Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6798dac0-413a-469b-9214-4271f2505712.roa
File:                     6798dac0-413a-469b-9214-4271f2505712.roa (raw, json)
Hash identifier:          cCQJWVm3wL7uqKtSyMxHDE6K96ZIsodN/JcMVRvyksI=
Subject key identifier:   C3:27:13:AE:41:2C:E9:C7:DA:52:1B:44:2B:50:C7:56:50:59:95:94
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6ADD2AFDBF54FB12B39BE96D545B6EF792275047
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6798dac0-413a-469b-9214-4271f2505712.roa
Signing time:             Fri 17 Oct 2025 20:11:13 +0000
ROA not before:           Fri 17 Oct 2025 20:11:13 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:34c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:dd:2a:fd:bf:54:fb:12:b3:9b:e9:6d:54:5b:6e:f7:92:27:50:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 20:11:13 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=ec3dcd81d128fb8880c08a40539a582f57c5043a1befe7df729ec969e88db056, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e6:7b:00:52:69:47:a0:a8:95:85:5c:31:bb:
                    02:bc:c4:69:0b:77:d0:31:4b:06:de:2f:7e:6e:52:
                    9c:16:ff:a3:ca:3e:6e:35:ea:5a:d3:69:d8:3e:12:
                    62:91:80:bd:15:78:9f:2e:2f:ca:f1:91:4f:3e:86:
                    8f:8b:17:4e:23:2f:39:ed:db:98:7b:68:57:96:0f:
                    36:77:ee:a9:eb:1f:54:85:7f:2e:12:96:7d:6f:90:
                    6d:cf:36:c7:5e:01:48:7e:bd:11:f8:8c:6e:ec:0c:
                    f0:5c:b8:86:8a:2e:18:9a:03:8d:ea:bb:f3:7e:3b:
                    60:bb:1b:97:c6:f6:d9:7d:13:ee:7b:02:e9:18:0b:
                    5a:43:1a:5e:cb:92:08:71:fa:a2:13:20:0e:44:d6:
                    24:de:ad:48:7c:3d:29:3f:d5:36:9e:cf:e0:1a:03:
                    8f:88:13:31:3c:ba:f9:60:d6:2a:de:c3:dc:97:3e:
                    cd:50:7b:16:b9:e9:ee:fd:88:eb:6e:3a:04:71:1e:
                    21:73:3f:13:67:fe:50:a7:9d:36:6f:49:20:8c:d2:
                    6b:06:be:ea:0c:67:2f:53:a6:98:d1:92:3c:df:4b:
                    00:e7:a6:bf:88:96:31:8a:8e:92:70:83:9a:99:6f:
                    cb:ec:8d:5a:7e:65:b0:8c:f7:44:70:6f:21:7f:7e:
                    2b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:27:13:AE:41:2C:E9:C7:DA:52:1B:44:2B:50:C7:56:50:59:95:94
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6798dac0-413a-469b-9214-4271f2505712.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:34c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:a4:52:30:e0:aa:83:4e:9f:b6:94:32:e9:39:ca:62:bf:20:
         c3:01:ba:a3:ee:62:7a:44:de:e8:1f:25:00:fc:bc:eb:e4:ca:
         46:75:01:4e:8f:e7:44:b1:78:1a:e0:b7:02:46:3c:35:a8:5a:
         49:4d:21:90:5a:81:53:79:23:28:c8:0d:24:b7:33:44:b9:37:
         58:04:fd:0f:13:7a:40:f9:7f:63:82:5e:9e:83:ee:4b:0f:4b:
         63:e0:30:0a:2a:d5:15:ac:6a:30:00:c7:ca:81:c2:70:8a:b0:
         42:89:38:cf:9c:89:80:ad:c7:bd:09:b6:dc:0b:65:b3:71:34:
         b7:88:af:07:a1:82:f7:f4:d5:d0:5f:ae:71:9a:ea:75:f5:12:
         50:17:04:04:d8:3c:83:ad:ab:cb:07:4e:e3:5d:30:e7:c7:c8:
         6d:bc:38:a8:a8:7d:03:ec:d4:36:dd:37:4f:76:5c:e0:37:37:
         37:37:c3:0b:0a:b9:f9:00:c7:4b:8d:c4:41:e0:ef:5a:5e:55:
         21:94:77:9d:e9:9d:d2:6d:1a:d0:84:76:27:26:15:dc:83:25:
         78:88:97:27:bf:6a:25:bd:8e:0f:a8:04:7d:25:0f:51:60:2c:
         fb:20:a9:bf:04:e2:6a:e9:50:d6:58:e4:3e:05:d6:73:44:42:
         a6:42:00:f8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----