Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10026e5c-6cb6-43d7-8baa-8bc99a4d7bbe.roa
File:                     10026e5c-6cb6-43d7-8baa-8bc99a4d7bbe.roa (raw, json)
Hash identifier:          OBd8lI+RPxzO23gUtn8roNmteUTKu+p7e9CbzMyFPGQ=
Subject key identifier:   06:67:B6:BD:45:7D:06:7D:BC:34:F7:A3:D1:86:FA:FE:CB:7E:D7:D2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       65A48E316DD93658A3C80A5B97303E843A46CD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10026e5c-6cb6-43d7-8baa-8bc99a4d7bbe.roa
Signing time:             Wed 12 Nov 2025 00:50:53 +0000
ROA not before:           Wed 12 Nov 2025 00:50:53 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f2b:4000::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a4:8e:31:6d:d9:36:58:a3:c8:0a:5b:97:30:3e:84:3a:46:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 00:50:53 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=c8c24c67e4345b366059218536b0ae801f0389eafcdd9922601c787f4500b45e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b0:e4:57:e7:82:bc:89:61:94:db:82:c4:58:
                    be:9b:37:0a:24:06:0c:aa:57:3d:de:b0:47:e5:f6:
                    79:70:9e:f0:7c:89:fb:16:d2:b5:09:de:ec:f7:4e:
                    27:5d:66:a7:24:1c:a7:a3:9d:64:91:12:b6:c7:e3:
                    4e:bf:a1:da:5d:cd:17:1f:59:ba:e2:1e:b1:d0:15:
                    b2:d2:ec:fb:1e:20:72:02:34:e2:22:5c:59:96:1a:
                    80:26:35:b6:93:2e:57:b4:fc:55:d7:ee:1d:24:68:
                    f2:99:bd:1d:18:44:59:ae:21:3d:53:e1:87:45:5e:
                    05:b6:ce:0a:fd:b5:ed:ef:36:ea:9f:40:4c:d7:bb:
                    13:25:0f:95:73:cd:49:86:c7:05:60:9a:6d:e9:e0:
                    c4:8a:3e:63:f0:cd:bb:c9:37:ce:cf:dd:4e:77:74:
                    69:b9:7e:8e:13:5f:b9:45:d9:8f:b3:58:9f:77:53:
                    f5:70:d9:b3:b7:11:74:2b:7e:d9:94:80:1b:f7:8d:
                    64:1c:40:e1:76:5f:13:71:1e:aa:75:80:bc:84:0c:
                    77:11:84:ad:1d:00:89:0e:53:84:78:e5:83:cc:72:
                    ed:5e:89:c4:0f:3e:15:2a:ec:da:ba:1b:54:ef:37:
                    62:e6:3d:d9:65:cb:71:f5:4a:64:c9:ba:b6:d8:71:
                    6d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:67:B6:BD:45:7D:06:7D:BC:34:F7:A3:D1:86:FA:FE:CB:7E:D7:D2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10026e5c-6cb6-43d7-8baa-8bc99a4d7bbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f2b:4000::/37

    Signature Algorithm: sha256WithRSAEncryption
         07:b5:a5:45:65:1e:64:17:bb:44:a8:a7:b0:b1:87:d3:b9:32:
         5d:07:c7:35:ad:87:3c:06:8a:98:2f:6c:af:86:4a:71:12:fa:
         dc:03:e4:22:3a:78:ea:b8:75:5a:d6:d3:3f:ed:61:1c:36:47:
         12:e3:b7:cc:31:d7:72:4f:19:21:0d:58:72:69:72:b6:ea:bc:
         84:f2:3c:76:3f:6d:90:20:c3:fa:7d:cb:89:70:70:db:b9:c6:
         45:76:dc:c9:41:f7:c7:3d:1c:52:47:a5:65:86:f6:94:fe:a4:
         9c:78:e3:9a:50:73:c2:58:40:da:53:fa:ac:ff:4e:47:2d:70:
         e0:ff:22:34:de:34:fc:b7:16:13:a6:72:c6:e0:7c:cc:f3:c5:
         c0:a5:a5:ea:e1:ba:55:87:c4:54:7f:19:7c:99:52:51:b4:ff:
         d0:ef:a2:01:8f:80:75:6d:97:e6:59:40:51:e1:d2:6c:66:bc:
         fe:ba:fc:3f:a9:f7:c7:ab:bc:90:80:19:e1:93:8c:65:29:97:
         9b:7b:0b:67:ac:a0:97:5e:d2:cd:8c:34:ea:3f:57:95:0d:88:
         a4:f8:e7:c4:67:fa:5c:1c:b6:ec:75:9b:fd:5d:c2:17:7d:a3:
         19:a6:11:c6:a7:3a:23:a6:04:09:e6:5f:0a:d0:f4:9d:14:03:
         2f:56:aa:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----