Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ba91d72-a5b1-4908-a961-369fc80afb97.roa
File:                     5ba91d72-a5b1-4908-a961-369fc80afb97.roa (raw, json)
Hash identifier:          JcVq5M++im9Tp6cFbY8pnDoG/D/iJHNQgtJAfAo2Kzo=
Subject key identifier:   56:27:84:B0:DB:D5:A5:CE:E6:7D:62:A7:20:F2:BF:78:BE:2B:22:EB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3CD09547B9B7B31C601473A2BE3730CD84580D22
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ba91d72-a5b1-4908-a961-369fc80afb97.roa
Signing time:             Sat 18 Oct 2025 01:11:39 +0000
ROA not before:           Sat 18 Oct 2025 01:11:39 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1c:c800::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d0:95:47:b9:b7:b3:1c:60:14:73:a2:be:37:30:cd:84:58:0d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 01:11:39 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=00816f451d7e05c21d5b7d9cfb986f54c2e18de7efc3ec188dba6486545331b8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2b:1b:34:c3:69:7a:74:b8:32:7e:3a:83:8e:
                    91:a0:96:01:97:e3:fb:49:76:0e:13:9c:ea:d2:2e:
                    f7:4d:c1:1e:0b:6e:20:9e:49:13:b5:d6:25:ff:13:
                    e9:17:22:00:68:2d:9a:c8:70:15:ee:9f:94:e6:05:
                    09:44:cd:30:93:8b:2a:84:23:a0:9f:e8:40:c6:93:
                    48:94:2f:d2:7d:d9:35:e8:26:ad:61:e6:40:71:dc:
                    a9:29:d7:25:2a:75:8b:47:b2:e5:5f:5b:95:a5:74:
                    ce:3d:8e:a8:1b:c9:86:43:a5:1e:9d:65:c5:bb:1f:
                    e5:c8:c1:32:20:55:63:b0:62:da:9c:47:96:b0:89:
                    86:94:a4:4e:3d:7a:bf:21:b3:4a:d3:e0:92:73:5f:
                    e5:98:7a:40:2e:3e:f3:59:45:d6:f9:b1:c6:4e:8d:
                    46:a2:31:24:b0:dc:ef:17:cb:47:2e:c1:59:6f:80:
                    fd:99:af:88:70:72:a9:27:ae:c3:ff:59:f3:75:db:
                    5d:cb:69:d5:60:53:99:5d:af:7f:0f:43:39:79:65:
                    fc:a0:67:5f:44:4a:3e:5c:10:b8:48:70:9e:64:17:
                    df:7a:48:76:76:c9:d2:44:50:dc:27:86:b7:cf:b5:
                    e3:12:20:8c:22:dc:1b:f2:e2:6f:f0:d9:a2:fe:33:
                    4c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:27:84:B0:DB:D5:A5:CE:E6:7D:62:A7:20:F2:BF:78:BE:2B:22:EB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ba91d72-a5b1-4908-a961-369fc80afb97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1c:c800::/37

    Signature Algorithm: sha256WithRSAEncryption
         85:e2:77:32:f8:08:8d:58:62:8b:cd:33:15:06:b2:27:25:af:
         a9:7a:70:e9:10:f3:90:45:f8:3d:db:38:cb:ba:cf:72:18:f0:
         66:25:67:c7:22:68:cb:7c:40:67:75:bf:c3:e2:ac:70:cb:e5:
         c9:d3:4f:a8:3b:b9:30:09:63:63:53:91:40:1d:bb:d6:d1:f8:
         ae:71:cf:1b:8d:0a:da:a7:99:2e:84:03:94:dc:cb:6b:97:67:
         a3:b5:ef:39:3f:56:ce:46:b1:4f:15:fa:09:1b:3e:0b:ff:7f:
         96:49:04:89:5d:f2:5d:4c:61:e9:70:b6:92:b0:f6:53:9c:3e:
         82:05:fb:c9:ed:3c:2b:dd:d3:72:71:47:87:0f:e1:75:bf:37:
         bb:3a:b3:77:71:20:34:fd:27:7a:7f:51:07:e5:2e:c6:1a:66:
         12:a5:1f:94:aa:75:03:33:10:9d:f6:c0:76:53:9c:c3:61:b1:
         63:1f:03:b9:3c:c6:b3:23:81:d3:88:79:3d:b8:9a:5e:8d:b9:
         ee:00:a0:bc:9e:d4:16:57:6a:f6:3e:7d:66:56:ae:ae:19:1c:
         ac:1f:73:84:3e:6c:f4:dc:02:38:c6:c5:dc:b4:db:a4:be:dd:
         c6:ac:70:77:ff:eb:32:6c:e4:f2:b2:1f:0e:94:8c:22:78:52:
         ab:59:86:a1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----