Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a4b5f5e-bd93-4b3d-ab14-989a0514f037.roa
File:                     2a4b5f5e-bd93-4b3d-ab14-989a0514f037.roa (raw, json)
Hash identifier:          pMeMl9jpbjw1umLeiqMRhmoTkJwntQt/wbykY0lsKQY=
Subject key identifier:   6D:3D:AF:11:A3:96:02:FA:39:1C:58:0D:DB:44:84:7F:52:BD:D6:AF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2243C9C5C0CE8F823A80DE44777D8F0194C710D6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a4b5f5e-bd93-4b3d-ab14-989a0514f037.roa
Signing time:             Fri 17 Oct 2025 20:51:24 +0000
ROA not before:           Fri 17 Oct 2025 20:51:24 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f00:8010::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:43:c9:c5:c0:ce:8f:82:3a:80:de:44:77:7d:8f:01:94:c7:10:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 20:51:24 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=30b6aae5294d8a291d8772af87ed9f025891bfd7e021dff9c3a8b939329c4b76, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2d:5b:aa:d6:0f:b9:03:44:98:ad:66:16:25:
                    14:29:96:05:45:eb:c4:9f:8a:23:ff:22:1b:80:05:
                    be:98:3a:fe:45:b1:08:5c:16:96:bc:73:53:f1:5c:
                    e3:4a:00:c6:25:03:7c:6b:7a:0a:91:3c:1d:f6:7d:
                    80:f9:fb:ac:eb:fd:8c:5d:49:01:0a:f1:25:90:fa:
                    e6:b0:11:e9:06:df:44:41:f2:8a:7f:8b:78:41:60:
                    7f:83:4a:c7:e2:66:75:d1:dd:d5:26:5d:de:9b:08:
                    37:64:2c:b7:94:6a:1b:26:37:1c:dd:8c:fa:3d:ad:
                    5f:e0:cb:10:16:64:88:ef:3e:ca:ca:38:66:1a:53:
                    5c:49:a4:86:ec:67:8a:76:f6:9f:22:aa:1d:97:1e:
                    c5:78:7b:83:1f:bc:19:6e:6d:24:2d:d5:53:d0:14:
                    4b:df:6c:d4:a0:60:15:10:c2:e4:79:45:18:c6:1d:
                    6b:84:2f:e8:05:d2:56:c8:07:e1:68:ab:3f:6d:45:
                    0a:14:d8:b4:d7:12:5e:f7:31:f1:ce:74:1c:c1:e5:
                    81:23:ff:07:e8:53:04:1e:4a:ef:69:97:04:d4:35:
                    10:04:95:3a:5d:27:71:f0:f6:b1:81:bc:36:14:b1:
                    58:83:3d:fb:b4:d5:29:a4:fe:6d:47:e1:ae:04:38:
                    24:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3D:AF:11:A3:96:02:FA:39:1C:58:0D:DB:44:84:7F:52:BD:D6:AF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a4b5f5e-bd93-4b3d-ab14-989a0514f037.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:8010::/48

    Signature Algorithm: sha256WithRSAEncryption
         cc:7a:9b:e3:2e:77:31:2c:45:10:fe:75:39:8c:46:da:7c:50:
         1c:fe:0a:38:c3:bc:98:5c:a4:18:b6:17:9f:db:d0:86:39:50:
         97:b5:00:af:1e:f1:82:b3:a3:05:20:13:eb:e4:3e:0c:dc:ae:
         cd:86:64:bc:19:d0:1d:d2:94:7f:99:41:2e:3e:2f:7b:32:97:
         44:5f:0d:76:51:fe:3f:3d:08:9d:dc:77:c9:1e:e0:66:f6:0f:
         88:43:01:ad:bd:7b:c2:8d:72:a3:79:b5:ee:48:15:84:2c:37:
         d8:59:7a:89:36:ab:bf:58:7e:0f:ec:63:44:b7:18:bf:55:32:
         30:20:6a:d6:36:1f:99:ed:fa:e5:47:85:6a:75:c3:97:d3:50:
         52:6c:36:97:86:9d:0f:b3:b7:88:ab:89:6c:dd:33:a6:3b:bb:
         bd:22:26:cb:58:c7:70:14:79:50:65:2c:1e:fb:55:8b:1e:1d:
         fc:d8:b9:c2:67:a7:b8:91:2f:87:33:b1:8d:ac:41:4d:9f:10:
         95:0d:e7:81:b2:89:aa:0f:58:d6:5f:7d:dc:ff:07:11:68:bf:
         1d:c9:9d:50:28:f0:27:92:55:73:70:f3:90:6f:ac:ab:40:20:
         8a:f1:dd:ee:4e:43:11:5c:8a:d4:6e:57:b4:48:81:f5:52:bc:
         8e:e7:62:2d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----