Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc7bce23-cfca-4423-8d6a-5955a467c4d1.roa
File:                     dc7bce23-cfca-4423-8d6a-5955a467c4d1.roa (raw, json)
Hash identifier:          tlE63P2zLFQFBLoXk5SNtq72ZKuHGxNWcxxDFmT+C/w=
Subject key identifier:   3B:4C:FD:E4:17:3B:95:94:61:E2:B3:C6:C7:A3:22:79:C5:6D:F0:4E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       50222A7C65F676704CAFA8C6B9330114E9134305
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc7bce23-cfca-4423-8d6a-5955a467c4d1.roa
Signing time:             Tue 14 Oct 2025 15:51:11 +0000
ROA not before:           Tue 14 Oct 2025 15:51:11 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fec:4800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:22:2a:7c:65:f6:76:70:4c:af:a8:c6:b9:33:01:14:e9:13:43:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 15:51:11 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=134163a3ef1e11338d96731e8b38bea5022fd7b08e85965d8147294a99381d95, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:dd:47:be:6c:c6:41:d0:d6:9a:4b:e2:75:5f:
                    3a:4d:e8:71:96:94:41:cf:fd:2c:7b:52:b8:e3:cc:
                    77:b4:81:36:74:ed:15:4c:2a:2f:32:92:ed:89:cc:
                    c3:92:3e:22:bf:23:11:32:36:84:ba:8a:2c:25:d7:
                    9a:1f:43:7d:c4:62:c1:6f:28:79:66:83:71:7d:34:
                    51:45:98:a7:d5:2b:06:60:70:c9:1f:cc:84:fb:65:
                    16:c2:77:fa:9b:02:c3:20:e7:82:b9:4d:e9:70:3d:
                    a1:3f:82:a8:af:24:e9:ba:4d:49:85:ea:1b:43:09:
                    d5:1e:e9:91:f7:1a:1e:1e:98:20:cf:6c:d3:03:d1:
                    96:bd:09:44:ca:d8:bd:39:b6:f4:58:2f:49:a6:73:
                    1d:3c:57:30:be:47:a7:28:00:75:5c:0a:f9:ed:ea:
                    c0:b4:a7:40:76:8a:ef:21:bd:cc:79:05:09:20:52:
                    39:f7:6c:c0:ff:73:96:ad:44:00:10:a6:22:d6:60:
                    9c:60:b2:ea:8f:dc:da:39:08:e2:91:f5:fe:55:fa:
                    12:74:ee:c3:1b:11:66:eb:20:39:f3:bc:98:1b:8c:
                    43:45:80:7e:21:06:3f:e3:4e:21:70:2e:14:9c:0f:
                    8a:1c:54:6c:db:39:9d:f1:cd:8f:1a:59:40:5f:6d:
                    a8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4C:FD:E4:17:3B:95:94:61:E2:B3:C6:C7:A3:22:79:C5:6D:F0:4E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc7bce23-cfca-4423-8d6a-5955a467c4d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fec:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:9a:31:8b:ba:e8:7b:a9:2d:9e:1b:3a:7a:ca:2e:45:b5:5e:
         ba:e0:6d:c1:fa:19:46:65:b4:d6:11:c2:4f:7b:8e:1a:b1:b5:
         6a:9d:02:21:32:d9:1b:57:49:95:d3:9a:38:fe:36:35:b8:08:
         54:19:8b:94:09:00:49:9f:0f:d1:3d:5d:b5:cf:83:90:91:b1:
         8d:84:a1:93:4c:f4:cc:73:ef:03:ea:4b:39:c4:96:15:4d:72:
         48:d5:de:72:3b:7c:da:98:77:13:6f:12:88:0f:50:4f:36:bd:
         94:4f:03:60:88:48:20:e7:ca:ae:b0:dd:ff:15:ac:4b:74:e7:
         60:95:b1:e1:eb:aa:49:d2:1d:80:48:c1:a7:36:56:9e:03:54:
         9b:cd:18:11:06:44:55:cf:ef:8c:6c:db:0e:08:98:33:64:60:
         ef:d7:70:a0:72:92:fd:a4:24:a6:81:9b:57:7b:67:3c:9f:7e:
         b6:fc:61:11:ba:ef:1f:e6:95:42:10:63:dc:b5:60:f2:a8:fb:
         95:8c:ee:48:dc:2c:89:20:54:f8:4b:ae:46:09:6b:40:eb:b2:
         ca:35:8d:40:10:65:97:69:82:17:9f:e8:18:e9:3d:14:b4:6f:
         a8:46:6c:5b:67:91:ec:98:3f:67:f4:6f:d4:70:20:dd:70:d2:
         e5:d3:56:e3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----