Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10b81698-6dcf-4f9b-b83d-28ffc81e2b66.roa
File:                     10b81698-6dcf-4f9b-b83d-28ffc81e2b66.roa (raw, json)
Hash identifier:          QHjwgrd9DGTgQCuVs11sONorherPp+Z5pVWuUOzJLE0=
Subject key identifier:   D5:7C:DD:45:DE:5D:DE:5A:3D:E4:83:31:1B:7A:06:98:27:8A:02:56
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0A674C1DD865FA298217A10060409A6085D694AB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10b81698-6dcf-4f9b-b83d-28ffc81e2b66.roa
Signing time:             Fri 10 Oct 2025 14:21:57 +0000
ROA not before:           Fri 10 Oct 2025 14:21:57 +0000
ROA not after:            Fri 14 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f19:c800::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:67:4c:1d:d8:65:fa:29:82:17:a1:00:60:40:9a:60:85:d6:94:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 10 14:21:57 2025 GMT
            Not After : Nov 14 23:59:59 2025 GMT
        Subject: serialNumber=af2f6861491d21b80cdf7c7bc26c37d38f796d3eebafb26ececcf951d596e0c6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bc:72:77:e8:ea:60:9d:ec:38:4f:24:24:53:
                    4a:5f:f2:b7:4a:87:8e:5a:cc:5c:79:a9:d9:97:14:
                    2f:68:37:27:11:68:18:44:4a:2d:3c:9f:f4:b4:eb:
                    2c:f8:47:60:86:b4:d8:1e:d4:0d:81:0a:bd:a6:da:
                    b0:65:ef:c5:e2:23:bc:2e:52:34:86:2e:9b:8a:71:
                    d6:ef:75:ae:41:c1:a2:a6:ca:94:41:c0:15:93:ad:
                    f1:77:de:ee:5b:88:55:eb:41:dc:40:ff:54:87:73:
                    23:d6:11:13:33:60:f8:5a:3e:be:ff:8e:12:41:cd:
                    30:7e:50:ce:81:20:7d:4a:1c:be:ca:05:46:26:60:
                    15:8e:11:50:17:c9:aa:5f:a6:b2:73:06:98:bb:e9:
                    2b:bb:44:ea:66:43:e4:b5:a3:13:44:f0:19:b6:a8:
                    07:2a:84:d7:0d:57:0d:f3:56:0a:20:c1:f3:49:26:
                    47:61:a2:8c:04:7c:ca:61:c4:99:bb:7e:f5:4e:97:
                    c8:43:ca:3c:e7:60:35:52:75:c1:54:cb:e6:6d:37:
                    a4:3c:2f:30:dc:9d:74:92:55:84:a2:cc:a5:4d:36:
                    29:8f:40:36:4f:9f:e1:3f:38:8a:df:64:e4:cc:cf:
                    5a:83:b5:d9:f0:59:0a:a6:40:ff:ce:7b:40:2c:8e:
                    ba:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:7C:DD:45:DE:5D:DE:5A:3D:E4:83:31:1B:7A:06:98:27:8A:02:56
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10b81698-6dcf-4f9b-b83d-28ffc81e2b66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f19:c800::/37

    Signature Algorithm: sha256WithRSAEncryption
         9a:1b:da:7e:f3:cd:cb:bc:37:de:4b:c1:ca:ee:b5:6f:d1:12:
         7b:98:9d:b7:fa:1f:9c:a2:1c:36:64:6e:64:c3:b2:a9:ec:ee:
         5d:f1:2e:0e:58:0f:df:ec:02:dc:a9:9c:d3:98:27:4b:e2:2a:
         73:ae:93:ea:69:ee:59:fe:1c:81:15:9b:13:6b:1b:82:68:d9:
         9f:63:4c:8e:9d:f0:ce:73:88:de:c6:9c:fc:08:5e:e5:6d:73:
         90:5d:13:52:c7:bf:7e:cb:50:4d:c3:6e:01:a4:9b:e1:de:b9:
         82:2d:fc:73:2e:5f:39:28:fa:19:08:4d:97:a7:14:f4:6f:62:
         9e:a9:71:dd:ae:f2:17:a0:4b:63:47:38:4c:a9:30:77:ea:d8:
         bd:3e:2e:51:6d:01:23:f6:8a:ae:80:c1:18:35:cb:d7:dd:25:
         9c:7e:c3:d7:31:ea:55:7d:44:c5:15:2d:9c:8d:47:78:af:4f:
         43:18:cd:3c:cb:b3:c4:10:fc:eb:36:1f:07:ad:45:77:82:ae:
         0b:0e:ed:2a:5c:28:1e:4a:ba:80:e0:8e:c2:d3:57:58:a4:30:
         1a:7b:ec:3e:be:6a:53:46:a3:92:98:6b:3d:eb:30:62:37:74:
         a1:9b:b8:0c:28:70:8f:79:70:31:cc:fb:37:16:f1:22:a2:05:
         a0:19:89:2e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----