Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55e8badf-419a-4e21-ae51-df5950add8d9.roa
File:                     55e8badf-419a-4e21-ae51-df5950add8d9.roa (raw, json)
Hash identifier:          vGlQzT8E6x1fnPACxmjuwl0Xm599F0lSJgx0T3tfpVA=
Subject key identifier:   5E:43:FC:40:46:4C:B0:60:70:FC:80:31:90:E3:09:99:91:0B:1A:FB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5079A1A2FA9D76AA4D04D1FA9E5EDA5FADE260CB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55e8badf-419a-4e21-ae51-df5950add8d9.roa
Signing time:             Fri 26 Sep 2025 00:39:04 +0000
ROA not before:           Fri 26 Sep 2025 00:39:04 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f1a:c800::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:79:a1:a2:fa:9d:76:aa:4d:04:d1:fa:9e:5e:da:5f:ad:e2:60:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 26 00:39:04 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=27a3d51282b491b3a51f4b3fbc094d225acf64f7933c6058e46ddb4a913d93a8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a3:f6:ad:27:37:0e:00:ec:bc:ee:98:b9:17:
                    7a:c5:b0:ad:9b:5d:b5:6e:b8:a0:2d:a5:5b:f9:43:
                    fe:ea:34:1d:40:04:03:03:c9:22:a9:d3:b1:35:be:
                    33:4f:6a:b4:6a:b6:5c:a4:2a:45:8f:cc:ec:3a:c9:
                    4f:62:cb:d7:fa:16:18:5b:3c:41:43:ca:81:48:63:
                    8e:d0:40:56:f8:23:a7:a2:c7:80:b7:5d:b0:a1:55:
                    90:00:bb:36:17:06:e0:48:1b:9a:7e:09:e0:ad:a2:
                    3d:35:c0:d5:ee:a0:13:20:ac:f6:71:d8:5c:7c:7a:
                    b9:87:c2:e0:ac:bb:63:47:8a:00:61:1b:8f:92:99:
                    8d:f5:93:6d:54:69:9c:5b:33:13:4b:d4:0e:7a:38:
                    00:24:4f:0f:7f:cb:84:71:0b:78:f3:cd:36:da:95:
                    94:a6:c4:05:d2:b8:f2:ed:35:24:ce:dc:bc:2a:b1:
                    47:f1:c7:56:43:cb:92:3a:a9:31:de:69:65:52:53:
                    77:2c:f0:a7:a1:c2:a6:42:d1:b4:e5:e6:dd:fa:e0:
                    6d:f4:90:2e:85:83:83:17:ee:6e:ab:40:fd:8d:26:
                    ee:98:6f:95:5c:32:bd:5a:a7:7b:29:d1:94:41:d9:
                    4c:a2:d1:8a:ee:13:07:b0:30:7d:6b:a5:da:f0:a8:
                    c8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:43:FC:40:46:4C:B0:60:70:FC:80:31:90:E3:09:99:91:0B:1A:FB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55e8badf-419a-4e21-ae51-df5950add8d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1a:c800::/37

    Signature Algorithm: sha256WithRSAEncryption
         5d:91:de:d0:5a:7b:65:18:d8:eb:f2:3e:23:ac:ca:c2:8f:ce:
         e1:8c:e7:c7:12:86:a3:b8:2c:a2:02:1d:e1:1b:57:1d:b2:20:
         4d:19:4f:0e:2b:7c:9c:88:7f:3e:d3:27:3e:4c:32:f7:5b:aa:
         9a:00:81:a7:79:76:e9:7f:4c:cb:94:d0:ea:07:0b:d9:24:3e:
         cf:89:e7:ba:ce:ba:0a:97:eb:4d:d0:81:a9:22:28:9c:b0:b1:
         45:0e:6f:41:47:ed:30:0e:7f:2a:f0:67:38:98:35:23:f7:5e:
         2f:ad:7b:0c:b2:dd:15:1c:a0:e0:15:fa:57:8e:eb:a9:fc:19:
         92:86:96:87:00:fd:d5:14:21:e7:4e:a6:ad:c1:de:9f:70:c3:
         c9:43:4c:f0:21:1d:38:d6:84:0e:db:24:70:39:3f:c0:89:88:
         da:6f:89:e1:11:8c:f0:42:08:d6:b9:c5:af:02:4d:16:15:3b:
         c2:d7:89:5e:a6:53:93:d7:cb:5c:4c:16:7a:2b:79:57:c9:38:
         47:bb:c0:00:f6:9c:01:bd:6e:82:36:dd:89:08:1e:d4:e3:12:
         0e:b7:8c:f1:f2:d7:2f:d8:53:6a:92:79:14:b2:13:ca:16:3a:
         7e:2d:ff:b6:37:46:a8:28:07:75:5d:63:d5:f2:74:fc:f9:bd:
         3b:fa:9a:42
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----