Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/953f92fa-8022-4f8d-aa19-8d28c32712f2.roa
File:                     953f92fa-8022-4f8d-aa19-8d28c32712f2.roa (raw, json)
Hash identifier:          Kjkbq4k6qingfVQo7R9DbN7dpJVLKGJJWrHcIpPo3g0=
Subject key identifier:   9A:26:A6:92:C7:11:5D:6C:9A:A5:16:36:2B:8E:25:1C:09:84:90:BC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       184395E7C13E3AC9022293461E2FC31253FBAFBE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/953f92fa-8022-4f8d-aa19-8d28c32712f2.roa
Signing time:             Wed 12 Nov 2025 02:20:08 +0000
ROA not before:           Wed 12 Nov 2025 02:20:08 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f70:3400::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:43:95:e7:c1:3e:3a:c9:02:22:93:46:1e:2f:c3:12:53:fb:af:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 02:20:08 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=008c6662bc00d31ee27b90e012407a07787d3b875d4ff7e8ab9a7be23541a77b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:65:a5:53:bd:35:34:c4:9e:5c:de:8e:0b:ac:
                    06:01:dd:2b:e4:3d:70:5a:54:be:95:47:d8:e4:12:
                    41:cd:27:f9:95:93:c4:7f:54:1d:11:35:94:3a:c7:
                    3e:48:a5:aa:26:91:ca:3f:8c:b5:8f:42:e7:7b:e8:
                    ce:61:64:cb:81:67:c2:cd:33:9c:c6:34:51:77:af:
                    b4:66:e3:26:a3:51:08:72:ca:a8:87:3e:a2:28:30:
                    ed:f3:81:5e:42:90:d2:eb:66:5c:38:5f:7d:b5:43:
                    08:ff:d0:9b:f8:9f:88:d2:08:8a:6d:40:1c:50:05:
                    80:b1:75:db:c5:87:44:ab:d3:85:12:1b:86:89:f2:
                    97:d7:82:e9:79:11:a6:6f:7c:00:f2:9c:10:df:40:
                    24:9a:a7:90:bf:96:b3:b0:05:99:6a:6b:11:e2:36:
                    6c:88:46:22:43:54:09:b5:64:0e:e3:49:b1:38:f3:
                    78:66:f3:09:90:0e:36:f0:c6:46:27:77:b9:73:c5:
                    ba:ad:7b:78:ef:17:b6:94:fe:67:3d:05:9b:8c:ee:
                    14:80:1f:7a:00:63:93:11:50:db:94:94:07:88:2f:
                    00:13:91:d0:ca:3c:42:0b:78:2c:00:0c:ee:c5:4e:
                    99:89:38:92:aa:bf:db:e5:18:22:b5:9d:5f:2d:03:
                    79:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:26:A6:92:C7:11:5D:6C:9A:A5:16:36:2B:8E:25:1C:09:84:90:BC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/953f92fa-8022-4f8d-aa19-8d28c32712f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f70:3400::/40

    Signature Algorithm: sha256WithRSAEncryption
         6b:87:42:b9:85:c0:bc:48:1d:81:25:d9:7a:ee:d7:58:74:8e:
         d6:af:20:97:1f:a6:0b:e7:5e:e6:b0:9e:c0:a3:96:36:f6:27:
         38:f8:73:48:3a:05:be:42:ad:86:07:06:32:29:d3:0b:35:1a:
         48:7b:fe:6f:d4:3b:8d:8b:1e:fb:b5:6d:71:92:90:10:d4:cd:
         e9:c7:b7:4e:f8:e2:68:27:1b:95:ad:03:7a:74:b5:09:9b:4f:
         be:41:cb:cf:d7:4e:9a:fa:d8:14:5f:b0:86:3b:54:6c:30:15:
         a9:26:a7:d8:17:da:43:70:b5:2e:9d:c4:df:a3:a4:74:9c:2a:
         ae:78:d4:37:c7:67:f1:d3:47:18:73:ae:5d:d4:87:e3:78:6d:
         f9:99:61:e1:5a:ec:46:77:c6:98:95:64:e3:a1:f2:1d:22:6c:
         8f:89:63:bb:aa:96:4e:b7:4e:fa:90:19:78:f2:93:07:3f:1a:
         84:1e:0c:c0:77:08:0c:58:d7:db:18:dd:fe:da:6d:17:0d:91:
         f2:23:33:cf:98:10:8f:5b:ff:e4:c4:3d:c0:ca:aa:e8:4d:de:
         c0:12:47:d4:6c:01:bf:46:83:5c:c7:61:00:66:b1:9c:70:04:
         34:ae:d3:23:17:d0:38:ae:f2:09:59:48:0d:07:ce:94:7c:d3:
         40:f8:70:43
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----