5f:81:
         9c:60:6e:9b:12:0b:c4:98:89:e0:fc:a2:7f:4a:54:53:ae:55:
         00:35:d0:6b:5e:43:5e:df:b4:f3:ce:a1:06:3a:65:f7:ea:d0:
         19:50:2a:2c:51:5a:55:7f:e0:35:f2:9b:a2:6f:53:fb:09:ce:
         aa:91:03:9d:a9:de:7c:de:d2:86:d7:5a:ab:26:77:e7:7e:47:
         83:14:f7:17:98:81:83:9e:4a:db:5f:6c:90:c9:05:0e:79:c6:
         75:65:4c:56:39:10:b5:1d:83:03:01:48:72:1b:dd:38:fe:76:
         f8:8a:ee:79:35:e5:41:b0:f2:18:f9:49:48:40:66:e4:6c:63:
         bf:6f:a5:92:cd:6f:7b:50:4f:72:9b:f7:be:ea:6e:7f:67:02:
         84:17:56:d2:45:9e:a1:79:05:3d:6d:92:b9:9d:03:79:65:60:
         3b:df:f6:d1:ac:38:8a:70:db:1d:5a:6a:86:c0:13:ac:ec:3c:
         99:50:25:53:2f:07:df:1a:1b:6d:53:43:b7:c8:b0:7c:83:75:
         55:64:f9:c1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----