Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffa297f8-dbee-4db9-969e-7a8c2685dc09.roa
File:                     ffa297f8-dbee-4db9-969e-7a8c2685dc09.roa (raw, json)
Hash identifier:          C6EhZFkHk9KVZgT19EKPSDxx5zD9oLWIJ1Kg7rZnTgE=
Subject key identifier:   E8:C7:16:17:14:27:AD:A1:EB:5F:24:E0:3B:93:21:66:0B:13:B5:16
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       16952DCD65476893A3CA4933980C73834B3AFC2A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffa297f8-dbee-4db9-969e-7a8c2685dc09.roa
Signing time:             Wed 12 Nov 2025 00:50:53 +0000
ROA not before:           Wed 12 Nov 2025 00:50:53 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f36:a400::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:95:2d:cd:65:47:68:93:a3:ca:49:33:98:0c:73:83:4b:3a:fc:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 00:50:53 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=07cda4167f4de42f7caa6a3d1ea90bdb26cc649a3ba8cfeea7abee8c898f5e80, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2f:af:73:9d:e7:89:d0:96:99:26:54:b7:e6:
                    c0:19:be:96:da:8d:ec:c3:0a:78:af:11:e2:50:37:
                    07:ea:5a:09:22:b9:6e:22:49:8d:69:bf:ba:43:6f:
                    c0:d2:07:1a:c8:2a:e8:e6:76:9d:21:e8:07:5d:98:
                    37:5f:06:d8:d6:de:6d:6c:38:3d:b5:0f:6e:04:a5:
                    3a:ec:3f:6c:63:98:b2:84:43:e2:fd:c0:b6:6a:95:
                    a8:da:8a:6d:90:c1:e5:83:55:2e:44:83:57:9f:55:
                    51:8f:9d:fe:6e:e2:2b:41:38:a7:9b:df:a7:e1:46:
                    ff:60:4f:0a:a2:96:82:e0:ec:c6:54:c9:f8:62:f8:
                    dd:49:e6:8d:63:d5:ff:f1:e1:e7:2a:19:56:77:bb:
                    4e:87:73:7c:2d:80:02:0a:1d:22:f1:b8:c9:d7:5d:
                    65:2a:4f:a7:a3:50:ff:c0:44:9e:48:78:3a:ab:6b:
                    71:ee:49:19:66:96:dc:d7:8e:47:59:05:02:b7:6c:
                    47:17:2a:9d:2a:65:bf:2c:c7:2f:ae:a1:f6:c5:cc:
                    42:f7:21:aa:29:68:07:69:c3:b5:01:01:4c:4e:61:
                    13:86:5c:80:74:16:8b:2e:f5:b4:09:b1:12:6f:04:
                    fb:24:11:25:f3:50:db:ab:5d:9b:bb:5e:3b:f7:f9:
                    1f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C7:16:17:14:27:AD:A1:EB:5F:24:E0:3B:93:21:66:0B:13:B5:16
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffa297f8-dbee-4db9-969e-7a8c2685dc09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f36:a400::/40

    Signature Algorithm: sha256WithRSAEncryption
         56:18:c0:49:8b:d3:f4:cb:79:0e:8d:e5:97:f7:9d:9c:f7:ec:
         a2:88:86:b1:b4:8d:d6:84:fb:fe:2d:37:1c:2f:ce:d5:20:27:
         70:ab:64:2f:9a:42:fa:bb:7b:29:2f:93:a0:bf:67:3e:a4:2c:
         84:c9:b9:f9:a7:a2:8d:ee:90:ee:08:84:af:01:8a:57:5e:ed:
         05:a2:3c:58:6e:8c:48:88:ff:99:e1:fe:8d:a1:85:ed:e2:25:
         49:0e:d8:98:9e:4f:02:04:14:a6:97:d6:c5:51:e1:c9:81:04:
         0f:8d:b0:6c:8a:f3:b1:eb:b4:02:a4:8b:72:8b:a7:7d:ea:e1:
         97:e8:a9:98:b9:a9:98:29:8d:59:3c:45:ab:8a:c0:65:f2:e8:
         5e:ce:a6:42:94:c6:9a:65:7d:48:8c:06:f1:8b:55:df:4c:23:
         b7:c4:2a:94:51:1a:70:fe:11:8f:29:94:07:cb:eb:e7:03:35:
         47:dc:bd:86:8e:31:db:cc:fa:8b:30:48:c3:56:a5:b2:48:45:
         6b:ed:29:76:02:7f:b5:d5:ca:e1:34:c9:f5:41:e7:05:8e:7e:
         9d:5e:50:8d:5b:8a:02:fc:1b:f8:d2:f9:19:f6:3b:e8:6a:53:
         e5:48:a6:e9:bd:d2:7f:55:01:20:12:fb:45:d3:62:cc:5b:6a:
         57:83:a2:86
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----