Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1c8c053-5660-4b24-8aaa-28cebd569f74.roa
File:                     e1c8c053-5660-4b24-8aaa-28cebd569f74.roa (raw, json)
Hash identifier:          moiIqf+cyJSZKa6jJ8yt7XroTDEhowKBOj2knXScJZo=
Subject key identifier:   D7:5E:C9:9F:83:C9:28:8C:9F:00:BD:2F:E0:61:99:A1:C6:C2:A3:91
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0A52A4DCB9FBCE3F8FF1D84E6680F8099A588835
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1c8c053-5660-4b24-8aaa-28cebd569f74.roa
Signing time:             Sat 18 Oct 2025 03:31:10 +0000
ROA not before:           Sat 18 Oct 2025 03:31:10 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ff5:8000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:52:a4:dc:b9:fb:ce:3f:8f:f1:d8:4e:66:80:f8:09:9a:58:88:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 03:31:10 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=e4439c8990b7d5127ee357edc55ea3e0858fe9337071c9487f361a92dde27fb4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a8:7b:ef:c5:8a:47:0b:48:91:02:3e:f3:8f:
                    ed:6d:ca:3c:3a:6a:ad:44:fe:75:62:f3:20:db:c6:
                    b5:fd:b4:f5:d3:0a:10:05:52:cf:1e:cb:26:19:c0:
                    ba:e4:13:81:96:cd:71:c8:0f:27:54:6b:85:75:0b:
                    db:6b:36:61:76:6f:9f:8f:3f:db:8f:2f:92:06:57:
                    34:93:0d:7d:30:3c:79:11:7e:a2:c3:4a:8c:ef:a3:
                    34:c1:5f:07:35:c6:9f:5b:67:6d:3c:ab:e5:a7:c8:
                    3e:64:57:eb:f5:53:e7:f3:d5:61:8a:b5:4e:8d:c0:
                    22:59:a5:5d:a2:e4:1f:9b:b1:ce:31:a6:1b:b0:5e:
                    45:1e:2a:6d:b0:9f:82:e2:71:e2:fb:a3:b7:06:0c:
                    2d:bf:51:a4:30:58:2a:c1:da:92:1a:c4:c7:1a:e2:
                    24:70:7f:41:68:91:99:4b:5f:4d:f0:db:f7:c6:8c:
                    b5:b7:b6:2d:d5:6b:d4:4c:68:2d:83:8e:70:22:25:
                    03:d4:e1:a7:46:1e:4b:31:3e:f3:29:d1:39:15:47:
                    ba:a6:b2:f1:35:d7:7f:1f:7e:d0:93:19:a9:f5:75:
                    26:cb:fa:ad:00:ae:29:53:24:99:95:ba:49:ca:00:
                    1f:d6:b9:32:5e:91:3f:f0:4c:df:ec:db:5b:90:da:
                    10:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:5E:C9:9F:83:C9:28:8C:9F:00:BD:2F:E0:61:99:A1:C6:C2:A3:91
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1c8c053-5660-4b24-8aaa-28cebd569f74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff5:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         24:97:05:b5:4f:d4:e1:27:2b:32:78:2b:94:c0:b2:fa:2e:7d:
         21:e2:fd:e9:86:bd:56:57:2f:b8:d4:78:da:18:ef:c2:b1:d1:
         6b:6b:df:1b:4c:a0:e3:26:9b:9d:80:ac:57:32:0a:2d:72:1f:
         f3:6e:7d:03:79:52:1a:62:c0:b5:de:39:67:38:da:25:83:fd:
         65:14:f9:56:76:a8:cd:a1:3b:a6:15:0f:20:f7:e1:d7:01:3c:
         a7:07:bc:a7:44:1c:7b:c3:98:78:08:65:73:e3:f3:ec:06:9e:
         f3:a4:54:20:5e:da:7b:78:91:8f:21:45:a3:fa:1a:be:1d:bc:
         48:73:06:53:4e:55:fe:1d:24:a7:e2:3d:ee:6e:20:75:fb:a5:
         14:37:35:ef:a1:af:c7:cb:fe:62:cc:28:7d:8a:c2:6a:db:4c:
         7e:33:5e:a7:8f:74:70:6e:1b:81:7d:0d:13:9e:1e:23:37:31:
         aa:5f:c9:43:a2:15:c6:7e:25:8d:53:24:d3:bd:a8:81:b3:46:
         16:b5:67:0f:a3:07:05:00:0a:38:b0:75:9d:4d:70:4c:da:7e:
         8f:36:ec:5a:58:98:f1:21:59:ab:94:d4:aa:58:26:f3:63:77:
         69:28:0d:d2:6b:de:a4:e3:6a:37:14:49:41:44:17:61:42:7d:
         4c:49:d6:3c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----