Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ae8d6eb-5da0-4728-b975-d6182b99d92e.roa
File:                     4ae8d6eb-5da0-4728-b975-d6182b99d92e.roa (raw, json)
Hash identifier:          1e2tls4bcTUD9GhaCti4ZI4gY16dxyTNk3m4jXI+UZ0=
Subject key identifier:   23:96:B9:DC:AC:93:23:82:9B:8F:32:52:D8:F1:B9:22:90:FC:10:0E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3E7374B6434A63F21B0B5386696FB74FE6D29694
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ae8d6eb-5da0-4728-b975-d6182b99d92e.roa
Signing time:             Fri 17 Oct 2025 21:21:37 +0000
ROA not before:           Fri 17 Oct 2025 21:21:37 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f61:10c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:73:74:b6:43:4a:63:f2:1b:0b:53:86:69:6f:b7:4f:e6:d2:96:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 21:21:37 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=77c1e23ef353ffc6e8a1226ea64f62d6115883ddafbbe584355f1bd3ec9caca1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b7:5d:3d:91:68:d7:de:a7:10:2c:fc:d5:69:
                    5e:c4:69:79:d1:70:58:c1:ab:7f:3e:b7:19:de:7b:
                    aa:ca:e0:be:69:bb:4e:ef:08:f8:d4:fa:e6:a2:f3:
                    8c:8a:1d:5c:68:83:6c:e1:5c:ff:e4:2f:b5:3e:34:
                    66:b3:2f:27:97:2f:51:27:88:d3:47:ee:b3:6b:70:
                    4c:6a:33:d1:8d:76:3e:e9:67:31:36:e9:e3:88:29:
                    ed:51:61:d7:fe:03:80:d1:be:6f:82:03:31:94:20:
                    b8:f1:01:ed:09:8c:7f:d8:81:2b:9a:d8:a7:17:6e:
                    e8:8a:75:1b:b7:e4:b9:5d:16:7e:ff:70:32:c3:a9:
                    1d:e4:87:8c:22:6c:24:90:5f:fb:8d:d1:83:70:0a:
                    21:bb:67:d8:fa:92:59:20:25:24:c9:33:b2:3f:24:
                    af:73:c4:43:7e:f3:06:8b:de:f6:2d:0d:dc:ab:91:
                    18:8c:ff:9d:b3:74:e2:c4:f4:1d:12:2f:9f:a9:c3:
                    59:5f:7c:d9:31:e3:4e:30:be:ec:d5:f9:39:13:57:
                    46:01:ef:5d:5a:3c:61:a0:6e:bd:26:0d:25:53:1d:
                    cc:f6:c8:6c:86:31:9c:d9:a0:36:4e:47:43:e3:fb:
                    61:7c:c5:5b:8c:97:47:d8:b4:40:63:fd:17:ca:c1:
                    78:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:96:B9:DC:AC:93:23:82:9B:8F:32:52:D8:F1:B9:22:90:FC:10:0E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ae8d6eb-5da0-4728-b975-d6182b99d92e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:10c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:d1:fe:c3:54:11:89:ac:cb:98:3d:15:bb:0e:94:29:68:27:
         81:05:d9:ab:69:3e:18:d0:e0:19:1b:63:05:46:51:25:f1:22:
         de:0d:18:ff:e0:b4:33:1f:b8:89:52:ee:b0:48:f0:7a:5f:9d:
         1d:09:03:92:47:11:42:12:b6:4f:99:2f:91:26:5d:da:94:26:
         18:f6:3d:e9:5e:6f:eb:49:f6:00:2a:e6:c6:ff:d9:75:40:17:
         bd:3f:e7:95:4a:e6:65:eb:f7:ec:3b:7b:d0:bb:13:f3:7e:b2:
         9f:71:ad:d1:95:9e:35:99:83:84:aa:44:95:b3:a7:51:bb:6c:
         b8:a6:be:d7:d7:b7:b2:24:6e:6d:6e:a1:19:ff:8f:72:e2:07:
         b3:a1:45:d2:30:5c:85:03:5f:a2:fb:be:6b:e7:4c:7e:60:11:
         0b:0e:b0:10:97:37:bb:5b:09:46:89:a3:af:9b:11:7b:98:2d:
         7b:7e:30:c4:b9:66:ea:b6:18:0c:97:8c:f0:91:2a:3b:ae:d7:
         e3:44:a8:5a:67:91:20:ca:c2:4d:b8:45:8e:21:a5:b8:24:6f:
         b4:ea:91:af:05:c2:f8:28:59:1b:80:a3:c4:b1:05:72:1a:2c:
         cb:f0:0e:9e:2d:78:6f:1a:88:40:3b:cd:b4:a8:46:8e:aa:7e:
         e5:3f:36:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----