Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6a7568b-c400-41ec-baa3-e382b85e8785.roa
File:                     f6a7568b-c400-41ec-baa3-e382b85e8785.roa (raw, json)
Hash identifier:          ST/vpdLpwoJEId6fdTk0MpbsGCWM9JqKU1pdn0dZUao=
Subject key identifier:   48:3C:F0:84:A2:84:C4:1C:BB:D8:72:54:A5:87:0C:20:E8:49:8D:BD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       081C26599BB5D4EA27B55B4E946D4BE4BBEC3B3C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6a7568b-c400-41ec-baa3-e382b85e8785.roa
Signing time:             Tue 07 Oct 2025 00:42:46 +0000
ROA not before:           Tue 07 Oct 2025 00:42:46 +0000
ROA not after:            Tue 11 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fb9:e000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:1c:26:59:9b:b5:d4:ea:27:b5:5b:4e:94:6d:4b:e4:bb:ec:3b:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  7 00:42:46 2025 GMT
            Not After : Nov 11 23:59:59 2025 GMT
        Subject: serialNumber=eb02519b3469b199dc4e4d97f46ef90084c24a825890469883c456e05069ac4f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c3:86:a6:f4:e5:b5:83:48:27:11:b1:b8:63:
                    c4:48:85:ce:4f:43:f3:ed:77:2f:4a:8c:06:0a:e7:
                    d5:5b:71:c0:a5:c4:5c:e4:47:11:1e:b5:87:be:63:
                    37:d5:b7:49:0b:df:76:d0:c1:5e:bb:2b:81:67:f4:
                    b9:c6:15:04:ee:79:9b:43:c0:3d:94:1f:6e:63:6e:
                    85:91:5b:e2:be:c1:03:06:95:cc:78:9c:8c:87:bc:
                    20:ef:39:c9:12:50:b6:a5:5e:af:ed:88:db:20:6f:
                    b3:68:a0:a6:97:96:29:62:d3:ca:79:17:25:0f:69:
                    64:db:00:c8:a3:d6:59:d3:f0:21:b3:f8:33:af:2f:
                    b9:fd:49:27:4a:25:d1:0a:f7:5a:a1:21:53:ba:5f:
                    b7:30:27:67:d3:da:e7:5e:de:41:86:94:0e:25:3b:
                    3c:d3:15:db:59:f3:eb:74:07:89:d2:f0:6b:16:ef:
                    52:d3:66:7f:74:f8:46:6e:47:4e:6a:64:0f:12:91:
                    59:9a:f5:7e:43:83:5c:d4:9f:05:bb:b3:80:48:f0:
                    7b:97:ff:92:f9:ba:bb:52:a7:6b:ae:d9:cd:bf:d8:
                    47:3b:42:be:21:d6:bb:ed:a4:08:8f:7d:a1:e2:36:
                    15:a9:51:c9:94:76:85:ec:2a:45:17:5f:7a:04:83:
                    38:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3C:F0:84:A2:84:C4:1C:BB:D8:72:54:A5:87:0C:20:E8:49:8D:BD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6a7568b-c400-41ec-baa3-e382b85e8785.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fb9:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         d8:e3:d0:36:f0:c0:e3:56:3f:0b:df:8a:68:e8:94:a5:ea:4d:
         23:b9:69:13:41:06:e1:79:08:97:7b:db:9b:86:f2:b9:ce:d3:
         fe:54:cc:45:02:d8:76:84:8c:cb:6e:ae:98:d2:1f:ea:e6:9e:
         d1:a1:f1:6c:1b:7a:9e:d0:91:06:45:b3:a0:9b:00:b3:65:62:
         e1:fc:ba:28:1f:cb:73:ba:b9:a0:0c:5b:52:d4:28:bc:d5:df:
         63:d1:29:36:ca:f9:24:7f:a1:44:e7:57:bb:47:07:89:7f:6e:
         5b:19:d3:1a:a0:7a:3f:6f:29:bb:af:e9:20:79:e7:fd:63:1e:
         f0:51:51:4f:79:9e:b5:3c:b8:06:4a:e5:de:0f:39:ab:82:00:
         7a:6b:d3:91:3d:a8:b7:10:43:74:d3:bf:50:06:29:67:8c:70:
         16:56:e7:82:00:fd:de:b4:f3:c3:5b:29:96:f7:ef:7d:69:d2:
         56:95:2f:d9:2e:5a:44:2b:40:36:34:fd:90:17:9a:b5:87:2d:
         8d:17:da:48:db:fa:19:57:15:bd:29:23:78:89:59:1d:40:7c:
         63:6d:5d:33:bb:30:45:18:77:46:7a:e7:63:be:05:e0:10:e9:
         42:63:4f:98:7b:f8:f4:50:d6:aa:75:8b:1a:a0:af:18:30:36:
         4f:0d:f4:d9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----