Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f5bb40d-4fb8-483c-ac10-aabee059b01b.roa
File:                     0f5bb40d-4fb8-483c-ac10-aabee059b01b.roa (raw, json)
Hash identifier:          hd65SnWpyhP3oFgXIxhxHxay11KaGzGGRaKjMsmFJ1Y=
Subject key identifier:   BF:F7:3E:6B:03:94:36:E9:D7:57:4C:87:CA:01:C7:7A:AF:80:B6:96
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       14BDF7D19F73E401CE25A7AE8BE78278F571A703
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f5bb40d-4fb8-483c-ac10-aabee059b01b.roa
Signing time:             Sat 18 Oct 2025 01:00:08 +0000
ROA not before:           Sat 18 Oct 2025 01:00:08 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffe:7400::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:bd:f7:d1:9f:73:e4:01:ce:25:a7:ae:8b:e7:82:78:f5:71:a7:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 01:00:08 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=d427d24350e1cb0102e0e6459d140592d8b84d306a53457cca4e05c717cfa292, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a6:5b:91:62:39:0d:89:cd:67:14:2c:44:4e:
                    f6:46:a9:a5:f1:52:2f:5e:92:e0:de:55:a5:44:06:
                    af:37:4c:3b:98:97:6a:ef:fc:b3:63:cc:e2:66:28:
                    48:e6:b3:ca:62:e9:25:ec:76:56:b0:67:c3:77:54:
                    93:62:aa:50:0b:a5:13:6e:98:7a:ff:09:60:ce:19:
                    50:6a:e4:c1:ec:4a:a7:57:67:67:8c:11:0f:69:d3:
                    49:8c:b9:8d:2c:8b:eb:b3:22:d2:74:1e:8a:1b:25:
                    b8:01:9f:4a:af:6b:89:76:5e:88:90:91:83:69:a0:
                    97:ea:11:2b:cd:c7:91:98:17:77:6d:8b:88:1f:f6:
                    15:d8:39:45:7e:5d:36:41:20:81:d4:96:76:c6:52:
                    6f:65:8a:e5:c4:ab:24:de:3f:ee:e1:7e:bd:f2:4e:
                    58:34:e4:aa:df:ab:1e:8c:5d:dc:d5:0a:0a:6b:83:
                    36:0f:ff:8a:30:ba:50:5d:e9:21:77:67:71:51:a2:
                    90:10:b2:7f:df:3b:7f:4c:a2:af:43:7e:85:88:08:
                    29:32:fc:33:ec:72:8b:bc:fa:e9:75:73:81:c4:51:
                    32:ce:3d:22:8a:77:96:2e:32:ad:78:80:1e:30:c8:
                    79:a4:3a:3e:85:24:37:fa:5c:55:9c:56:46:58:76:
                    f8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F7:3E:6B:03:94:36:E9:D7:57:4C:87:CA:01:C7:7A:AF:80:B6:96
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f5bb40d-4fb8-483c-ac10-aabee059b01b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffe:7400::/40

    Signature Algorithm: sha256WithRSAEncryption
         34:b8:50:d9:93:e5:5e:97:7a:31:51:2e:67:5c:e1:59:4c:3f:
         3c:a9:e1:45:a6:9c:58:e5:20:83:2a:2d:2d:18:9c:86:df:36:
         29:fe:29:7d:d8:73:1d:91:15:cf:91:36:5a:ca:e9:bd:7c:2f:
         7a:7b:02:cb:08:da:30:a9:c1:34:60:85:6a:a4:bf:6d:64:b5:
         3b:71:06:8d:ba:e1:bf:9e:27:21:b0:f6:01:15:c6:72:fb:b3:
         8a:5d:0e:a9:c0:d1:3f:ba:2d:9e:24:3e:3f:4c:fe:54:28:98:
         9b:b3:e7:0d:30:39:55:e8:63:f9:40:0f:b0:67:7e:65:bb:7a:
         c3:32:34:f4:5f:e6:66:4f:40:76:2d:a5:54:45:40:5e:c8:17:
         75:c2:40:12:a9:1a:60:be:b7:55:ec:55:a1:64:ea:50:52:ce:
         3c:19:5b:14:de:84:1c:cd:5c:f0:54:16:cf:37:ba:34:47:a2:
         7c:07:ca:30:44:ee:7f:e4:a8:5a:e5:4f:e0:5d:c2:db:9f:70:
         ce:e9:2a:5a:83:73:4a:4c:23:4b:0a:68:f2:05:36:3f:0d:0b:
         ad:0f:4b:7d:e3:66:3e:4b:69:14:6b:db:01:2f:99:1e:84:cb:
         b6:38:aa:cc:c1:60:f3:97:4d:bd:ba:72:1a:ab:f0:4a:3f:0a:
         ce:c2:36:57
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----