Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33a8e79a-f50b-45fa-87c0-dad918540ac7.roa
File:                     33a8e79a-f50b-45fa-87c0-dad918540ac7.roa (raw, json)
Hash identifier:          vM8YbCpPDjO9fKqiDWmpewimWTFSmXFTMaywTeWH9jo=
Subject key identifier:   EC:2B:E2:E8:2D:3D:AA:CF:EF:C0:E1:E7:01:8A:5F:B3:77:57:AA:F3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       24D28C76EE32FB9340CCBA70C31AB5769FDA25B1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33a8e79a-f50b-45fa-87c0-dad918540ac7.roa
Signing time:             Sat 18 Oct 2025 03:00:06 +0000
ROA not before:           Sat 18 Oct 2025 03:00:06 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f15::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d2:8c:76:ee:32:fb:93:40:cc:ba:70:c3:1a:b5:76:9f:da:25:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 03:00:06 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=f42750c1ca5ae71979f6641cfd1d621977f04e0113cbb090a034a0c7c2c0f237, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:16:24:69:45:32:21:4c:54:64:8f:5a:11:7f:
                    78:d6:85:ad:3a:83:21:e8:ab:88:46:cf:c9:f5:88:
                    a8:49:06:63:79:fe:04:96:41:f0:5c:c3:62:7e:94:
                    61:42:b2:cb:2b:b4:d3:d9:8d:21:42:ce:07:3a:4c:
                    d0:41:8d:13:6c:c0:42:c0:ee:68:40:29:0e:c5:fd:
                    8f:e8:ae:ad:d6:1b:9a:7c:06:15:44:c9:d1:2c:6e:
                    6f:38:bb:e4:52:05:45:f9:23:3c:39:6f:52:a5:be:
                    ea:74:55:4d:5f:7d:d9:d4:3c:73:7b:f7:e7:4c:b0:
                    28:d5:18:81:a3:7a:e2:ba:e4:80:57:52:4d:49:04:
                    3d:07:47:ab:e1:98:b7:5d:10:c3:88:7d:18:fe:36:
                    e2:d0:7c:34:c0:dd:05:0c:e8:85:90:48:d8:d7:9d:
                    5d:99:88:23:cc:72:0b:12:49:0e:46:aa:d3:32:bd:
                    d5:07:0e:c7:b4:ae:ce:4f:48:f1:e4:6b:49:4f:f1:
                    0d:86:bc:65:6e:5f:bb:90:63:b0:87:4b:de:30:21:
                    de:fb:2f:01:c3:f0:3b:7a:c1:c6:0e:ca:c6:43:cb:
                    ac:c5:d2:19:02:98:b5:31:5b:df:2f:cb:78:eb:b0:
                    30:53:25:0f:58:d8:a5:22:3c:cd:10:73:3b:5c:ea:
                    b7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:2B:E2:E8:2D:3D:AA:CF:EF:C0:E1:E7:01:8A:5F:B3:77:57:AA:F3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33a8e79a-f50b-45fa-87c0-dad918540ac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f15::/36

    Signature Algorithm: sha256WithRSAEncryption
         10:61:0a:82:4f:74:ca:88:8d:a1:11:29:1a:95:33:a0:58:df:
         b9:9a:f9:61:1a:c5:fd:c8:bb:3b:f9:1c:34:a6:34:0e:53:e3:
         1f:78:6e:62:1e:e8:54:86:15:1e:e6:94:b9:ec:d2:08:2a:f9:
         43:e8:f3:6f:09:80:de:7f:33:2f:3c:f7:31:5e:18:d5:39:af:
         7b:6f:05:e0:3d:bd:c1:12:b9:94:e6:62:a7:be:a3:6c:34:4b:
         89:83:8c:78:4c:7a:d9:c1:8a:63:50:fa:11:55:d8:87:ac:8d:
         f0:ef:34:bc:a6:f9:cb:9f:32:39:a9:8a:1e:15:b6:2a:f2:61:
         6e:39:e8:79:99:2c:09:85:f6:df:59:59:13:8d:16:e4:8e:4f:
         a1:53:3f:31:77:6f:37:3b:f6:71:b6:3a:05:f1:f1:ef:eb:fd:
         e5:b8:fc:e1:5a:7f:17:ee:64:7d:b9:18:0a:b3:5b:d6:ae:dd:
         cf:08:7d:7f:5f:ab:e5:c3:c8:49:c9:42:c5:8f:b1:de:77:ca:
         be:45:27:80:7f:3d:ae:00:bc:2a:62:4b:07:ec:9f:f6:fd:37:
         52:0e:1e:e5:fe:17:0c:1f:b3:2e:66:ab:1d:54:81:38:3c:f3:
         ec:6d:65:58:48:ec:f9:fa:f6:88:e0:b2:c8:58:ff:91:c5:05:
         d7:ef:fd:02
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----