Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72333184-87ac-4997-aef3-ad6d2ebcdd26.roa
File:                     72333184-87ac-4997-aef3-ad6d2ebcdd26.roa (raw, json)
Hash identifier:          oWOviv5Z4XGSp1TZ4tYCcajFgVKwit6mVTQezmusDMI=
Subject key identifier:   40:A4:CE:09:4B:8E:BA:C6:A0:3F:D9:9A:F0:37:8E:0C:7E:1B:F9:78
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       15544EDD61563133EB8C518FB5535E43CB5D0616
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72333184-87ac-4997-aef3-ad6d2ebcdd26.roa
Signing time:             Sat 08 Nov 2025 01:10:52 +0000
ROA not before:           Sat 08 Nov 2025 01:10:52 +0000
ROA not after:            Sat 13 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fec:2000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:54:4e:dd:61:56:31:33:eb:8c:51:8f:b5:53:5e:43:cb:5d:06:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 01:10:52 2025 GMT
            Not After : Dec 13 23:59:59 2025 GMT
        Subject: serialNumber=deed23551e180f3026411b7ff7e7d6fead872adb1b783ead1b9c490de039e04b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:74:41:c3:29:cd:ec:bb:40:d0:d8:40:01:33:
                    1f:df:8b:26:6c:23:e7:3b:a2:46:61:72:c2:87:3f:
                    b0:ec:04:50:48:11:e8:a2:ce:6f:a8:37:cd:47:49:
                    f2:87:ae:b4:49:b6:ab:06:4d:75:6e:d5:1c:82:08:
                    89:59:e0:5d:d5:5f:6f:db:62:b8:21:aa:9f:1e:c0:
                    30:5c:03:7d:bc:ff:5b:f9:74:7b:d1:5f:4a:6b:33:
                    ba:3e:d7:41:7c:36:5f:83:93:6a:47:62:e5:57:d3:
                    2b:43:56:ff:5d:dd:1f:67:12:59:c1:bd:34:f2:c3:
                    b6:2f:c5:67:5d:e8:7f:67:c0:3c:5d:af:e6:25:05:
                    d3:03:37:36:4b:27:01:44:cf:74:c3:f2:cd:77:81:
                    3f:05:de:23:27:c7:15:26:9f:03:e8:28:96:0c:bf:
                    34:4e:83:43:92:62:15:fe:2f:46:00:da:ea:0b:92:
                    c4:2f:a6:b4:b2:26:9e:ae:8a:aa:74:a1:46:7a:23:
                    1e:75:54:ec:8e:54:70:34:fc:33:0a:ba:43:d2:d1:
                    85:97:d1:16:4b:e3:79:b6:1f:a0:37:4b:ae:4d:be:
                    71:d6:11:35:bf:d9:97:1a:c8:92:b0:be:61:62:51:
                    b2:b2:03:aa:7d:c0:27:09:cc:e2:21:e7:93:5a:2b:
                    26:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A4:CE:09:4B:8E:BA:C6:A0:3F:D9:9A:F0:37:8E:0C:7E:1B:F9:78
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72333184-87ac-4997-aef3-ad6d2ebcdd26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fec:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:10:f2:6f:05:7b:29:02:e8:19:8d:1b:ef:40:6e:60:05:92:
         82:fa:b2:a8:d5:7c:59:c9:1e:90:cc:14:48:f1:d3:16:89:27:
         91:55:40:25:b8:b1:94:a8:30:94:fa:bd:07:ee:81:d5:39:94:
         0b:e1:f3:5b:54:65:bf:e9:e7:a8:90:47:67:9a:2d:56:76:b9:
         e0:81:aa:6f:44:d5:c1:a3:b6:f9:53:f2:96:87:48:9c:e1:8b:
         0d:d3:f8:ae:4b:29:b1:c7:38:fa:7a:67:18:fb:e1:a2:4d:d5:
         c1:f9:d5:b5:f0:16:52:1f:7f:9f:c5:47:7b:ba:9c:53:65:3a:
         f5:e8:2d:5a:9b:2a:68:2d:b8:56:7a:21:74:c3:b8:d5:30:c7:
         3a:4c:c2:94:2e:90:f1:b4:bd:f5:55:1a:52:6a:00:2c:ef:9d:
         40:09:19:7b:4f:a4:de:20:32:d4:ad:5b:fd:06:6c:d3:66:63:
         6c:10:cc:b4:7e:eb:c7:49:8d:64:65:4e:75:f1:48:60:ef:6c:
         7f:88:32:22:c1:3f:2e:5e:ad:60:90:55:ed:1f:9e:ce:7c:98:
         af:41:7d:d8:b7:f9:a9:b2:d5:15:e0:9c:3a:fe:c7:13:bc:a6:
         18:da:c2:cd:f7:9d:9d:e6:eb:eb:f9:eb:a0:6d:99:80:d8:83:
         e6:a3:8b:ef
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----