Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5e4e829-7f31-4dcb-b897-412bd138c9ec.roa
File:                     d5e4e829-7f31-4dcb-b897-412bd138c9ec.roa (raw, json)
Hash identifier:          dKDNYCOS52KIALy3N4yMeS41a3hUc+hpQMtklHuEWsE=
Subject key identifier:   38:98:61:21:80:CC:87:31:9A:C0:96:96:A8:01:BB:F9:25:1E:7C:4D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       725BED7233FC724167160934E41E8F244EA6B8AC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5e4e829-7f31-4dcb-b897-412bd138c9ec.roa
Signing time:             Fri 17 Oct 2025 21:31:21 +0000
ROA not before:           Fri 17 Oct 2025 21:31:21 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:80f0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:5b:ed:72:33:fc:72:41:67:16:09:34:e4:1e:8f:24:4e:a6:b8:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 21:31:21 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=0e5f0eb6d38b0ac3701c06a4bc693ac2fd92258a2ddafbfe68a54c18b68aabfe, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ac:f0:28:70:ee:60:3c:6f:f4:44:10:7b:44:
                    f7:62:d7:12:09:9f:98:d4:f0:4b:29:cf:a4:76:57:
                    e9:f2:46:a5:1a:49:3b:80:13:90:cc:39:a1:19:4b:
                    b0:08:6c:78:b6:7f:c9:6f:67:4e:4b:b2:1b:88:32:
                    ed:cb:14:52:11:ee:d9:28:a3:77:ea:4a:3e:b1:ab:
                    ac:4b:6f:20:88:4b:6d:21:79:0e:51:30:8a:12:db:
                    59:d8:23:a0:53:6e:18:54:f2:b0:c0:e6:e9:fb:74:
                    70:18:e6:c1:f4:4d:26:0f:b9:af:92:87:ce:23:2e:
                    4b:8c:c7:33:6a:07:3d:bf:d4:e8:c7:06:11:38:89:
                    d4:59:72:be:53:82:b9:89:83:3b:be:a1:e6:8e:c5:
                    4e:33:34:74:8d:bf:dc:7f:64:3b:08:ae:30:fb:58:
                    40:12:81:89:a8:61:71:4f:e6:d4:b8:16:ee:49:ba:
                    7b:c4:ce:ae:02:22:6d:db:a3:9f:6a:b0:90:98:6b:
                    50:6e:cc:bb:18:9f:a7:8c:22:a5:62:cf:de:d3:b0:
                    f4:16:d3:5e:75:20:c0:5c:ef:35:35:5e:bc:99:a3:
                    26:58:5b:40:5b:32:11:4d:9d:3d:67:5c:af:79:0d:
                    e6:62:dc:f2:6e:cd:c8:42:6c:f6:4b:6e:c9:eb:2a:
                    c9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:98:61:21:80:CC:87:31:9A:C0:96:96:A8:01:BB:F9:25:1E:7C:4D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5e4e829-7f31-4dcb-b897-412bd138c9ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:80f0::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:52:96:85:47:3e:52:7d:cb:61:c8:99:97:a0:88:c1:ba:cd:
         bb:ed:aa:2e:5a:57:56:b4:e6:03:76:9c:72:70:91:e0:0d:08:
         51:bc:c1:24:9d:c1:39:f2:87:38:69:23:ea:1b:b4:37:66:2b:
         8c:e5:71:8a:70:ae:3e:d0:57:26:be:83:fc:5f:d0:1c:aa:83:
         37:b4:c0:0d:fd:83:e8:04:68:78:57:4b:aa:f2:73:30:19:0a:
         6f:71:53:db:b1:21:33:04:49:f6:30:4f:b6:02:1a:b2:09:5e:
         52:85:d9:0a:b7:7a:6a:da:05:38:ec:07:0e:eb:6d:f1:3c:24:
         13:ab:7d:93:95:35:94:4f:2f:d9:73:91:74:dd:1c:2a:05:9d:
         e6:08:9a:eb:7a:ea:3b:04:47:c8:7e:ab:18:ee:af:04:09:a3:
         84:f6:10:85:54:32:95:fd:8b:38:7e:ed:b1:0b:1a:c4:1e:6f:
         9a:25:74:0a:f7:3a:4e:9a:e9:6d:be:fa:57:0c:88:c0:40:5a:
         a0:db:61:e6:57:3a:1a:10:24:11:b8:b8:ce:2a:73:8a:3b:73:
         ef:12:a1:02:3d:bd:91:b9:49:6a:fb:ae:83:95:43:47:eb:e8:
         a5:88:8e:d6:c7:6c:f8:54:55:4e:8c:38:3d:27:f2:79:72:af:
         b5:55:05:fd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----