Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52c84887-cf08-43a0-8348-848bc01abdaf.roa
File:                     52c84887-cf08-43a0-8348-848bc01abdaf.roa (raw, json)
Hash identifier:          PhflXzTW3aDzPBUm4sHWmGV16m8P06quxmLmlU07BTs=
Subject key identifier:   1F:23:71:F5:DD:A1:B4:7F:66:25:83:B0:0D:8E:FB:F6:BA:DD:94:46
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       18B2CD1E2DACEA81D945918E03F479178E744ED6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52c84887-cf08-43a0-8348-848bc01abdaf.roa
Signing time:             Mon 06 Oct 2025 15:42:47 +0000
ROA not before:           Mon 06 Oct 2025 15:42:47 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ffd:8010::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b2:cd:1e:2d:ac:ea:81:d9:45:91:8e:03:f4:79:17:8e:74:4e:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 15:42:47 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=d9bb76e94aac61a2c25f03b012482e6dee7dd43299f3ed4edea55fa963000d27, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5f:25:c9:e5:c6:5f:f7:d8:cd:59:d3:58:45:
                    0c:c9:f3:ff:32:b1:ea:15:58:96:92:62:6f:59:25:
                    83:2c:1d:fb:8a:72:2d:22:6d:14:d7:2f:91:cb:1b:
                    db:f9:8d:e0:bb:ca:0b:bf:0e:a0:4c:bb:32:11:4f:
                    24:1b:5b:6a:76:2e:ad:67:6c:52:d4:04:5f:f2:4f:
                    d4:04:22:b0:3c:76:9a:55:1d:0c:56:56:5b:02:00:
                    61:b1:cb:3c:7c:97:72:6b:77:1a:fa:75:13:35:53:
                    72:27:f1:e8:cc:f3:79:6f:21:a2:99:c3:3d:79:76:
                    ee:57:a9:6f:ae:fd:1e:cb:9c:90:54:cf:4b:28:3b:
                    df:cf:5a:af:4d:d5:c8:1b:1d:ed:d2:54:49:ff:6a:
                    c5:95:1e:03:92:2a:43:36:28:cd:84:c2:4c:ea:ff:
                    13:67:95:7e:83:f8:47:bf:52:9a:c1:ac:81:49:46:
                    2c:9e:97:03:99:0d:70:7d:6f:a4:f7:d4:e4:e7:7f:
                    c8:a4:b5:b1:fc:93:3f:25:c9:6f:18:24:4b:de:87:
                    6b:82:60:5a:2e:c7:72:a5:6c:1e:b2:85:5b:a4:f8:
                    95:4e:11:06:94:26:64:33:0e:fd:d5:d8:fe:3e:71:
                    7f:85:85:1b:00:9d:1f:17:bb:7e:a2:f8:84:f6:ec:
                    9c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:23:71:F5:DD:A1:B4:7F:66:25:83:B0:0D:8E:FB:F6:BA:DD:94:46
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52c84887-cf08-43a0-8348-848bc01abdaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffd:8010::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:51:e9:30:d9:7d:b6:25:cf:18:4c:8c:80:8a:40:42:32:ca:
         60:74:4a:6c:ce:ee:ac:cf:f0:3d:2c:20:1a:a4:86:96:37:f4:
         91:f2:6d:3a:a0:e1:60:83:bc:b6:c6:53:78:0e:bb:88:9b:6a:
         6a:5e:49:f8:36:96:1f:3a:4f:b7:63:bc:f6:f7:b2:e6:62:5a:
         a5:d9:f7:bc:82:fa:6c:37:4c:cc:0b:c8:04:41:89:28:37:67:
         87:86:86:1d:1c:9f:02:f8:c3:7d:64:e1:51:fd:cc:1f:20:c0:
         b8:ca:b5:b0:42:90:a3:8b:d8:e0:73:df:d1:23:1b:c8:2b:de:
         63:b1:b5:c0:cc:53:f0:58:f9:75:9a:bc:35:5f:fc:4a:5a:6c:
         79:92:a5:ab:fe:c9:80:56:76:f2:f4:a5:f5:78:68:55:14:b0:
         96:9b:48:10:cd:56:94:7a:e4:3c:a2:61:4e:04:2c:aa:15:19:
         0a:45:bf:f8:f3:21:aa:b4:29:a1:ed:73:d7:14:6e:cf:1a:29:
         85:2b:9f:f9:86:5a:b8:0b:4b:20:20:4b:c4:5a:14:ce:f2:d9:
         d4:51:47:cf:92:f4:7c:47:cb:dd:95:8c:06:d5:4a:56:b8:b2:
         2b:7a:2b:1d:73:7d:c7:3f:33:1d:3e:89:18:e2:d8:a8:15:b2:
         92:95:7d:d7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----