Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9431031a-a6ce-4625-aff8-32a6f17591d6.roa
File:                     9431031a-a6ce-4625-aff8-32a6f17591d6.roa (raw, json)
Hash identifier:          mNKP2mtg0Nfj1Pqm9EeqfxJD4aKjLtrDKLCa42VcO/c=
Subject key identifier:   C9:A4:08:59:FA:FA:C9:A2:43:9C:AB:7D:3C:54:5D:D8:10:D9:AB:F4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       79512BFA1573B968252A21A174EB00ED763FCAEB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9431031a-a6ce-4625-aff8-32a6f17591d6.roa
Signing time:             Tue 14 Oct 2025 15:42:22 +0000
ROA not before:           Tue 14 Oct 2025 15:42:22 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fec:9800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:51:2b:fa:15:73:b9:68:25:2a:21:a1:74:eb:00:ed:76:3f:ca:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 15:42:22 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=81b3df99f553b865f020a379e135448599a2c36391e34514b575f2e8679566fa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d8:c7:e3:e6:3e:51:9b:00:a1:79:04:9b:86:
                    be:09:8d:b4:ca:be:fb:df:56:39:d8:34:5c:5f:ed:
                    41:c6:2f:03:5c:3a:4c:ff:07:f7:8c:0f:96:6c:1e:
                    f9:60:9b:29:a4:8e:0c:fe:2d:49:bd:8e:ee:9f:1f:
                    d2:7b:27:19:6e:34:4c:a6:ce:ec:db:e8:71:8d:2c:
                    e4:87:17:80:0a:38:34:e8:43:29:42:70:44:99:66:
                    3b:b3:5c:18:07:cd:9f:11:1c:10:f8:32:dc:59:c5:
                    ee:e8:3a:f9:19:87:65:4f:0e:37:7b:88:44:0b:10:
                    13:fb:6d:1d:47:17:9f:54:c0:d0:fa:72:6d:5b:59:
                    af:a1:4e:d4:e6:77:77:a0:0b:94:4c:97:d8:c6:b5:
                    8f:7a:6b:cf:e6:90:a1:26:92:9c:0b:ae:d5:94:1d:
                    18:0c:9a:b8:07:c7:6f:d9:26:2f:1c:1a:8c:a6:4b:
                    85:06:c0:ce:6e:ed:07:03:90:38:95:b0:92:5c:a6:
                    51:4d:c2:90:45:40:e8:6e:1a:22:83:ca:8d:b5:ce:
                    db:98:93:b0:64:02:39:b9:cb:e2:15:a6:d9:05:6f:
                    f7:fc:89:9c:b4:9c:57:3f:95:7e:f6:de:43:37:6e:
                    9a:38:50:6e:44:14:46:80:8b:c1:36:b8:6d:f7:87:
                    46:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A4:08:59:FA:FA:C9:A2:43:9C:AB:7D:3C:54:5D:D8:10:D9:AB:F4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9431031a-a6ce-4625-aff8-32a6f17591d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fec:9800::/48

    Signature Algorithm: sha256WithRSAEncryption
         bf:a8:76:d3:4d:b6:46:ee:00:0b:e9:f5:78:84:40:8e:f2:f5:
         b5:a5:9d:bf:67:ac:69:b9:bf:23:28:aa:9c:1d:d3:72:93:e3:
         4c:2b:d7:72:73:93:d0:94:2e:96:48:da:91:44:c7:21:ab:d9:
         96:92:50:1b:30:ef:c6:dc:46:e5:cd:45:02:30:a6:38:8f:d4:
         5d:8d:9b:be:93:59:fa:4c:dc:90:13:f0:5b:45:76:a1:c7:4d:
         23:65:95:11:13:94:d2:0d:cb:21:ca:5c:1b:d5:89:e2:7c:fa:
         a6:50:37:24:19:b5:14:7b:a9:a9:de:22:fd:b8:9e:5b:56:8b:
         27:b5:38:86:2e:86:6b:f7:3b:81:a0:d7:e0:ba:62:70:56:f0:
         08:08:22:41:58:43:8b:96:f8:fc:49:d2:99:15:eb:5c:c8:b8:
         b1:37:63:46:77:68:8c:d6:cf:34:45:0a:c3:b8:a8:b4:0d:19:
         73:bd:f6:3e:d2:0d:cd:0f:34:2e:6c:db:2b:d5:d5:db:d2:07:
         b7:ef:18:99:c4:e0:0c:10:f6:21:84:14:b8:9d:77:b0:4f:6a:
         d7:02:01:50:89:71:d6:85:79:6d:6d:74:c9:e7:e6:ed:5e:ed:
         b4:f2:22:a9:17:c1:50:63:c7:58:14:1f:c4:89:cd:62:d7:2e:
         95:2d:5a:ce
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----