Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67d8a09e-ddeb-4aac-b7c4-61524012a2a3.roa
File:                     67d8a09e-ddeb-4aac-b7c4-61524012a2a3.roa (raw, json)
Hash identifier:          P26DC1vGQ9N8B/qcCnm9B06rdVickhRooc/fDigpt8I=
Subject key identifier:   10:2D:E6:57:19:9F:9A:C7:19:16:7B:49:89:60:9B:BA:2C:C0:0B:FA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       51E00FEBDAF06B3230D990C62D7C1F4D036DA475
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67d8a09e-ddeb-4aac-b7c4-61524012a2a3.roa
Signing time:             Tue 11 Nov 2025 01:20:05 +0000
ROA not before:           Tue 11 Nov 2025 01:20:05 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f61:6040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e0:0f:eb:da:f0:6b:32:30:d9:90:c6:2d:7c:1f:4d:03:6d:a4:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 01:20:05 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=d37b5001d7223485d3685975c5e6292bcd0be41955a7f16c28abab6ab22c6134, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5f:41:38:82:e1:a7:78:4c:f2:dc:74:22:e7:
                    0d:f0:85:10:4a:84:59:5e:d4:08:62:7b:0d:5f:41:
                    73:8e:1d:61:4b:93:56:ce:7d:ad:25:c8:04:1a:3d:
                    95:73:4b:18:c7:22:ba:eb:0e:06:f5:8e:f8:e0:ec:
                    8b:fd:69:f5:bf:8d:87:76:5f:77:c1:c6:77:0f:50:
                    dc:a1:22:56:b9:43:37:7b:65:41:be:cd:73:a4:c3:
                    94:cd:59:e0:4d:02:c6:1b:be:10:d9:9a:bb:09:b4:
                    a6:03:7b:ee:48:f7:47:a2:fa:e3:1d:9c:d6:c4:c3:
                    9d:aa:4f:e3:a4:bf:0c:0c:45:b4:a3:0a:bd:89:75:
                    e9:9f:18:35:f2:cb:ab:be:be:53:3e:bb:75:4b:3a:
                    26:41:87:07:06:0b:d9:df:e3:fa:90:4f:ea:b2:42:
                    ec:b6:e0:82:05:62:ac:c3:dc:94:b8:d5:54:bf:2a:
                    a0:01:b3:d9:f4:24:69:45:f1:22:22:4b:64:ca:d6:
                    ef:31:a1:bd:6a:45:c5:1e:5e:52:b1:91:19:e4:39:
                    02:a4:a9:2d:3f:36:f2:bf:a1:1e:62:ee:a8:9a:70:
                    8f:20:84:1b:24:b4:91:71:b2:f4:b9:fb:68:7b:ea:
                    83:a9:89:fd:d6:7c:c7:1c:ca:25:23:1c:15:d5:b9:
                    a8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2D:E6:57:19:9F:9A:C7:19:16:7B:49:89:60:9B:BA:2C:C0:0B:FA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67d8a09e-ddeb-4aac-b7c4-61524012a2a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:6040::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:6a:b9:dd:9e:d3:3c:f9:69:30:a0:de:b4:ca:72:93:c6:cc:
         0c:d7:54:1e:ff:a7:e9:a6:82:db:c0:d4:1c:6b:1c:1f:c4:9d:
         e1:68:71:c4:3e:e2:01:12:ae:97:39:81:a3:39:1a:bd:8f:38:
         c6:15:6f:4e:02:e5:4a:43:4f:96:1c:8d:4d:d1:11:ad:1c:8b:
         f1:b3:2a:15:83:a5:21:74:70:df:00:98:27:3e:ac:ac:82:60:
         23:23:48:60:09:3e:db:fd:2d:41:cb:0c:25:e1:ba:85:1d:ef:
         6d:db:9b:39:0f:ec:0a:bc:ed:dc:d5:f3:8d:af:48:3a:e5:11:
         5a:a4:6d:63:7e:63:26:54:73:48:3a:70:ef:f7:fb:a6:83:95:
         9e:44:71:24:30:55:a6:7b:30:ae:1e:fe:e0:76:e1:e2:4e:15:
         8e:1a:dd:d8:cd:07:e8:b7:30:60:55:ef:09:10:2b:34:38:a1:
         56:69:95:22:04:af:c2:5f:69:ab:04:ba:b1:74:91:e8:c8:07:
         26:01:b2:da:39:30:e9:e2:05:9f:23:3d:b7:22:3f:3b:ea:a1:
         63:53:ce:af:5a:5c:6f:f6:77:a2:be:93:67:14:15:38:bf:5d:
         61:61:3f:a6:d3:b7:84:aa:09:86:1e:48:e9:ff:eb:df:ca:7c:
         ff:c1:32:7d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----