Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5988892c-5d54-4e98-a5b0-3a2691a42a24.roa
File:                     5988892c-5d54-4e98-a5b0-3a2691a42a24.roa (raw, json)
Hash identifier:          cooC8Waz28d9dSIvurTiB6PM7lUzLkTEexmvZIHfz2M=
Subject key identifier:   A1:4B:73:8E:0D:0F:1D:29:3D:E2:62:B7:DE:8E:75:04:65:0D:A7:AF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6576F6BBBC5878E30ADDFCE61935C61348D32D57
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5988892c-5d54-4e98-a5b0-3a2691a42a24.roa
Signing time:             Fri 17 Oct 2025 21:30:26 +0000
ROA not before:           Fri 17 Oct 2025 21:30:26 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:74c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:76:f6:bb:bc:58:78:e3:0a:dd:fc:e6:19:35:c6:13:48:d3:2d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 21:30:26 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=8a476bc8cf9295eb09d2d06306578241bb38f42914ee41fbf28b5899e176a58d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:36:6e:a0:79:3c:6d:2d:60:10:2a:43:71:d9:
                    f3:7b:c2:ba:c6:f6:35:87:8b:7e:12:3f:2c:1c:ff:
                    7d:68:c0:66:67:44:8c:46:f8:7c:c7:94:29:c6:fa:
                    fe:26:55:ba:e6:2f:92:83:6a:ee:f6:d3:da:91:4d:
                    49:bb:cf:77:7b:51:ba:b5:02:6d:43:83:06:45:92:
                    2d:42:d2:00:84:13:08:d1:a6:c2:45:6b:e6:65:cf:
                    56:79:b6:b0:32:e2:46:2e:42:cd:f6:7b:27:97:6e:
                    b6:44:b7:bd:3c:8e:45:9f:2f:82:7b:a6:ed:4b:17:
                    eb:eb:e8:3b:c5:eb:5a:e1:e7:84:7f:4e:27:c8:3c:
                    75:ba:9d:85:d2:90:9b:f9:45:e4:da:42:c9:38:bc:
                    04:ee:8e:81:e7:05:64:22:0f:ae:7e:71:53:97:8e:
                    ef:46:40:0a:94:f1:7a:77:8e:a0:bc:79:1d:9c:03:
                    04:e6:ab:19:39:af:7e:06:cb:93:90:05:40:94:97:
                    38:3e:96:78:56:0d:84:e1:66:6c:03:f6:5f:f8:37:
                    56:28:96:27:b8:71:9a:76:23:74:d0:4e:65:a5:b5:
                    b0:47:93:de:39:d5:b7:3c:d0:af:00:c7:1a:e6:96:
                    94:c0:fd:a0:89:c3:08:9b:a1:32:20:f6:95:5a:07:
                    0e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4B:73:8E:0D:0F:1D:29:3D:E2:62:B7:DE:8E:75:04:65:0D:A7:AF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5988892c-5d54-4e98-a5b0-3a2691a42a24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:74c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:db:1e:2e:f8:ef:20:49:15:c1:61:d8:c1:0a:09:b4:df:2a:
         d3:7d:e4:20:33:02:61:b9:c7:10:4b:a7:23:74:95:e8:19:20:
         79:eb:81:8a:e0:40:ce:02:d2:e7:2d:83:b2:d2:c3:42:4b:59:
         e0:e9:12:2c:0c:d4:ab:cc:06:00:86:76:35:9d:af:67:33:8f:
         be:ca:72:d7:a0:4d:dc:bb:72:a2:b3:5f:1a:3c:8d:62:15:61:
         ee:d3:4d:0e:a2:cc:b5:ae:14:cb:07:ce:f5:b7:bd:8b:1f:bb:
         b4:7a:ce:e7:2e:7d:56:4c:e3:e4:92:33:e9:ca:11:41:aa:6c:
         99:12:1e:5c:aa:2b:76:b0:24:6d:59:43:5c:f6:a6:df:3a:7d:
         f3:e0:49:96:8f:85:24:60:06:66:c4:95:72:15:e6:8e:08:0e:
         ff:cf:ad:b5:4b:39:82:5d:22:2e:9f:f7:8a:d6:76:1c:b7:b2:
         ae:4f:1a:5d:4f:2e:11:ca:af:44:0e:ca:47:62:f2:e6:0a:ba:
         c7:3d:03:0b:72:82:b6:0e:4c:b6:00:74:20:ad:09:07:45:ae:
         01:ce:8b:55:ea:57:ea:56:2a:ba:fd:00:13:80:45:49:d9:86:
         c8:22:b4:37:6b:fc:d9:fd:60:26:b2:f6:dc:e1:fe:8f:7c:10:
         3f:18:28:db
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----