Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a4a4e8f-b361-4d80-901d-67d3df6fa470.roa
File:                     6a4a4e8f-b361-4d80-901d-67d3df6fa470.roa (raw, json)
Hash identifier:          5uueXyItm05yR+c4T9NA7I/huqbjb5THJJ+oyE0ntV0=
Subject key identifier:   9C:16:A0:47:C5:89:53:07:5D:AD:56:D4:8F:95:BC:0C:AD:03:9A:73
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0336A094DCAB19C9FBA4A110DFF34B8711A9C10F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a4a4e8f-b361-4d80-901d-67d3df6fa470.roa
Signing time:             Fri 03 Oct 2025 00:21:53 +0000
ROA not before:           Fri 03 Oct 2025 00:21:53 +0000
ROA not after:            Fri 07 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffe:5000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:36:a0:94:dc:ab:19:c9:fb:a4:a1:10:df:f3:4b:87:11:a9:c1:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  3 00:21:53 2025 GMT
            Not After : Nov  7 23:59:59 2025 GMT
        Subject: serialNumber=67b8bbc19e693ff0eb630237a2d089dfc100ae17b1c1ff3e929c0234e5e0e1c4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:49:47:89:8a:a5:70:45:f2:8c:ae:0a:c0:4b:
                    6d:97:5e:b8:52:f5:ed:3f:30:cd:a9:86:f4:60:a9:
                    0c:45:fc:ef:c2:51:7a:7b:51:94:0a:87:a8:93:c6:
                    27:17:db:df:70:5e:93:c3:9e:54:56:7d:80:fc:37:
                    4b:5e:00:2a:c2:ff:85:31:1b:ee:43:19:df:17:28:
                    f6:58:65:6b:13:2f:a0:19:38:2d:fd:cc:3d:4e:78:
                    9f:16:a9:cb:2d:3b:62:0d:61:fd:52:ac:39:46:d7:
                    8d:46:a3:d0:06:72:70:d1:cb:a9:10:29:c7:b5:5f:
                    e8:19:a0:7b:c7:35:58:35:b2:0c:c9:f9:97:b0:a8:
                    7b:af:70:0f:08:77:09:81:7a:25:58:a4:b5:38:49:
                    bf:1c:f8:d9:c8:4a:85:41:41:ab:2b:46:f3:25:f6:
                    e3:5e:12:69:fc:5d:51:31:f9:8d:d8:bb:96:4f:22:
                    1a:8f:25:88:f7:42:63:a9:a7:6c:56:cc:3f:ea:ab:
                    86:c1:fa:04:1e:d4:50:7a:bf:fc:3e:eb:fe:52:84:
                    d7:4f:20:7b:fe:61:28:51:4f:25:fe:47:42:c9:09:
                    7a:e6:fd:85:00:42:75:d2:e9:1c:3c:2f:02:c6:15:
                    28:86:87:7e:d8:9d:53:fe:a8:74:85:f9:27:23:0b:
                    86:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:16:A0:47:C5:89:53:07:5D:AD:56:D4:8F:95:BC:0C:AD:03:9A:73
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a4a4e8f-b361-4d80-901d-67d3df6fa470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffe:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a4:be:02:c7:bb:cf:41:34:86:b1:4a:42:29:84:62:61:11:29:
         ff:a5:bb:d1:ef:e0:c2:a6:be:53:61:c8:c2:cc:65:9c:b9:4e:
         14:ab:a0:bd:76:99:bf:3d:6c:76:c1:a1:15:93:37:ba:1e:4a:
         f9:ae:5f:47:74:22:d4:a6:33:26:d0:95:61:af:c5:b7:b7:a4:
         81:62:94:64:56:84:75:70:13:e4:03:d9:a8:bc:12:f5:bc:69:
         e2:49:79:35:00:f8:10:ad:7c:22:8c:be:78:68:97:f6:84:71:
         f7:34:41:3e:74:79:14:4f:a3:05:64:30:77:cc:ce:1a:a6:fd:
         cb:cf:17:b6:02:e7:43:c3:61:9c:88:3e:3e:3a:c7:7c:6c:1c:
         37:d4:23:02:03:17:9e:17:d7:b2:8f:eb:46:45:bd:e5:4a:18:
         9c:89:92:59:d0:6d:ea:dd:6b:45:4d:1d:06:e6:9c:25:d0:cf:
         72:00:82:91:c3:e2:1a:7e:43:64:be:d9:ed:73:19:9e:ae:85:
         25:1e:50:de:01:7b:b5:61:9f:c7:b7:59:78:d3:59:dc:60:7f:
         1d:ab:c1:1b:f1:36:9f:40:96:b1:33:5d:96:e4:c7:49:c2:25:
         c2:37:5d:7f:89:5e:81:d5:1d:0a:18:08:c9:02:29:e5:97:e8:
         cc:33:bc:5c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----