Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbdd7149-1b63-485c-91e0-217a5a311a88.roa
File:                     dbdd7149-1b63-485c-91e0-217a5a311a88.roa (raw, json)
Hash identifier:          8jAkShKB4W6aiBW3tMBk1l/Hjb+agFXhAzjs5X9dCMc=
Subject key identifier:   75:7B:E0:48:87:E0:1E:CE:D8:FE:C0:5D:9D:9D:F9:DE:1A:F0:DB:A1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3A7A908E98AD47BB6700C52E66008C2B2E2E8174
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbdd7149-1b63-485c-91e0-217a5a311a88.roa
Signing time:             Mon 22 Sep 2025 17:52:04 +0000
ROA not before:           Mon 22 Sep 2025 17:52:04 +0000
ROA not after:            Mon 27 Oct 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f00:80f0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:7a:90:8e:98:ad:47:bb:67:00:c5:2e:66:00:8c:2b:2e:2e:81:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 22 17:52:04 2025 GMT
            Not After : Oct 27 23:59:59 2025 GMT
        Subject: serialNumber=f09e503086f7075b91596b43e3813a0dcc85b7c1d02f5d4f17741f106224860f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a5:6d:5c:a2:72:fe:46:a0:bf:3d:cc:78:44:
                    b1:5d:b9:a5:ae:f7:4f:88:5c:1c:32:e6:f5:08:2e:
                    3c:99:bb:f8:3c:0a:aa:a6:f6:5e:c9:d9:5c:55:28:
                    19:b4:15:4e:c7:8f:4c:ed:58:ec:15:6a:46:3c:69:
                    93:7f:33:b0:27:19:e5:1c:d1:de:e8:75:5f:c3:46:
                    65:16:60:df:cb:02:69:de:fe:f0:e2:72:ef:5c:81:
                    e9:f2:a0:4e:cf:c3:5d:6e:ea:6b:a3:c2:a4:92:91:
                    57:29:c2:08:ba:fa:16:22:c4:65:8d:82:d6:80:2b:
                    ee:53:e4:d0:18:f3:b8:d4:e7:19:a5:f6:e8:cc:a7:
                    28:23:8e:07:4a:53:14:33:da:be:51:c4:08:46:98:
                    6e:73:d0:1d:6f:f6:fc:b2:2c:d4:f3:57:d8:c1:e2:
                    0f:bd:b7:a7:38:e4:45:a1:8c:53:53:15:62:3b:e4:
                    7d:5c:dc:da:e1:fb:9f:1e:34:99:8d:a7:bb:a3:7c:
                    07:6f:ca:a9:1f:a1:a6:77:43:97:49:98:d3:75:8c:
                    75:bc:81:1a:6d:80:12:ad:9c:a9:4a:5c:05:d5:2e:
                    8d:81:13:28:23:a2:12:c1:4d:d7:92:c6:ce:cd:35:
                    1d:2b:d3:a5:64:23:74:19:5d:f9:f8:0c:6f:c1:56:
                    2d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7B:E0:48:87:E0:1E:CE:D8:FE:C0:5D:9D:9D:F9:DE:1A:F0:DB:A1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbdd7149-1b63-485c-91e0-217a5a311a88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:80f0::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:9d:92:c8:92:72:fa:26:da:93:7a:b8:06:fb:43:32:7d:2a:
         e2:75:29:aa:fb:f0:bc:e8:77:7c:3a:57:b3:fe:a9:a4:58:f3:
         2a:c6:46:9a:df:b5:90:89:58:bb:f3:68:d7:62:4a:04:8e:e5:
         9d:31:d1:24:da:34:81:5a:bf:d3:61:8a:28:fd:26:24:8e:f4:
         08:1b:33:59:7d:3a:d7:87:cd:6b:ab:b4:2a:e6:22:ab:5a:ff:
         33:92:8d:f2:ae:da:19:2c:e6:0d:ed:7f:8b:ae:77:3a:87:11:
         34:bf:88:ef:61:bf:6c:09:7e:6b:cd:51:21:fc:f6:45:48:c4:
         db:ae:9f:03:3d:62:65:57:b1:b9:2d:5b:26:bd:bd:14:c0:a8:
         72:f8:aa:0b:61:76:a5:31:21:02:6e:38:17:f4:49:4f:8a:79:
         96:93:b3:5f:a3:3a:01:85:20:ac:93:7f:c3:3d:ff:75:0d:df:
         da:11:a5:f4:cf:b1:26:a5:b7:c7:61:0e:2a:46:c0:b4:64:da:
         da:0f:4d:8e:5d:7d:bc:db:df:30:be:81:5b:83:38:2c:4a:ba:
         a3:21:1e:79:24:0d:e1:5a:32:ab:38:68:af:48:89:9e:81:61:
         76:ce:4c:96:03:bc:01:33:e7:10:99:1b:e3:0b:39:ad:fc:e9:
         c8:a1:f3:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----