Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f89554b9-b6ae-4a2e-b141-281d3ff873d3.roa
File:                     f89554b9-b6ae-4a2e-b141-281d3ff873d3.roa (raw, json)
Hash identifier:          Crbf79WtQAPHylNjcm3gXODtaTkqZfKMnl2XN8dNTS4=
Subject key identifier:   3D:CE:BB:94:0D:E4:69:A9:AB:29:10:22:3E:8A:7B:73:A7:C7:9B:25
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       335E7953E50187DBF7E1B220DF413C510B962580
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f89554b9-b6ae-4a2e-b141-281d3ff873d3.roa
Signing time:             Fri 17 Oct 2025 20:50:22 +0000
ROA not before:           Fri 17 Oct 2025 20:50:22 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f61:c040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:5e:79:53:e5:01:87:db:f7:e1:b2:20:df:41:3c:51:0b:96:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 20:50:22 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=0e0d4bf588f4ac71657843af3a3b6c11ba5ddfc52e43fd5877379630f10eb221, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c4:17:ab:b9:a8:08:a7:df:c4:c6:c8:f3:90:
                    9d:d0:e7:1a:d3:5c:f6:4a:40:40:96:da:26:be:8b:
                    05:a5:5d:c1:b9:5d:f8:88:83:c0:37:03:78:fa:5d:
                    a7:77:e5:ca:1e:84:70:d4:a3:a8:6d:15:be:29:bd:
                    69:26:e2:c4:04:ca:04:19:2a:62:8f:52:8c:18:fb:
                    58:85:39:90:1b:d5:ab:18:e3:59:08:cf:4b:7b:eb:
                    3c:c3:16:56:c9:71:3e:66:57:ec:39:ba:d7:5b:88:
                    5d:5f:28:ab:47:11:ca:cd:22:ea:5b:d6:32:21:e5:
                    35:4a:8c:37:a3:a0:a1:3c:2b:34:79:4e:66:55:ba:
                    65:ba:4d:15:74:77:77:a2:a8:e5:4a:9a:ee:d0:a9:
                    0f:fd:ab:c2:b3:82:d1:bd:3f:ff:90:a6:8f:8c:c3:
                    d2:9a:84:ea:86:d7:c3:cf:60:ed:ae:52:e0:3a:22:
                    8f:3c:b1:21:63:ab:bb:0b:c2:b0:1d:9c:1f:30:44:
                    55:45:f3:14:3e:b6:18:e8:8b:05:d0:41:a7:0a:4f:
                    26:a5:42:a3:0a:ba:9a:31:6c:46:91:fc:6a:93:9c:
                    68:fa:d5:b2:45:21:d9:e6:d4:1a:59:02:52:77:47:
                    68:ea:e2:f8:22:52:9e:bf:30:5e:8a:f1:df:32:30:
                    80:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:CE:BB:94:0D:E4:69:A9:AB:29:10:22:3E:8A:7B:73:A7:C7:9B:25
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f89554b9-b6ae-4a2e-b141-281d3ff873d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:c040::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:8d:79:4e:e9:3c:e8:65:aa:fd:23:92:93:37:47:d6:b1:49:
         7b:82:e0:7f:21:9f:42:d4:2b:46:c9:af:e5:8c:25:18:95:32:
         e1:4f:59:e3:90:fc:07:a4:15:e5:32:af:9a:02:60:aa:c8:18:
         e0:9a:8e:09:10:ed:72:73:79:35:1f:17:97:09:92:3f:06:8c:
         36:15:18:0f:01:a2:d1:a2:71:41:04:2d:13:c9:6e:b2:7f:69:
         e8:82:1e:fd:14:7d:c3:16:1b:e2:a7:23:cc:f0:c2:aa:d0:ec:
         7f:94:e9:a5:4b:c2:16:47:07:a6:2e:ba:d3:2d:9d:ee:dc:1d:
         21:df:6e:e5:ca:0d:04:4a:f3:70:f4:80:a8:4b:74:93:a9:1c:
         4b:49:62:75:e1:04:91:50:a5:e2:9f:27:0b:78:fc:98:82:a9:
         a8:47:4f:07:06:0f:67:11:a8:25:4f:1e:b3:8b:02:d1:f8:76:
         c5:19:6f:67:22:55:3b:99:21:85:d1:3c:9e:2c:d1:c4:fe:c5:
         e1:f0:7c:03:af:93:3e:06:93:82:82:d1:21:1a:b0:67:bb:c6:
         c2:47:9b:3c:ea:60:ce:9e:76:f6:48:2d:6b:c0:4d:3d:f1:54:
         e0:f5:c4:24:de:55:3e:89:b8:7c:bf:6a:6e:21:5a:08:d0:b0:
         67:6d:51:a9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----