Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3be2c317-0f0c-41ce-ab95-2faad6db3ac5.roa
File:                     3be2c317-0f0c-41ce-ab95-2faad6db3ac5.roa (raw, json)
Hash identifier:          bE9jzpSXS+OstlnxsYzg1XBmOkOey3uV1dHLZ/O6TT0=
Subject key identifier:   30:CE:AB:2C:E3:A5:D3:23:09:BE:CF:6F:9C:D2:F8:6B:10:32:E9:06
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6B38CA5EAA120CA3B1543B9BAFDE73342AB31A8E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3be2c317-0f0c-41ce-ab95-2faad6db3ac5.roa
Signing time:             Sun 19 Oct 2025 00:20:49 +0000
ROA not before:           Sun 19 Oct 2025 00:20:49 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff3:8060::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:38:ca:5e:aa:12:0c:a3:b1:54:3b:9b:af:de:73:34:2a:b3:1a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 00:20:49 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=2a30039fb0fec6e546f6058a387df92bc20aefa8f7b6b2e5e967de2e3bf899e3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a2:47:33:01:b3:33:dd:a7:ee:a3:85:34:f4:
                    5f:61:08:01:76:bb:63:76:dd:7e:ae:d2:c2:56:bb:
                    e6:46:fa:59:34:f1:8e:7c:ba:37:b0:71:10:ad:66:
                    49:16:17:7f:37:c2:14:21:bc:f9:e6:3b:2a:9c:cd:
                    51:32:1b:2b:4e:b6:7c:b3:ff:d9:4e:ca:84:3c:a3:
                    d3:09:cd:1a:2f:64:bf:58:d8:8a:c4:f3:02:1d:de:
                    81:41:6d:bd:49:e7:51:b2:a4:d6:c5:23:0d:25:73:
                    71:76:cc:79:5d:0d:80:58:de:3f:ce:bd:f3:8c:95:
                    5e:1d:c0:d1:b5:6f:d8:69:f6:86:96:88:4c:8c:1d:
                    78:3a:50:89:0c:dd:c2:a8:f0:94:85:71:11:18:be:
                    5b:b3:ea:78:e2:be:95:35:2d:19:6f:6a:50:ef:f4:
                    02:15:58:a3:cf:f9:c9:75:b4:f7:83:6e:94:10:f1:
                    9b:e6:e7:70:d2:96:0f:79:59:37:b4:eb:39:96:8a:
                    e4:50:b1:a2:e9:d5:29:f6:9d:af:11:4c:18:7f:ce:
                    f3:bc:b1:c1:5d:2c:dd:12:5d:9b:fb:98:44:57:34:
                    e7:82:1a:68:31:62:32:df:77:48:9b:32:c9:e9:03:
                    cb:28:1e:f7:bf:30:a6:e3:80:76:73:d4:bf:37:ed:
                    53:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CE:AB:2C:E3:A5:D3:23:09:BE:CF:6F:9C:D2:F8:6B:10:32:E9:06
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3be2c317-0f0c-41ce-ab95-2faad6db3ac5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:8060::/46

    Signature Algorithm: sha256WithRSAEncryption
         35:78:72:bd:4d:b0:cf:64:05:11:3b:e4:6b:a2:49:35:9d:93:
         2e:8b:2e:30:c2:ae:1e:ef:85:5e:39:4e:37:1c:e5:5c:7d:d1:
         8c:0c:1f:65:7c:21:5a:c0:32:b3:2e:cd:26:ae:cb:2b:61:ad:
         79:98:6c:fd:58:5d:51:0e:74:ce:48:36:a5:61:1e:15:77:6f:
         a3:af:43:e1:2e:4e:08:94:b0:f8:1f:ce:88:72:d0:a0:f3:2b:
         ae:c8:43:db:24:68:99:33:c3:b9:40:cf:97:36:72:ed:92:8b:
         f5:69:07:6d:2c:35:3e:52:15:3a:ad:12:05:19:50:ea:44:a3:
         85:9c:0c:1d:ff:e4:54:4d:07:8a:b5:48:f0:3b:8a:21:83:77:
         c6:7b:85:7a:e1:b6:50:09:11:a8:7f:8f:5d:e3:aa:5b:c5:ac:
         7a:4e:ba:92:80:63:51:19:19:67:55:11:66:c8:22:c4:9c:d7:
         36:0f:02:cd:65:0c:8e:25:1d:ea:31:c0:13:0e:ea:11:13:88:
         68:b2:4e:d7:6b:df:e8:58:d6:5e:07:b2:0f:ee:65:17:e2:81:
         a1:8c:30:b1:0a:5d:2d:f5:38:71:9e:8b:d8:9f:07:60:05:2b:
         21:d6:3b:ec:79:35:63:a3:4d:a2:51:ce:3e:7f:14:c1:72:d5:
         a0:dd:3b:40
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----