Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcac5d57-7a94-4f5b-9bcf-21a2666c61a1.roa
File:                     fcac5d57-7a94-4f5b-9bcf-21a2666c61a1.roa (raw, json)
Hash identifier:          Pt+en3MUtMyju8SeSQMd4fGKNEM3ATYsUsVsv6unwhI=
Subject key identifier:   3C:27:A2:CA:CC:9F:B2:C1:B6:9E:A6:64:F5:07:5B:BB:4F:D1:7C:02
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1C96DBEE3CB28801970A5268BA7CD935999B28ED
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcac5d57-7a94-4f5b-9bcf-21a2666c61a1.roa
Signing time:             Sat 04 Oct 2025 00:38:23 +0000
ROA not before:           Sat 04 Oct 2025 00:38:23 +0000
ROA not after:            Sat 08 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f38:80e0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:96:db:ee:3c:b2:88:01:97:0a:52:68:ba:7c:d9:35:99:9b:28:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  4 00:38:23 2025 GMT
            Not After : Nov  8 23:59:59 2025 GMT
        Subject: serialNumber=78605c2800f7dbb58c2431759ec08b9218fa22f83e9085b5db39db9b8ec43d66, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:68:0e:b7:2b:cd:c0:73:97:d2:b1:6d:18:7e:
                    63:67:89:d1:01:6c:dc:76:8e:c0:06:48:34:c2:99:
                    da:59:f1:f7:cc:ae:75:1a:b3:32:71:ac:3b:76:2a:
                    d3:a5:39:05:6f:c9:05:fc:82:a9:f3:07:a3:62:4c:
                    83:0f:88:03:41:0f:71:27:64:4e:14:e2:b6:69:b0:
                    b8:1f:f0:c5:80:c6:df:b8:a2:f6:80:a8:cc:fd:ed:
                    ab:04:d0:27:05:97:54:18:60:8b:91:8a:4e:c9:e8:
                    b5:c5:79:fe:45:16:83:61:22:9b:0f:99:14:15:9c:
                    80:e9:f8:aa:c3:9a:51:a2:f9:71:94:f3:9c:b3:e0:
                    26:cc:54:02:6a:b4:89:49:13:53:41:53:10:53:1b:
                    ab:83:94:e5:69:72:65:be:1d:2e:c5:02:b8:71:1c:
                    b1:02:8f:8f:1d:71:48:c2:6e:a2:b0:64:01:17:c5:
                    44:f8:19:0b:23:e9:fe:e5:f9:8e:43:5e:ab:48:57:
                    3d:48:ab:62:64:73:b4:27:b6:67:20:5b:e0:18:7c:
                    d3:13:b7:92:14:ef:b3:d7:43:ff:e6:92:2a:2a:cf:
                    b4:2f:3c:41:22:77:68:cf:05:48:70:33:23:d3:1a:
                    f4:b5:fb:9b:e7:22:53:99:7b:41:06:7f:c1:a0:c6:
                    2a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:27:A2:CA:CC:9F:B2:C1:B6:9E:A6:64:F5:07:5B:BB:4F:D1:7C:02
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcac5d57-7a94-4f5b-9bcf-21a2666c61a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f38:80e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         d4:11:b8:b6:e2:ab:6f:77:78:d4:57:7b:71:9e:fb:d1:bd:1b:
         bf:6b:1d:ba:57:9d:6e:87:d7:28:a9:10:0d:d2:a6:a8:ce:90:
         1c:3f:d5:36:8a:eb:2d:88:ae:3f:78:52:b4:c4:fb:34:9f:ad:
         67:c2:03:21:21:da:e4:34:63:49:13:e2:52:0b:81:46:c8:a3:
         25:ed:f2:17:aa:4c:2a:d9:9f:1b:44:9a:15:3f:e0:ad:9f:1f:
         3f:6c:b4:0a:c2:ab:ba:3d:bc:0d:76:fd:06:2a:32:01:52:91:
         3e:c7:1e:02:e0:cd:b1:59:5b:b2:c7:01:1a:e8:97:63:6f:21:
         99:29:13:b3:d2:3e:fb:c6:46:bb:19:7d:bd:8e:a9:8d:bd:da:
         b3:3f:2c:c8:e4:ea:33:3d:3f:26:73:bb:62:15:f0:cf:27:ce:
         b8:04:31:21:9c:bb:7e:6c:87:08:ef:11:f9:01:6e:d2:cf:86:
         5d:76:04:fe:68:09:19:43:e4:1e:cd:a7:17:ed:4a:91:92:b5:
         68:14:83:54:dc:99:66:99:14:2d:98:50:e9:59:cc:be:4a:13:
         a2:4b:17:b4:e4:67:9e:e6:14:9d:9a:11:60:d7:8e:98:24:3a:
         d1:95:ba:f5:a7:91:c0:25:ad:92:34:da:40:ec:51:de:b3:ec:
         85:79:b9:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----