Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c14bc31-de03-4016-bcdd-7ffb34f33c54.roa
File:                     8c14bc31-de03-4016-bcdd-7ffb34f33c54.roa (raw, json)
Hash identifier:          o94htwojFqzIxFaVKtO5gK9QDofnX7Kqg5F4GyP6IFU=
Subject key identifier:   CD:53:12:71:3B:7E:78:31:C5:C6:B2:F3:E7:DC:9C:DF:00:7F:68:EE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4ED7BEE88868D57CC50043AEDBA679BF5557033C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c14bc31-de03-4016-bcdd-7ffb34f33c54.roa
Signing time:             Wed 12 Nov 2025 00:10:45 +0000
ROA not before:           Wed 12 Nov 2025 00:10:45 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fb9:8000::/39 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d7:be:e8:88:68:d5:7c:c5:00:43:ae:db:a6:79:bf:55:57:03:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 00:10:45 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=b1fdeb811e0b6067d835fac2c59bdd99b29ffd333fde142d04b66e1204304db9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f9:45:53:4a:11:a1:da:11:e0:0f:fa:55:97:
                    d2:0c:8e:ae:dc:0a:21:39:7c:c5:a9:ee:e4:f0:9d:
                    98:8c:b4:b6:de:68:b8:5e:bb:9b:e9:8d:ed:d7:f8:
                    b5:44:ff:b2:fe:1f:06:54:d2:05:dc:6a:9d:89:68:
                    5e:a1:83:a5:e5:e3:3c:76:75:88:20:b4:af:b8:0d:
                    d6:8b:a3:40:1d:2d:44:b4:3b:df:05:07:45:88:a0:
                    bb:f2:1e:1a:b4:8a:0b:6f:38:1c:83:fb:91:83:02:
                    72:46:c3:0e:1d:dd:f0:d7:64:16:ac:b4:cf:4b:08:
                    5e:42:e6:ae:98:f3:43:10:38:05:82:02:0e:f3:3e:
                    14:46:fb:36:46:6c:a6:6d:d6:8e:ef:c0:eb:39:52:
                    e4:b4:9f:b1:dc:6c:9f:dd:39:42:d9:1f:af:0e:5c:
                    1a:4f:94:b8:20:16:b4:27:da:f2:d6:7a:3c:69:4d:
                    6e:84:38:3f:d6:03:ce:65:a6:2c:46:eb:fd:58:ca:
                    da:e0:f6:4a:71:5b:4f:bf:e9:0c:41:1b:a2:a4:7c:
                    26:70:31:d4:6a:bd:a5:cc:ca:d2:55:fc:c7:85:98:
                    b3:c5:b4:e4:63:86:0a:84:92:43:fd:79:d6:f2:6f:
                    4a:89:eb:4c:2c:84:a9:31:e5:d4:f5:64:eb:4b:97:
                    f8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:53:12:71:3B:7E:78:31:C5:C6:B2:F3:E7:DC:9C:DF:00:7F:68:EE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c14bc31-de03-4016-bcdd-7ffb34f33c54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fb9:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         89:df:84:9d:2e:b3:c1:17:72:08:7a:0d:5c:55:a0:c0:d1:2b:
         85:e6:9b:5d:f7:a6:1e:bc:b0:6d:a4:61:7a:c6:4b:24:53:e6:
         92:0a:2c:89:55:26:6f:05:ed:22:2d:a2:a6:37:2b:72:f0:9c:
         68:73:21:2c:47:1c:69:e6:a0:b4:ad:91:cb:da:9e:4b:aa:37:
         36:8e:db:7b:b1:ac:fe:eb:eb:70:ec:c6:5e:e4:6d:25:d8:5d:
         14:43:fc:e3:f1:be:5f:4c:b6:ef:7f:a3:2e:09:da:5a:bd:6a:
         58:0a:b0:95:d9:c8:d1:1f:0b:14:6f:7f:ed:f3:ee:ca:1e:b6:
         84:da:18:2e:40:1e:c0:7d:df:be:33:7a:12:ba:c8:de:1e:23:
         48:54:5b:4f:b4:20:0a:3c:f9:c5:50:bb:c6:c2:45:5b:fd:43:
         67:75:ba:a4:a7:17:e1:2e:05:7e:56:aa:f3:e6:23:02:56:a9:
         5a:f6:d1:0b:54:42:d6:36:a2:d1:fd:89:f7:7c:62:f6:2b:4a:
         92:74:b0:19:68:2a:5e:2f:4e:4c:c1:c2:1b:b9:52:1e:9b:0e:
         e8:6e:ad:cf:c0:46:4a:2b:72:4c:32:13:01:b5:49:0f:06:1c:
         fc:b1:21:b7:5a:81:60:13:15:36:96:5d:b9:75:0e:f2:46:80:
         db:42:ce:75
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----