Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55066f75-b858-4558-bcfc-5a7f53c92745.roa
File:                     55066f75-b858-4558-bcfc-5a7f53c92745.roa (raw, json)
Hash identifier:          Ze0wfzrISP7ZssoahjV91tWqZGenLKTOVfb8EBKuCAw=
Subject key identifier:   FC:A7:33:3C:7B:90:25:67:31:4D:D7:70:91:9D:59:7A:5B:04:CA:38
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5566E3D23AC2A1C8EC99445251E01B2639F4FCDC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55066f75-b858-4558-bcfc-5a7f53c92745.roa
Signing time:             Tue 11 Nov 2025 01:40:23 +0000
ROA not before:           Tue 11 Nov 2025 01:40:23 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:c000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:66:e3:d2:3a:c2:a1:c8:ec:99:44:52:51:e0:1b:26:39:f4:fc:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 01:40:23 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=d8e4065b3d0f0ea491b3fb0b66825dd8a127bf687ce9325764361344495aeeb5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b5:9e:6d:fc:06:6d:e5:61:83:89:3e:ab:0f:
                    3c:b4:25:4f:90:d0:16:e2:e2:10:e5:d7:23:9d:7c:
                    26:ae:60:6a:d3:26:97:af:c5:0a:c5:d6:a6:3b:b2:
                    3c:c4:ae:ff:d6:08:95:67:4e:66:63:70:3a:70:72:
                    e9:7d:1b:30:99:f1:3c:38:0e:31:61:c6:94:fe:66:
                    91:f8:4d:38:f3:b4:5d:bc:f8:96:51:23:9f:38:88:
                    32:76:eb:56:51:f1:00:51:bd:b8:73:2a:f9:24:b9:
                    4b:a7:bf:4e:b8:fd:cc:6f:e0:db:26:94:4c:90:aa:
                    78:f7:35:b0:ab:e6:78:69:b3:af:b5:66:67:71:1c:
                    5b:d1:b8:27:ac:95:41:ce:aa:c9:4e:54:be:ac:b2:
                    b9:fc:28:a4:46:c9:f1:a4:4e:70:71:de:2a:ef:e0:
                    3c:5e:f3:fd:ec:71:fc:67:c9:4a:bc:ad:5e:44:74:
                    3d:55:92:5e:21:b9:05:02:13:21:97:14:1a:5a:1d:
                    01:42:af:ac:7e:34:b6:c3:56:95:14:86:a5:53:0e:
                    b0:68:0e:e8:a8:27:b9:32:30:76:c4:90:31:74:d5:
                    41:98:6b:b8:ac:2b:f7:c6:4a:27:41:38:82:ea:75:
                    eb:8c:ca:9c:3d:96:b1:95:32:31:db:ec:aa:f8:28:
                    bf:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A7:33:3C:7B:90:25:67:31:4D:D7:70:91:9D:59:7A:5B:04:CA:38
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55066f75-b858-4558-bcfc-5a7f53c92745.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         86:a5:87:58:03:2f:24:af:00:82:ec:63:8f:36:df:ef:68:16:
         a3:6e:9d:d9:4f:04:7a:7e:d4:f8:c4:c9:27:65:42:a8:ae:55:
         06:81:4e:5d:dc:48:40:b2:7c:6c:73:ce:be:ec:00:7b:98:f5:
         98:95:b4:e2:a8:1f:57:9e:ef:28:02:18:12:2c:2f:6d:e6:79:
         cc:8d:de:28:2c:1d:eb:59:1b:f1:ab:02:88:9d:4b:08:55:7d:
         2b:4f:9b:96:1a:9f:45:8f:63:5b:7d:67:6a:30:0f:56:8e:26:
         3b:17:e9:af:ad:71:41:56:ec:52:16:c6:40:1f:de:f6:3a:2c:
         6a:7b:6e:18:1b:99:c2:3f:21:ec:6b:41:7f:17:6a:69:c2:1c:
         2d:c1:db:31:a0:23:94:fe:e2:4c:c3:3a:20:bf:3e:64:4b:01:
         be:f3:79:a0:c6:d7:4a:7e:14:6c:95:db:59:88:44:4a:32:ef:
         36:0c:25:dc:fa:1e:8b:62:b3:d0:88:9e:2c:60:00:b4:49:09:
         d7:bf:d2:4e:c7:c3:5b:f8:fd:6a:79:26:d1:bb:2b:af:f6:ff:
         2f:30:e4:e1:af:90:0d:1d:7e:32:c3:76:94:ee:d9:8e:bb:6a:
         3a:a8:8b:8f:f0:1f:a9:3e:ff:05:32:eb:eb:38:e2:a0:ce:e3:
         a9:b6:47:26
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----