Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a152fc40-a444-4cdd-97b2-9a2e70a778e9.roa
File:                     a152fc40-a444-4cdd-97b2-9a2e70a778e9.roa (raw, json)
Hash identifier:          yiwjGyFLw7yrvRTCwLsoWg+b4hI2jlXkoUhcKNQO5Ro=
Subject key identifier:   57:44:0E:73:BD:FC:43:D1:BF:A8:87:9A:87:49:F9:58:FF:94:9D:32
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       55F3F9A32C4811B2033BC1A236E9B6BFFF3DB7BC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a152fc40-a444-4cdd-97b2-9a2e70a778e9.roa
Signing time:             Wed 12 Nov 2025 00:31:12 +0000
ROA not before:           Wed 12 Nov 2025 00:31:12 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f2c:c800::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:f3:f9:a3:2c:48:11:b2:03:3b:c1:a2:36:e9:b6:bf:ff:3d:b7:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 00:31:12 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=5424165c3efe9d72b4236c82c743f3f8aa6bf29e515f6c835e038740c506a9b4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:96:d7:d3:7c:73:8a:bd:6f:55:e0:3e:a3:c7:
                    30:46:52:9c:4c:3d:00:0d:fe:9a:5a:e6:c8:d5:fc:
                    71:65:5b:53:84:8d:94:17:38:ef:1e:c3:ce:d3:69:
                    12:0a:1e:98:f8:bf:22:84:b0:10:df:39:be:b2:7a:
                    25:70:e5:bd:2c:c6:0a:db:e3:b4:29:a3:bd:05:82:
                    84:5b:fa:43:18:49:f5:c0:23:08:df:a4:2e:3c:d0:
                    52:4f:ae:53:7e:bb:33:e9:87:5e:8c:d6:1b:4a:14:
                    b5:ab:40:90:36:44:c4:ad:ac:72:eb:f1:87:c0:d3:
                    28:20:e3:7b:a9:58:f0:47:08:a2:e3:84:dc:1c:de:
                    da:8f:6d:e1:df:be:13:bb:59:9d:cb:f6:46:fa:8b:
                    9b:72:38:e8:64:5f:d0:b5:15:72:28:00:fa:26:44:
                    87:e7:b5:ee:33:7e:ff:a8:93:17:48:d2:d9:05:93:
                    b9:d2:0a:ff:7d:b1:dc:de:69:4c:fb:61:91:8a:27:
                    15:44:a5:38:fb:b8:62:78:e8:4f:80:a5:98:80:ae:
                    fe:e2:8f:4a:2a:cc:75:6f:86:6e:ad:a3:a5:33:82:
                    9d:f3:55:2c:75:ab:7e:dc:0b:fd:cd:da:c6:85:52:
                    b7:65:ce:87:eb:27:b8:56:68:31:7a:05:22:10:65:
                    ae:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:44:0E:73:BD:FC:43:D1:BF:A8:87:9A:87:49:F9:58:FF:94:9D:32
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a152fc40-a444-4cdd-97b2-9a2e70a778e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f2c:c800::/37

    Signature Algorithm: sha256WithRSAEncryption
         20:33:4e:04:de:eb:85:24:ad:8d:83:33:d0:04:03:dd:ad:19:
         36:66:44:a5:77:40:f6:b1:cd:70:c0:51:bb:f3:87:ed:bf:a5:
         f9:ab:92:89:a4:37:70:50:e4:b4:9c:bd:d0:27:b3:73:9f:d2:
         57:c2:d6:97:bf:3c:61:f4:33:50:74:3a:c0:02:54:dc:d8:96:
         49:08:17:1d:47:1e:fd:11:41:d3:53:06:9b:45:02:b7:eb:8a:
         c2:bd:86:95:66:1c:a2:87:87:e4:e0:76:b1:2e:91:8f:ac:07:
         97:a4:bb:4a:69:20:1f:c9:56:d6:40:9c:3a:4a:3e:18:a8:a7:
         6c:8b:ef:82:ca:a8:b5:25:ec:17:b8:85:a8:1f:2c:8e:f6:a3:
         de:a2:63:50:ad:22:b6:7a:82:c5:16:3f:9d:88:1a:23:dd:68:
         72:a7:4d:1e:00:cd:a7:c9:55:97:23:6e:21:00:f9:40:7b:fc:
         12:de:71:0d:5b:34:d2:4b:f3:22:6d:d3:c0:03:e0:7b:12:cf:
         a0:17:81:9d:fc:49:7e:c7:9d:aa:6c:83:a3:16:ef:43:74:28:
         7a:91:cf:a4:87:8e:9e:86:db:8d:3b:39:12:4f:38:bc:9b:4a:
         63:3a:ee:a1:d4:f9:98:69:8d:62:61:ff:9a:9f:89:b7:2d:87:
         64:8e:f4:15
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----