Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5f07183-eacc-4e18-aac2-f0abdd72b563.roa
File:                     e5f07183-eacc-4e18-aac2-f0abdd72b563.roa (raw, json)
Hash identifier:          blFqGpspJl0IQ09a8wSN3LPVSCIiF64xGiyTHQqsq9Y=
Subject key identifier:   FB:98:B5:1F:B7:64:E7:36:C2:F9:DF:1C:95:6E:E4:EB:BA:B1:B8:D0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6DF03324ADDD780475FE580019A17908911B9E9F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5f07183-eacc-4e18-aac2-f0abdd72b563.roa
Signing time:             Tue 11 Nov 2025 01:10:10 +0000
ROA not before:           Tue 11 Nov 2025 01:10:10 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff2:2040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f0:33:24:ad:dd:78:04:75:fe:58:00:19:a1:79:08:91:1b:9e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 01:10:10 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=5b0d838e3eb5f6e92a5f6759fbd7d4625e7723a80ca7b29a269899ffe226fca7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a5:3e:9b:d5:d4:d8:f5:66:bd:00:f7:82:c6:
                    59:41:b2:d1:af:a6:61:78:7e:8c:ae:1d:7d:1f:b4:
                    99:91:99:90:ae:2f:79:07:be:f4:75:c6:15:4b:cc:
                    dc:37:76:0c:23:b8:14:f2:30:3c:dd:0a:6d:3b:f2:
                    48:cf:87:f7:b4:4f:74:2e:2c:45:7a:24:d6:d4:82:
                    d4:d9:f2:be:d5:a4:f9:68:43:32:62:15:31:b1:5a:
                    3d:24:53:8b:4e:0a:fb:6b:bf:e9:b0:00:4a:a5:c7:
                    36:50:5a:49:8a:91:3d:2f:30:5e:62:aa:28:68:74:
                    88:d1:59:0c:2c:6c:e7:1a:43:6f:74:17:be:26:fa:
                    68:b5:0a:84:7b:90:bc:24:70:cb:74:c5:d8:91:c4:
                    d4:d7:4b:6b:b1:4b:4f:70:bc:4a:70:d6:0b:eb:2b:
                    d7:48:7f:8b:98:db:58:24:1d:16:cf:b0:36:27:30:
                    c9:41:15:f0:0d:7b:61:1f:96:2b:e7:d0:83:2e:40:
                    03:ad:8a:40:3e:fe:8a:14:a4:b2:db:2e:00:57:5a:
                    fb:c2:77:05:c9:d3:26:43:ea:79:d9:42:a1:17:eb:
                    fc:1f:f4:cc:c2:6d:19:86:b0:fd:92:43:2d:93:ec:
                    cb:00:03:f9:22:58:1d:89:d9:cd:78:f4:29:83:c3:
                    59:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:98:B5:1F:B7:64:E7:36:C2:F9:DF:1C:95:6E:E4:EB:BA:B1:B8:D0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5f07183-eacc-4e18-aac2-f0abdd72b563.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:2040::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:c7:96:1f:9c:0f:bf:db:09:7c:db:ed:0e:c2:9e:e8:d1:d1:
         7d:f0:b5:8a:87:a9:e6:d1:bb:26:82:93:c0:fd:be:6c:b1:dd:
         fe:d0:68:aa:4e:d5:bc:f4:f9:d4:35:70:ba:5a:4c:7e:bb:43:
         6d:ea:a4:60:b2:85:f9:6f:d4:ad:8a:79:0e:5b:c4:54:f0:38:
         38:9a:73:85:73:8d:f0:d7:fd:78:c6:e1:4e:e9:e4:90:37:a6:
         fd:cc:ab:7f:71:fa:40:6b:89:d2:5d:21:4e:35:9d:51:10:a5:
         bf:11:5d:05:79:20:c6:1a:a2:92:23:15:ba:6b:b2:a1:7f:61:
         de:59:be:b4:f4:4d:08:c0:32:0e:3f:fe:26:4c:7d:bf:b0:70:
         88:b6:b4:8a:ee:de:d5:99:09:cd:49:e6:15:a5:81:f7:e4:03:
         38:53:6f:f0:2d:f0:38:f4:3e:3f:67:ec:59:0b:8e:51:ef:93:
         bd:aa:7d:65:39:49:a8:60:3c:7e:84:15:08:af:28:27:91:c1:
         52:ef:05:d7:69:23:83:fe:cf:1a:f6:0d:8e:57:e0:c2:ce:11:
         f6:b3:71:06:55:91:e7:93:ef:23:52:f3:20:06:7f:60:2b:6d:
         83:f3:e0:80:26:ed:2c:f1:4e:af:45:e9:8c:52:e7:4c:90:8c:
         e5:66:e8:e0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----