Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1f32224-d90c-4834-9dd6-5bb1a05fb638.roa
File:                     b1f32224-d90c-4834-9dd6-5bb1a05fb638.roa (raw, json)
Hash identifier:          ZjFeNxRM4VOs8Q6ZuCzWZvopOC7JVufOM6ZH4o7a2zM=
Subject key identifier:   D0:E4:BC:21:AB:3E:B0:15:1A:1E:C6:E9:BC:EB:53:34:B4:69:4A:46
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4F2FCF96A071197D06FE2D3EB957DA48523A16E8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1f32224-d90c-4834-9dd6-5bb1a05fb638.roa
Signing time:             Sat 18 Oct 2025 00:20:07 +0000
ROA not before:           Sat 18 Oct 2025 00:20:07 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1e::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:2f:cf:96:a0:71:19:7d:06:fe:2d:3e:b9:57:da:48:52:3a:16:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 00:20:07 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=6e436b601a895cbdbd7a7d6754c1699fcec969e76757670aeaf171f5d717d2fd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:da:13:1e:28:53:89:68:15:6a:60:ee:ec:bc:
                    d3:50:94:ec:9b:5f:a0:91:7d:1f:82:0e:40:a2:f8:
                    c5:d1:e5:a2:3e:dd:97:82:8c:92:09:b8:6c:12:30:
                    8d:fd:67:d0:45:4e:f8:cb:ed:8f:a3:0f:49:5c:fb:
                    ca:67:3a:19:3a:ba:dd:ad:5e:71:04:03:47:30:b0:
                    dc:d1:2b:2e:4e:7c:0f:4b:71:74:1b:31:fd:79:16:
                    c5:b1:c3:1b:9a:99:28:86:48:40:22:a6:a9:00:7a:
                    ae:07:0b:cf:f1:18:8f:01:85:9c:1e:49:37:29:47:
                    8b:a1:ba:09:49:9e:f2:cc:a2:0f:c4:96:cb:d1:e1:
                    f5:cb:30:07:a6:9d:34:c4:a6:f3:24:26:69:04:31:
                    46:5b:c1:96:96:f8:1e:b9:17:f2:d6:32:7b:8f:12:
                    0f:12:b1:eb:88:6d:00:5d:d2:eb:37:40:6f:04:68:
                    a9:42:7c:24:2c:e5:d2:90:21:aa:f8:21:90:06:3e:
                    18:a1:71:d3:9b:86:e6:2e:87:eb:13:02:50:da:01:
                    9e:64:e0:96:94:e1:0b:6c:e3:e2:85:90:1c:8a:d4:
                    05:2a:09:19:e2:c8:f4:a7:eb:69:f7:c7:e8:0d:57:
                    db:17:e6:3b:c3:d8:40:6a:a0:3c:08:39:a5:78:28:
                    05:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E4:BC:21:AB:3E:B0:15:1A:1E:C6:E9:BC:EB:53:34:B4:69:4A:46
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1f32224-d90c-4834-9dd6-5bb1a05fb638.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1e::/36

    Signature Algorithm: sha256WithRSAEncryption
         9b:49:51:d6:1e:33:09:14:e3:25:fd:e9:85:c0:2f:58:ae:b4:
         96:0b:9f:42:12:8e:d9:e5:45:cd:b2:07:66:56:3d:d7:7e:ca:
         54:66:a6:1a:0c:77:9d:59:95:e0:f1:f6:cd:97:f0:01:69:13:
         b2:a3:36:31:c0:55:9a:25:e4:a7:73:19:01:5f:b2:ed:07:f2:
         de:f1:60:cf:8c:40:41:6b:39:64:d8:14:99:de:55:f4:25:1d:
         58:f7:4c:2d:80:d3:db:61:2b:7b:22:5d:98:7e:23:32:66:21:
         74:06:47:b9:46:19:8a:fc:43:75:53:83:20:16:90:e8:42:5b:
         e7:bb:11:92:0f:28:f7:ad:bd:46:d7:20:a7:60:ee:02:45:79:
         42:31:29:f5:eb:39:9b:7d:23:71:0c:bd:a9:00:49:7e:fa:6b:
         bc:83:d2:a7:86:ae:42:57:39:b1:cd:c9:69:65:6f:ea:bd:18:
         73:e5:50:40:ab:95:26:bc:4d:d4:99:38:a0:4b:1a:70:97:de:
         e5:49:60:c1:34:b8:0c:5d:6b:a0:f0:aa:b8:43:a4:80:e7:f4:
         60:87:c5:53:d2:75:1d:70:6f:85:87:f0:96:a6:20:61:14:ce:
         d7:30:7b:da:3e:0b:20:16:eb:35:3a:5b:d4:d7:ab:9a:5b:46:
         ae:af:3e:75
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----