Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9c247be-8610-4216-baed-e325e21467df.roa
File:                     c9c247be-8610-4216-baed-e325e21467df.roa (raw, json)
Hash identifier:          pkKQ6P9aogiEqHhVsrbJ8O1jzYPgsmhvEQInHTCVYIo=
Subject key identifier:   C6:CC:B3:30:BA:1D:CD:37:D9:70:E4:F9:78:78:76:D6:C3:DF:D8:F8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2B577E505FF2C6D3E5BBF8F2D939D487BF4C7B4E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9c247be-8610-4216-baed-e325e21467df.roa
Signing time:             Mon 22 Sep 2025 18:10:38 +0000
ROA not before:           Mon 22 Sep 2025 18:10:38 +0000
ROA not after:            Mon 27 Oct 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f00:8040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:57:7e:50:5f:f2:c6:d3:e5:bb:f8:f2:d9:39:d4:87:bf:4c:7b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 22 18:10:38 2025 GMT
            Not After : Oct 27 23:59:59 2025 GMT
        Subject: serialNumber=3696f8ac2fd40daf8d057e4fe04018a60a56cb1a0f51ec151142ed158953cc59, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9e:03:9a:59:7c:50:4b:57:84:ef:6b:76:17:
                    08:13:57:0f:26:07:6b:bf:a1:c0:a8:0c:2d:e4:c1:
                    5e:b0:c1:2c:34:11:17:ee:3e:2c:2a:67:19:9d:1f:
                    32:a7:fa:3f:30:0c:c3:16:a9:54:74:16:e3:ab:15:
                    27:ea:e2:85:6f:3b:e8:87:50:55:45:09:91:4d:ad:
                    89:f8:e7:f8:1a:15:17:9b:a8:93:0a:71:85:e9:af:
                    cc:63:da:1c:7c:a7:51:de:9a:92:2e:b8:5f:a8:cf:
                    90:20:39:b3:b7:e7:8f:bd:84:ef:b2:35:98:2e:34:
                    78:3a:10:23:2a:74:a3:48:37:b1:a8:fc:83:92:d5:
                    6c:67:58:7b:31:f6:23:b7:12:3e:fc:65:ee:37:94:
                    6c:c5:4f:36:23:1a:30:cf:89:69:1f:da:92:4b:1a:
                    19:c1:f7:75:d2:2c:18:32:41:3c:b8:94:58:8e:79:
                    03:5f:cd:7c:10:c8:6a:9c:5e:24:7b:f6:56:9e:e8:
                    50:36:8b:45:f8:48:d0:28:22:c5:64:ee:38:78:3a:
                    20:fc:b7:24:da:3c:f6:6f:66:33:b6:1e:3a:9d:25:
                    5c:12:d7:2d:e0:7f:ec:98:5f:21:9e:82:90:c4:5f:
                    09:2d:64:68:3d:d3:7f:48:12:ef:4e:b5:c3:90:52:
                    a4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CC:B3:30:BA:1D:CD:37:D9:70:E4:F9:78:78:76:D6:C3:DF:D8:F8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9c247be-8610-4216-baed-e325e21467df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:8040::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:92:9b:0c:b2:54:17:6b:b0:01:7b:0f:5c:0e:3a:75:74:aa:
         fb:9c:12:17:cd:bc:1a:72:77:2b:d6:31:2d:d4:de:a1:36:8f:
         d3:4c:9f:c5:0b:21:e2:8f:f2:18:c0:43:26:1c:da:ec:93:51:
         e5:aa:5d:04:31:3a:ef:5f:36:dc:16:c4:3b:44:9d:d7:4d:98:
         37:f5:e3:74:df:bd:ab:e5:57:b7:fc:33:26:05:84:56:02:32:
         b6:08:61:70:79:02:a0:ab:c3:bb:fc:f1:d8:90:c8:90:75:0e:
         3b:f1:44:9a:5f:cb:7a:a6:70:76:b8:50:88:66:88:3a:9b:94:
         4f:97:08:a1:cd:31:2b:bc:4a:2d:5d:87:97:81:26:76:d9:38:
         3a:ea:43:e4:0c:23:f3:35:16:e9:9a:52:b2:45:c0:12:6d:20:
         08:73:8d:53:68:9b:2d:90:1b:3a:63:21:7f:f5:1b:fd:7c:79:
         2e:a3:04:8c:0e:ac:4e:07:1d:fc:dc:b8:07:26:a4:13:28:86:
         a7:b9:a4:3e:87:27:92:59:ef:1d:72:4f:49:a5:76:6a:e7:4f:
         a6:ef:89:cd:43:94:35:40:bb:46:3d:c8:4f:e2:19:04:29:2f:
         e6:63:05:fe:a2:b9:31:98:47:96:7b:a5:b0:90:ff:79:3b:9a:
         4a:0d:18:b9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----