Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d94963d-57c9-4c92-8bae-e7e222a77a23.roa
File:                     6d94963d-57c9-4c92-8bae-e7e222a77a23.roa (raw, json)
Hash identifier:          pEbTL4U2vWed1taRIjRSIrNdQ6mb2hs5Ij2OBMmOmW4=
Subject key identifier:   61:FE:76:AB:3D:E9:EA:84:BE:A8:48:3D:1B:A8:D3:BD:A0:76:C5:8D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       315795CA478D6FBF37B6D59729BC6D91D410CC51
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d94963d-57c9-4c92-8bae-e7e222a77a23.roa
Signing time:             Mon 06 Oct 2025 15:52:33 +0000
ROA not before:           Mon 06 Oct 2025 15:52:33 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ffd:80e0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:57:95:ca:47:8d:6f:bf:37:b6:d5:97:29:bc:6d:91:d4:10:cc:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 15:52:33 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=68f58259ce463ee4509b41a1cf8a530029ae0f43fcad653f68f1e5a0895b4913, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f0:83:4d:ca:f7:65:4f:11:bf:c7:5c:35:23:
                    ea:da:65:b9:dc:58:f7:51:aa:67:d9:bd:5a:77:de:
                    a7:b6:71:0b:3b:f2:22:14:a4:c0:0a:df:52:66:5c:
                    c3:ca:cd:b8:24:09:26:57:21:c1:5f:74:56:e2:bb:
                    3d:af:57:3b:58:8c:88:e8:5d:83:04:ce:fd:7e:6b:
                    fa:1c:2b:79:76:fa:b6:c2:fd:8d:76:f9:e4:74:00:
                    52:6e:77:0b:49:52:33:93:5b:15:1d:32:a6:9d:72:
                    9e:51:1c:78:09:00:4c:c6:fb:5c:1d:89:04:63:6e:
                    07:bf:f4:36:eb:ac:96:02:ce:37:7d:40:72:e7:27:
                    0e:69:69:8e:e1:a1:16:48:c1:74:13:6a:02:e4:57:
                    b3:da:ec:51:30:aa:d1:b3:c8:31:f1:94:9b:38:8f:
                    31:02:09:23:0f:56:2c:4f:84:4f:ef:4f:d4:71:b0:
                    e2:cf:9e:e2:92:8a:f2:a1:a5:45:60:8d:9e:5e:0a:
                    3d:89:4d:91:16:fd:ac:ec:8b:9c:49:8f:83:8a:f6:
                    b0:d5:b3:64:91:52:55:f2:ac:2a:51:df:04:92:01:
                    be:c0:c5:f6:c8:20:26:ad:16:bc:77:14:05:e7:1e:
                    c2:46:63:1b:bb:da:a4:b8:4a:a2:1d:fe:eb:fa:75:
                    07:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FE:76:AB:3D:E9:EA:84:BE:A8:48:3D:1B:A8:D3:BD:A0:76:C5:8D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d94963d-57c9-4c92-8bae-e7e222a77a23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffd:80e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:8f:02:b6:c7:64:63:6e:b2:ae:f4:57:0c:c4:bb:b7:29:94:
         d3:97:49:ba:36:40:b5:29:ca:0b:1f:7e:c2:b9:2d:9b:d5:09:
         90:2e:c5:e4:9c:1d:02:ae:b7:78:1e:57:26:3e:9f:90:c4:41:
         46:e9:15:98:2a:54:6e:e6:53:27:ad:42:c5:dc:28:7b:0f:c1:
         72:b3:d2:97:95:c3:bd:c9:e1:eb:21:56:82:04:9a:3a:f7:70:
         28:b0:96:d5:1f:4d:ab:7c:88:41:15:04:03:e6:be:fa:f8:be:
         79:36:82:13:2c:6a:f7:0c:45:e3:17:52:a0:b5:4e:bb:ce:23:
         c4:c3:ee:46:9d:0f:51:12:55:e8:bd:6d:9c:5d:5f:b3:db:6d:
         e2:40:5d:db:58:49:02:24:d7:90:c4:3c:3a:9f:a0:71:0d:61:
         f6:3c:b1:a4:06:62:3a:4e:45:5a:84:25:47:2b:1f:b0:c6:7a:
         75:42:87:0d:ac:45:76:e8:7d:82:cf:bb:c9:58:9e:cf:c8:47:
         41:2c:18:a8:2e:7f:b0:75:f9:64:33:db:67:1e:85:61:4d:87:
         3a:8d:8c:91:7e:0a:53:ed:92:4a:06:6f:a8:88:4a:b5:ca:f2:
         23:64:0f:dd:be:3b:b4:00:92:00:32:58:8a:63:c1:70:d0:98:
         27:b4:c3:d5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----