Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9275dae5-5753-4531-b3f4-71757dd2b784.roa
File:                     9275dae5-5753-4531-b3f4-71757dd2b784.roa (raw, json)
Hash identifier:          8cPGrt/JatzlgeC9/ADqmVRSvjbyzqGE/unp8w8xgx4=
Subject key identifier:   26:B4:CA:D8:61:75:E3:BA:29:78:AD:FC:48:62:D0:8E:77:74:64:73
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       34E83A542FD0B202EBC6B4086857F01C9EADF7D7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9275dae5-5753-4531-b3f4-71757dd2b784.roa
Signing time:             Mon 06 Oct 2025 16:01:13 +0000
ROA not before:           Mon 06 Oct 2025 16:01:13 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff1:ec00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e8:3a:54:2f:d0:b2:02:eb:c6:b4:08:68:57:f0:1c:9e:ad:f7:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 16:01:13 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=d34d602ef194ea42f3607edb3c25b1395d003711e079817bd8557418bd8c4404, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b1:35:5a:f5:20:3e:f8:c4:41:4e:ff:0b:5d:
                    b0:7e:8d:78:8d:31:fe:84:66:91:c0:e8:5b:3a:b0:
                    de:00:70:7a:6e:c9:4f:fa:51:0c:8a:ca:b7:64:1a:
                    c6:9e:db:3c:77:ae:50:44:6e:04:f9:d8:79:d6:50:
                    af:0c:ab:ea:43:5c:01:de:a5:ec:9c:fb:50:03:f1:
                    9a:98:38:0a:ce:93:3f:14:0b:38:22:b8:bb:46:3f:
                    90:7d:af:ae:f5:47:62:99:a6:a5:fb:3c:17:69:f8:
                    6e:f1:de:ea:a5:eb:90:86:6a:25:d7:59:5d:37:14:
                    fe:93:fa:fc:2a:6d:83:c5:35:e1:0c:31:6d:71:74:
                    07:45:ba:8d:87:71:51:34:8f:86:e7:e1:9b:5f:96:
                    43:cd:5d:96:f8:77:d5:3c:76:a7:71:92:e9:23:d4:
                    27:8e:88:a9:25:99:1c:1c:91:5c:2e:8c:4d:9f:cf:
                    b9:9c:3e:20:ea:26:86:b8:25:df:63:ea:bb:7b:5d:
                    e0:bc:3f:16:6f:44:1c:3a:fb:4c:ad:96:5e:78:00:
                    9b:4e:55:e3:6c:be:e0:06:50:5c:a5:50:2d:0d:0d:
                    60:de:29:f6:28:f7:24:42:de:26:69:9d:ed:0d:18:
                    20:00:27:81:b3:b3:51:e7:97:fb:94:71:b8:d3:13:
                    68:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B4:CA:D8:61:75:E3:BA:29:78:AD:FC:48:62:D0:8E:77:74:64:73
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9275dae5-5753-4531-b3f4-71757dd2b784.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff1:ec00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a8:75:c7:e7:ae:f1:a3:18:01:2a:b4:50:86:38:bc:ca:e8:39:
         d8:d7:a6:97:99:f6:f4:85:fa:f5:a7:de:2b:41:44:d7:41:15:
         9a:f0:00:d3:52:c7:d9:e8:79:8f:c6:c8:38:91:37:61:a0:e8:
         dc:d0:04:87:21:43:e7:25:bf:64:eb:ae:63:87:22:ff:be:85:
         1a:a4:ad:94:3d:cb:19:02:fa:26:db:5b:81:05:e7:a8:7a:05:
         4e:ae:4e:06:2e:76:e1:54:7e:00:35:6a:25:93:b8:8b:94:84:
         e5:7e:7b:1c:34:a8:21:1f:09:52:35:c4:a6:33:d9:92:ca:c3:
         00:93:6d:13:84:84:cf:27:0e:23:92:34:63:13:65:ba:5f:27:
         64:fd:d1:b5:9f:f3:35:0d:33:e0:03:4e:60:5f:d7:31:b4:ee:
         86:06:72:bd:7f:46:b0:31:b1:9a:39:1e:cb:a9:57:11:db:6e:
         33:a6:2e:09:90:4b:3b:3b:23:6a:bf:b9:45:f8:f7:99:9b:07:
         f6:1c:bb:65:4f:b2:fc:5c:5c:db:e1:3e:b3:5c:59:b3:d1:4e:
         c0:d6:6a:23:d2:48:8e:86:f7:cb:fa:93:84:13:12:a3:2e:a5:
         05:e9:e3:8e:6d:dd:7b:6e:d3:cf:a9:90:99:bc:49:32:59:45:
         29:ee:e0:ba
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----