Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37c4fd19-0ccc-4bec-b771-88b33e6e04ba.roa
File:                     37c4fd19-0ccc-4bec-b771-88b33e6e04ba.roa (raw, json)
Hash identifier:          S3MwgUObXBiBc2VT0jeq0Yh2OeHaGiRz9XpME+GcRv4=
Subject key identifier:   BD:CE:3E:77:FC:03:C8:77:B8:8F:76:93:9D:1E:4D:16:6B:1B:2A:83
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       20FEB9D663FFCE0CA81DD3FD98EEF1712CFCAF08
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37c4fd19-0ccc-4bec-b771-88b33e6e04ba.roa
Signing time:             Sat 08 Nov 2025 01:01:34 +0000
ROA not before:           Sat 08 Nov 2025 01:01:34 +0000
ROA not after:            Sat 13 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fec:3400::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:fe:b9:d6:63:ff:ce:0c:a8:1d:d3:fd:98:ee:f1:71:2c:fc:af:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 01:01:34 2025 GMT
            Not After : Dec 13 23:59:59 2025 GMT
        Subject: serialNumber=433da5c9bbca9cf5392149bc72d2623bf095d4dbaa9c2a97de13377bfd6c6765, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e8:0d:df:23:38:4d:20:10:d9:ea:c8:d6:c7:
                    98:83:ce:1d:40:3e:e0:b4:d7:0a:d5:cf:39:50:cd:
                    59:8d:31:c3:9e:82:82:7a:a6:ee:6f:52:ce:e1:af:
                    d5:88:82:9d:e0:46:96:9d:3d:e6:a0:4c:7f:a6:cf:
                    0a:0a:e1:b7:10:eb:b6:de:0a:a7:7e:2e:4b:fc:a0:
                    66:ae:b7:91:3c:66:09:07:f1:88:14:85:dc:53:6e:
                    4d:6f:a3:86:cc:72:a0:0f:63:87:ee:ae:69:2d:87:
                    34:7b:19:52:08:5b:4e:a3:3b:d9:fc:39:39:a9:39:
                    0f:6b:56:08:53:fa:e8:5a:3d:c1:08:0e:2f:e3:70:
                    28:d3:36:41:e0:47:a7:74:01:b1:f0:3d:69:b0:2f:
                    e6:08:93:6d:2d:d9:02:97:18:61:c3:82:c3:0f:4f:
                    fc:ee:69:e9:ec:31:b6:e6:a8:65:fc:ac:a9:a0:64:
                    7a:2b:b8:95:cf:f8:6c:07:47:ce:40:fc:67:11:95:
                    54:ae:1c:23:ac:15:b9:12:cf:02:54:bc:c7:f8:e1:
                    0a:a2:b4:6c:d5:87:98:44:dc:69:c9:1c:e5:59:b2:
                    ec:92:b4:5e:65:b9:79:a4:15:a8:aa:6b:58:23:18:
                    57:5d:68:c6:b3:fb:61:b2:c0:63:6f:46:d4:3e:32:
                    2d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:CE:3E:77:FC:03:C8:77:B8:8F:76:93:9D:1E:4D:16:6B:1B:2A:83
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37c4fd19-0ccc-4bec-b771-88b33e6e04ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fec:3400::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:02:95:81:b5:62:44:bf:28:fc:9d:96:9c:16:a7:93:d7:86:
         27:c8:2f:5e:80:93:ab:ca:e1:06:d3:de:6b:8a:bf:d9:5d:02:
         6e:d3:83:5e:39:57:8d:7a:8e:11:ca:7c:15:e4:a8:53:a5:ed:
         cf:ca:b9:a6:7d:41:9b:b9:b6:22:d9:42:63:e1:73:a4:69:df:
         9e:8a:3a:7a:c0:f9:30:21:b7:70:08:74:27:13:71:69:3f:fe:
         d1:98:d2:75:86:cb:47:42:03:97:1b:53:d4:c4:11:8d:6f:c4:
         68:cd:f1:12:e2:28:20:58:70:4c:a8:17:ae:31:ab:bf:a1:c0:
         0e:f3:be:ab:82:71:1b:13:15:c6:31:ef:06:86:ad:c9:71:ee:
         92:e3:ae:4b:b8:7b:f6:ab:ec:91:7c:69:93:e8:8b:a5:39:60:
         c6:47:8a:18:9b:03:9d:c7:c2:6d:e8:40:16:48:46:55:75:54:
         57:d1:81:eb:42:c6:e5:f4:9e:c3:45:e4:9d:41:62:57:f8:3a:
         a9:df:a1:4f:03:14:50:2e:76:75:ef:1a:3d:8e:d6:80:34:48:
         d1:8c:47:06:ac:53:e7:3b:78:d1:78:96:aa:d2:8b:ab:70:7d:
         3c:3c:a8:e5:d2:3d:60:b0:03:79:ca:4d:00:8e:9c:8b:df:82:
         91:13:63:c8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----