Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/791d2081-1c06-4c05-bc44-2cf66106703f.roa
File:                     791d2081-1c06-4c05-bc44-2cf66106703f.roa (raw, json)
Hash identifier:          Hzb1IwgMG6KwwQPXsOKvftmnQ1Hb/rkV1i1cVL3myws=
Subject key identifier:   A1:4D:61:66:34:FB:63:9C:91:75:EF:4F:EA:15:AB:27:E8:1E:78:D8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       05426158921890FD8BA02E24577C2530AE452FB1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/791d2081-1c06-4c05-bc44-2cf66106703f.roa
Signing time:             Mon 06 Oct 2025 15:42:05 +0000
ROA not before:           Mon 06 Oct 2025 15:42:05 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffd:40c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:42:61:58:92:18:90:fd:8b:a0:2e:24:57:7c:25:30:ae:45:2f:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 15:42:05 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=d74e71814462fa452b5204922c3b126b9078066bc4f36ecd844ea743f825fc6b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ef:ec:f1:42:e2:40:9c:cb:65:1f:9d:4f:59:
                    f7:f1:6d:6a:c7:f3:93:f2:4c:47:2f:56:52:fb:4d:
                    28:e0:ff:fc:74:16:32:a9:56:7e:c3:7b:c0:98:57:
                    a5:6f:eb:4c:0e:a6:af:9e:09:da:13:f0:66:c3:db:
                    af:9a:d9:37:b2:42:b9:94:28:32:b2:ff:f4:c5:26:
                    43:7d:e0:e8:6d:ad:64:fa:88:1b:5b:b5:67:7a:5b:
                    dc:3b:cb:b7:c6:b4:6c:46:02:a8:3e:80:17:23:d2:
                    0b:c5:6c:a9:b2:a0:1f:8d:e9:5d:45:a1:6f:6f:95:
                    c5:ab:12:b6:04:d1:0e:d1:b2:de:0f:7b:8d:5b:20:
                    24:99:e7:c1:53:a6:b4:3d:c6:02:4b:85:34:b6:08:
                    bb:b9:44:ec:5c:a4:df:ae:68:0d:25:a0:e3:a6:ca:
                    6b:98:c2:e4:23:c9:f1:47:ed:7a:fe:8b:98:0c:a1:
                    ef:c6:d9:0b:3b:d1:bd:0b:7e:4a:0f:fc:78:f2:a4:
                    24:d4:53:04:92:b1:1b:a9:19:3b:f9:b4:42:e9:a9:
                    6c:24:c0:b8:0c:1a:38:1f:f0:25:c7:84:11:62:de:
                    0a:a7:6c:e6:62:a2:58:fd:09:d0:24:1c:21:96:72:
                    fe:e3:d0:89:b9:56:3a:f7:fc:aa:61:c3:1d:5f:18:
                    ab:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4D:61:66:34:FB:63:9C:91:75:EF:4F:EA:15:AB:27:E8:1E:78:D8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/791d2081-1c06-4c05-bc44-2cf66106703f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffd:40c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:78:15:91:cd:c8:47:e5:3b:6a:ef:59:f0:4b:c7:c8:c2:66:
         9d:83:2d:4d:28:13:a2:13:70:b9:8f:a7:66:e8:0a:c8:e7:da:
         41:5f:d5:c3:50:47:e6:e1:cf:b4:ad:56:1b:32:3d:22:e8:f9:
         d0:ec:c2:b5:bd:bf:59:f7:72:0c:3d:29:7f:69:31:ae:fa:af:
         c2:ef:3f:2f:f4:de:c7:d2:e5:e4:ac:df:d3:1c:5b:a9:89:d0:
         b7:1b:a0:79:b2:67:72:6a:5e:cd:43:5d:8d:66:d7:5e:1f:87:
         d5:58:fe:89:9d:3d:c1:6b:92:a4:ed:c5:44:7f:20:09:a5:f0:
         47:54:7b:0e:e9:ac:8c:c3:4e:38:64:35:6b:b8:0f:88:97:87:
         6a:58:9a:33:d8:59:c7:2b:1b:6c:ec:db:20:80:b2:bb:e6:a7:
         90:f5:4a:c9:49:e8:e8:c6:86:cd:fa:93:70:f3:66:16:7a:b5:
         e7:ac:67:2a:9c:50:41:b9:67:9f:6a:d0:6c:89:57:97:3e:b7:
         99:7b:95:c0:f9:eb:5e:b6:db:9d:61:89:3d:c5:c0:d7:6f:07:
         ec:07:d6:45:e2:69:89:93:4f:e2:a4:88:d9:0a:e8:0e:60:8b:
         21:f2:f3:34:c9:2e:8c:29:56:ff:aa:93:d1:64:d4:a4:ea:b5:
         f1:bd:ea:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----