Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ee52b74-62e7-4aad-bd07-e8653a9c67b0.roa
File:                     5ee52b74-62e7-4aad-bd07-e8653a9c67b0.roa (raw, json)
Hash identifier:          ODqvuUmTbMDnVP6JSER8cuYZeM9Ssoif0OvN/nNaMTM=
Subject key identifier:   89:27:F9:BE:F5:81:97:D2:C3:C9:B3:EF:69:A8:D0:98:18:C8:05:BC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       61670F04ECAE970240F1651953621B5150A37621
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ee52b74-62e7-4aad-bd07-e8653a9c67b0.roa
Signing time:             Sat 18 Oct 2025 04:31:44 +0000
ROA not before:           Sat 18 Oct 2025 04:31:44 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f11:c00::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:67:0f:04:ec:ae:97:02:40:f1:65:19:53:62:1b:51:50:a3:76:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 04:31:44 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=8a67446020fae1e828bfbd141041a1989644693fb48338e30efba6160ec0baf8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c7:be:fd:bd:f5:6e:45:28:05:3c:f1:c5:62:
                    bb:14:3a:86:a1:a1:d2:03:10:d5:33:61:74:98:04:
                    0e:70:7a:71:9e:af:72:0d:9b:4f:12:b0:05:a3:84:
                    da:27:70:2a:d1:e0:17:fb:84:89:32:55:05:43:0a:
                    1f:b6:7a:f2:a4:8d:0e:cb:3e:54:c1:59:59:58:55:
                    33:22:5b:b0:97:5e:13:50:ee:87:ea:09:83:67:77:
                    35:aa:af:c7:f2:71:7b:b0:2f:c1:a9:41:89:16:94:
                    01:e0:b7:70:01:de:e3:ae:11:74:08:90:2d:39:de:
                    e4:39:7f:fa:76:e5:13:dd:d3:5e:ba:39:29:d4:d9:
                    04:c8:86:be:3a:7a:42:c0:cd:63:20:6a:7f:7f:69:
                    e9:57:03:cf:e1:6e:b4:35:2c:f8:0d:2d:53:cc:0a:
                    a0:1e:d7:87:56:ed:69:6d:4a:ba:06:3f:40:b1:87:
                    0c:0b:dd:47:32:7a:09:e4:c3:f6:ef:0a:7c:95:13:
                    59:01:16:4f:55:e9:11:02:5a:56:cc:62:12:42:98:
                    94:43:69:6d:e8:cc:7d:e3:53:1d:72:4a:ce:0a:ae:
                    33:9d:96:71:0c:04:7b:91:b2:8d:6d:f8:db:39:76:
                    ef:54:dc:10:84:fb:4f:28:2b:5b:96:9c:a6:67:65:
                    85:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:27:F9:BE:F5:81:97:D2:C3:C9:B3:EF:69:A8:D0:98:18:C8:05:BC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ee52b74-62e7-4aad-bd07-e8653a9c67b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f11:c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         cf:b8:76:4f:17:24:be:b6:c1:34:ba:d8:91:0c:cc:16:47:a4:
         af:39:d5:f0:9b:ce:bb:85:2a:52:57:2f:26:cb:2f:8f:bc:42:
         cb:de:2e:d5:35:6c:54:9b:f8:66:86:37:7d:e3:12:02:18:c5:
         e8:7e:0b:c4:43:6b:df:b0:a8:ea:06:30:25:27:fc:f6:51:82:
         e8:bf:b8:9a:c6:d1:56:9c:a1:6a:25:b4:b0:8b:15:19:89:e5:
         ee:85:cb:fb:d5:f2:08:d2:5f:a1:e9:20:56:48:a7:d7:83:5a:
         de:52:f8:03:16:2c:8b:50:c6:29:c8:69:7c:ed:63:37:79:54:
         d4:67:5c:11:8b:a7:5b:23:3f:27:f7:80:38:f8:30:af:23:26:
         4f:88:01:a2:a3:6e:55:93:a4:d0:99:bb:55:7f:c4:9a:8b:c1:
         5b:99:47:90:46:e4:f8:fa:8f:02:71:34:57:fd:16:63:87:50:
         5d:74:34:53:d5:e5:06:1b:06:da:12:99:0e:34:71:59:cc:a2:
         3b:2e:4e:9d:fd:e4:80:8a:46:4e:bb:2b:19:d1:79:b1:28:94:
         01:48:8f:86:ba:d9:b0:f5:8c:49:09:95:21:ed:bb:df:0b:b9:
         71:0c:de:db:b4:27:05:41:1b:c1:47:6d:31:83:97:82:19:b4:
         d1:3a:ad:b9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----