Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/142ef8f6-986d-4b42-94f1-a5dfd11e5134.roa
File:                     142ef8f6-986d-4b42-94f1-a5dfd11e5134.roa (raw, json)
Hash identifier:          YD4kk5VOgcesVnYp+hG43djHBsbB3EM6BZJHmcM7jXg=
Subject key identifier:   A5:41:86:A7:3B:16:62:37:A9:59:C9:EF:07:6B:25:6C:3B:35:A7:59
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5C6D253A8FA96959BC89011C92E3B515E6904587
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/142ef8f6-986d-4b42-94f1-a5dfd11e5134.roa
Signing time:             Tue 11 Nov 2025 01:40:58 +0000
ROA not before:           Tue 11 Nov 2025 01:40:58 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff2:80c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:6d:25:3a:8f:a9:69:59:bc:89:01:1c:92:e3:b5:15:e6:90:45:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 01:40:58 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=6dd6c895c1ebf71945459b6e2a53c8d13511cedb05475ddef62245b470484765, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f4:53:e9:3e:6e:08:fe:be:87:b0:12:13:97:
                    ab:57:ff:f1:1b:15:d3:99:62:94:ea:84:66:97:5f:
                    56:be:f7:81:64:ee:d4:2c:cf:9a:23:8d:19:60:c1:
                    84:1d:05:c8:f7:11:48:a2:f0:7f:08:8e:59:9e:e5:
                    98:d4:3a:cd:29:2d:a1:4c:7b:6a:c9:be:40:8d:d9:
                    20:3b:9f:7d:c3:40:d3:0e:d1:45:3b:37:a0:81:f0:
                    b9:18:54:7d:c4:6a:d9:76:7b:55:9f:e4:69:da:27:
                    47:2d:da:06:7f:d9:3b:1a:d3:b6:54:66:36:9f:d6:
                    1c:60:a5:da:d5:94:05:65:f8:b1:72:b4:0d:d7:2a:
                    21:3f:88:30:62:58:5d:db:a0:1b:6d:ff:b0:90:b6:
                    46:37:7d:4b:7b:7e:04:20:93:28:a2:e7:05:5d:41:
                    2a:c8:84:db:3d:cb:d0:bf:77:6d:8e:93:a4:c1:1d:
                    61:e2:dc:81:30:41:17:95:c0:a1:4a:d4:0b:a8:c1:
                    91:76:cb:7d:1d:ed:59:32:02:0e:05:14:a8:d2:aa:
                    a0:30:01:e2:b4:d5:3e:aa:8e:96:3f:8a:5c:a9:4a:
                    57:a3:46:03:bc:39:34:8a:f3:65:88:62:a6:dd:34:
                    43:f0:dd:d6:d9:0d:96:d5:00:1c:c7:01:bb:cf:a3:
                    0b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:41:86:A7:3B:16:62:37:A9:59:C9:EF:07:6B:25:6C:3B:35:A7:59
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/142ef8f6-986d-4b42-94f1-a5dfd11e5134.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:80c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:92:5a:e3:76:3d:81:a5:a8:1e:97:40:7f:34:9c:e2:5f:12:
         0f:6d:be:6a:3a:e9:37:5d:ba:64:c9:d0:25:b1:cd:b0:88:e8:
         27:51:56:5b:fb:3a:90:98:39:92:66:49:10:f1:25:f3:ec:40:
         2c:46:1e:5d:1c:fa:3c:b9:76:63:d6:2a:9d:14:97:cd:f5:f7:
         c2:83:8f:5a:e8:94:c9:3d:fa:2e:de:ec:f9:4c:ca:cf:00:de:
         0b:37:95:5c:1a:42:64:9e:60:88:60:6b:b0:a8:86:9c:8a:63:
         4f:08:f2:99:eb:23:84:cc:54:05:ff:b6:01:9b:62:b6:05:4a:
         15:50:53:ec:a2:71:2d:b8:9f:13:cc:61:92:e8:d9:c5:99:1d:
         f6:5c:2d:06:43:71:79:d4:03:64:68:e6:73:97:d3:46:c3:3e:
         27:b9:32:99:6a:0c:26:3a:5f:95:0b:2b:57:07:a1:29:38:c6:
         4c:a5:95:eb:3e:1c:0c:dd:1e:a7:06:17:94:94:b5:75:34:bb:
         c2:6c:c2:a8:77:64:b3:7a:82:7a:0d:0a:17:61:79:fd:f4:60:
         14:aa:1a:e6:f1:71:6a:61:3c:8b:32:88:07:b4:8c:62:fe:11:
         be:79:2e:24:7f:a2:2d:9f:f7:ae:a6:b2:c3:19:9f:40:83:a7:
         55:60:7b:8a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----