Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b1dc0cf-b3f2-44ea-b02f-d5965d8c7ac7.roa
File:                     8b1dc0cf-b3f2-44ea-b02f-d5965d8c7ac7.roa (raw, json)
Hash identifier:          g3g+xsSvtxls3VIqGNHIqTA0gkCbB3MDDSjHfW3FvzU=
Subject key identifier:   34:76:75:BC:2E:8B:94:91:24:66:66:F6:AF:DC:1A:D8:F0:5C:EA:F9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5D479876DB89CA1323E6D6B0852DEFB71896C832
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b1dc0cf-b3f2-44ea-b02f-d5965d8c7ac7.roa
Signing time:             Wed 12 Nov 2025 02:20:40 +0000
ROA not before:           Wed 12 Nov 2025 02:20:40 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f14::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:47:98:76:db:89:ca:13:23:e6:d6:b0:85:2d:ef:b7:18:96:c8:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 02:20:40 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=3d17efba939d30306b92f3021943a9d58a83866f76f69c05e9905c9390093a16, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e5:f3:a6:d4:8e:a5:88:42:6b:03:34:13:d0:
                    a6:17:cd:b8:72:e8:91:73:c4:22:92:8b:32:ee:e9:
                    aa:4b:5c:6e:25:c4:f1:f8:18:b9:4a:3e:bf:69:33:
                    97:9f:bb:67:2a:d5:55:cf:46:c4:e8:56:17:a7:2f:
                    29:31:bb:37:8d:34:72:f9:bf:01:a5:9c:dc:88:4e:
                    7d:d4:69:c0:d2:cf:4e:f3:4a:aa:0c:a6:10:f0:bc:
                    73:66:1b:91:49:16:b5:bc:c9:da:98:01:48:c3:32:
                    30:03:30:c8:0c:bf:e9:00:4c:2d:d3:5d:b2:07:d0:
                    30:58:43:4d:b6:f6:03:1a:44:22:12:e3:3d:5a:5a:
                    a2:aa:9c:72:55:6a:0e:0d:42:e9:bb:e8:c3:55:15:
                    b7:c6:70:e4:42:e6:e3:c5:ac:b7:03:e4:78:c9:12:
                    13:2c:87:62:13:38:09:9e:fe:a5:69:8f:e5:c1:10:
                    d1:85:aa:7c:91:44:ad:15:87:71:f8:cf:f6:a3:cd:
                    d8:cb:e9:8c:6b:f4:ae:0d:c7:96:9f:24:55:6d:2f:
                    eb:53:40:a3:4a:d7:ac:3a:89:56:58:6f:7f:bf:b6:
                    c8:19:ae:f1:ad:51:37:a6:9f:3d:d6:87:aa:ad:5f:
                    af:9c:74:42:78:fb:4e:2f:6b:f4:4f:c7:42:b6:c6:
                    5b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:76:75:BC:2E:8B:94:91:24:66:66:F6:AF:DC:1A:D8:F0:5C:EA:F9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b1dc0cf-b3f2-44ea-b02f-d5965d8c7ac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f14::/34

    Signature Algorithm: sha256WithRSAEncryption
         60:c6:d7:c8:eb:48:90:58:03:ab:9e:24:af:26:c2:17:d6:43:
         93:9d:db:30:e0:c8:8b:50:5d:43:06:76:05:bc:6b:ac:08:30:
         dc:8d:63:d4:6c:21:62:4b:6c:6e:67:d1:38:50:8b:50:9f:f7:
         fa:dd:72:d1:0c:4b:eb:5b:5d:84:aa:a0:d3:89:1e:ba:17:f2:
         d7:fc:40:17:6b:8d:3e:bd:6e:c5:17:9e:e6:4f:ef:1e:bb:6b:
         ea:df:42:e2:ac:41:98:29:21:75:ab:ee:e8:58:90:ed:c6:cd:
         b1:1a:9f:66:83:a9:f5:6e:d9:a2:4a:f5:42:f6:2b:44:49:7d:
         f6:b2:29:04:27:08:5f:ad:20:11:6e:a6:a6:14:14:74:0a:6a:
         3f:e3:50:e6:17:ab:f1:2b:7c:9e:00:2b:12:ca:e6:a6:39:b2:
         e1:d0:f8:bb:96:d4:09:e7:98:db:be:64:22:48:f6:93:16:99:
         a8:b2:89:94:4b:bd:85:e1:1c:6f:c7:8f:37:fc:99:91:4f:49:
         d1:00:2f:a2:39:f6:dc:75:93:59:83:2f:98:b3:16:87:78:96:
         c4:04:54:14:72:3e:e9:d1:54:fe:c8:00:de:e0:6e:1a:9e:08:
         86:16:a3:ed:09:cf:0e:08:db:b9:50:64:a6:85:4d:b6:1a:9b:
         d1:04:01:b1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----