Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9966156b-f417-4a6b-bee2-368635ac93a8.roa
File:                     9966156b-f417-4a6b-bee2-368635ac93a8.roa (raw, json)
Hash identifier:          9mPkssnR+nzehKwUwfWgCbw4uQWCm8aQPTCWdAKBXmc=
Subject key identifier:   EB:4D:DD:44:29:0E:C1:09:0C:D1:EE:C2:7A:98:FB:3C:11:93:CF:67
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1AA7D8E47DDCFCD4960C0847ED7A59BA7DEF94BC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9966156b-f417-4a6b-bee2-368635ac93a8.roa
Signing time:             Sat 18 Oct 2025 02:41:00 +0000
ROA not before:           Sat 18 Oct 2025 02:41:00 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f2f:8000::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:a7:d8:e4:7d:dc:fc:d4:96:0c:08:47:ed:7a:59:ba:7d:ef:94:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 02:41:00 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=fb4bbc098c6411fe557f05411bba06d7ab885a948e606eccbe783d9179465522, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:14:26:2b:9b:10:22:04:d7:a4:0d:f1:95:7b:
                    41:46:ee:fb:6b:29:40:e9:76:89:f7:93:be:39:7a:
                    3b:8c:c3:cf:8c:e8:e2:9b:5a:f3:53:a2:24:f6:0f:
                    dc:04:27:22:1f:a9:5f:26:37:87:c0:2b:7f:b6:d1:
                    87:a7:6d:35:82:b2:31:bd:2b:a1:06:af:e8:82:c4:
                    a2:b2:58:04:aa:5d:64:56:5a:d1:f5:ab:f7:d4:38:
                    48:40:06:10:d5:41:28:e9:9b:8f:e5:d2:6c:7c:b2:
                    9b:56:f9:09:f3:db:c1:ae:24:df:54:e4:ca:61:14:
                    5e:fb:59:1a:86:c0:2b:27:5e:b8:8a:67:8b:56:bc:
                    5b:a2:28:36:e1:a8:33:f0:02:e9:11:d2:f2:ac:38:
                    ba:d4:e9:f2:ec:de:76:86:ee:ab:8d:a0:b0:dd:ce:
                    f0:f9:01:c2:68:21:ef:74:f8:0a:9b:3a:30:0b:37:
                    a9:ea:5f:1e:55:f5:c7:39:5b:b0:c1:d2:d8:2f:24:
                    a9:04:b1:4c:82:c4:8c:06:9c:c4:79:88:b3:d2:57:
                    45:b7:c3:33:db:49:f4:6b:8d:9f:c1:09:34:0e:74:
                    cc:26:46:e0:88:ec:72:f0:8e:12:a0:18:c9:83:b2:
                    66:28:58:39:e5:62:02:ba:94:f2:be:43:61:3f:6f:
                    8e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4D:DD:44:29:0E:C1:09:0C:D1:EE:C2:7A:98:FB:3C:11:93:CF:67
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9966156b-f417-4a6b-bee2-368635ac93a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f2f:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         97:ce:91:65:cd:43:9f:66:1c:fc:95:f1:47:a7:0c:39:e3:e6:
         54:74:5d:cc:43:de:d7:12:b0:34:18:ee:c1:bc:f2:65:c7:f2:
         70:4d:72:3e:c8:a2:b6:ef:6f:5b:4b:dd:61:43:73:d3:b1:0e:
         3a:05:8a:8b:ac:d7:b4:c2:71:9a:74:c3:5f:13:09:72:6a:d4:
         f1:21:38:93:7f:19:e9:b0:a7:77:fe:1f:29:e6:2c:f4:83:ea:
         df:b7:a7:07:16:e5:26:2a:09:84:79:0a:4a:1e:f1:21:7d:32:
         a0:8f:f8:b1:f5:e1:12:0e:15:16:e7:59:6a:e0:aa:b6:5a:2a:
         48:fd:38:d5:fd:fa:49:7c:a1:71:54:e2:eb:c8:ef:92:ad:05:
         43:32:59:ca:8d:7f:7d:21:dc:34:af:c6:8f:13:34:c4:60:76:
         00:74:df:f0:4b:57:f9:7f:70:d9:0d:ec:f3:ea:ef:c9:c3:da:
         f3:c5:b6:34:21:a8:52:c4:d8:e7:fb:05:84:8c:a4:5c:e0:b9:
         fd:56:81:fb:e8:d1:da:48:eb:41:aa:84:59:10:af:b7:32:40:
         ad:d4:d8:ef:78:83:0d:f5:81:d5:f9:aa:a5:1f:86:9d:e3:38:
         2a:5c:46:27:3e:17:1b:75:9d:f3:6b:eb:2f:42:df:ee:35:d8:
         2b:1f:8d:22
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----