Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe977e9f-7f1c-441f-9a15-bf1e23e5150d.roa
File:                     fe977e9f-7f1c-441f-9a15-bf1e23e5150d.roa (raw, json)
Hash identifier:          QnLZXCMJXFNYi2Qjq/n/SarR1im2BDpLEKWbg6v7kxA=
Subject key identifier:   43:AD:AB:91:77:C7:63:78:BA:83:FC:DD:FD:34:55:76:17:BA:84:41
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       382F7BE811F4444772BAEA1CE9C5AB614A470F59
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe977e9f-7f1c-441f-9a15-bf1e23e5150d.roa
Signing time:             Fri 26 Sep 2025 00:39:32 +0000
ROA not before:           Fri 26 Sep 2025 00:39:32 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f16:c000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:2f:7b:e8:11:f4:44:47:72:ba:ea:1c:e9:c5:ab:61:4a:47:0f:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 26 00:39:32 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=8c4800d3c8a69760ba32579cd9ba104bf53e6e3e9b8a4fc721a381cde5dfbd77, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2c:5c:c8:73:1a:24:ea:55:72:b5:98:75:09:
                    1b:64:50:03:a1:dd:5f:54:19:32:6b:d7:c9:ef:c7:
                    ca:70:49:08:c8:e3:e3:03:86:93:b4:fe:0c:13:ca:
                    34:53:a3:5c:78:09:80:27:37:ca:80:ad:ee:74:7e:
                    15:b4:4c:d3:08:17:f3:b6:4f:97:7c:10:e6:0a:7b:
                    b5:be:3d:aa:4b:c2:37:94:b1:90:a6:3c:14:36:85:
                    9d:b7:19:34:21:78:9a:39:5a:e4:ad:b2:73:e7:bf:
                    95:9d:06:f5:65:e8:89:33:44:3c:7a:09:da:d5:5f:
                    65:d1:f6:f6:16:ee:c7:3c:28:f7:e2:ff:d2:b9:15:
                    f6:1e:be:73:69:fa:17:2e:fb:ab:f4:54:71:77:8f:
                    85:57:b8:9f:bc:27:a7:b3:5f:dd:0d:08:0f:9c:38:
                    86:2c:a9:84:4e:42:b3:03:4b:b2:ce:e8:a0:57:df:
                    15:2e:c2:29:a0:08:c3:03:00:37:04:7e:dc:f7:0f:
                    14:f3:06:3f:e3:b7:02:7f:8d:dc:be:36:c6:46:e8:
                    a3:f4:01:0f:a8:49:c0:f7:a9:c8:fb:09:14:ae:19:
                    d7:99:1c:24:17:70:cd:65:71:15:f8:95:e0:a7:13:
                    f2:f9:03:35:76:d4:93:d6:6c:37:ba:f0:7e:1d:66:
                    2f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AD:AB:91:77:C7:63:78:BA:83:FC:DD:FD:34:55:76:17:BA:84:41
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe977e9f-7f1c-441f-9a15-bf1e23e5150d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f16:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         06:85:3c:88:ac:f1:25:dc:4f:56:87:31:b8:d6:68:0a:1d:41:
         d5:3c:97:ad:23:ab:fc:04:01:fd:eb:2a:9c:d9:42:6d:74:2b:
         40:20:c0:55:99:53:47:02:13:12:49:d8:1b:08:18:89:99:9d:
         90:31:f0:a5:bb:09:75:e8:78:69:89:64:f1:d9:68:11:1d:9f:
         0f:2b:36:3d:9c:41:fa:8a:25:e3:63:b2:73:e0:42:e1:ef:7f:
         12:ce:f5:84:15:1f:6c:a5:7e:9c:bf:50:4a:da:9b:70:7f:64:
         d7:77:f7:28:1a:f1:8b:44:b9:b9:86:aa:82:a4:fa:f4:c2:b9:
         b9:04:79:56:83:a4:68:ee:90:ee:d6:77:63:84:3c:2e:b4:53:
         82:39:74:07:10:dc:fb:b0:0c:48:77:7f:2a:77:cb:9d:05:2d:
         64:01:86:e9:e3:7c:3d:e7:28:00:b2:93:98:ed:72:11:d7:f2:
         88:19:9b:24:39:61:be:df:2f:a2:2e:c2:ab:42:ee:f3:1b:ed:
         e7:ec:8a:d1:45:f3:e4:b6:aa:1b:3e:9c:7c:fa:13:8c:3e:47:
         33:02:6a:86:99:38:09:82:55:90:28:85:04:3d:6e:e2:74:f8:
         5e:94:cf:fb:bb:80:a0:c3:45:ff:f7:b0:97:0b:41:e4:35:27:
         76:0f:db:77
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----