Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08741a48-fdc4-4380-ba1a-6d0d28bf1d26.roa
File:                     08741a48-fdc4-4380-ba1a-6d0d28bf1d26.roa (raw, json)
Hash identifier:          zjpgMuEmVAn/lME3FQUp7IHbckyWEw9zcaOj2Nl4Hro=
Subject key identifier:   8E:E8:F4:96:F0:3F:64:96:6C:9F:3C:8E:90:37:DA:AF:7A:3B:00:54
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       70ADBC95CD1A144A18E6221CCEAEB3F431F3D70D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08741a48-fdc4-4380-ba1a-6d0d28bf1d26.roa
Signing time:             Fri 10 Oct 2025 14:22:01 +0000
ROA not before:           Fri 10 Oct 2025 14:22:01 +0000
ROA not after:            Fri 14 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f29:c800::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ad:bc:95:cd:1a:14:4a:18:e6:22:1c:ce:ae:b3:f4:31:f3:d7:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 10 14:22:01 2025 GMT
            Not After : Nov 14 23:59:59 2025 GMT
        Subject: serialNumber=3341e1c078d24b55b07538553dcc2dae9b5aec9d31f2e1fd713ab0453024a498, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8b:f3:b4:0e:3b:b5:08:4a:a0:13:e9:f6:b6:
                    9d:35:43:24:d2:88:9f:43:c3:b6:75:ad:74:1c:72:
                    ea:01:2e:e8:e7:f8:9a:95:11:3e:13:fb:f4:7d:68:
                    88:75:2f:f9:fe:25:a8:20:e5:59:84:69:74:db:f0:
                    4a:8a:c2:64:c8:53:5c:30:32:1f:08:fa:4a:22:79:
                    25:38:80:fc:84:77:c3:52:74:53:00:8e:a6:47:fc:
                    e6:95:25:c2:2d:6d:90:74:9e:a3:0e:a9:db:70:0d:
                    72:20:6f:1b:72:3f:75:6a:d8:9f:cf:49:a1:c6:6f:
                    2e:e5:19:f8:43:7b:3b:fc:c5:6f:87:06:94:bf:cc:
                    ed:b4:aa:1f:67:88:9f:9e:b2:ec:96:1c:17:85:2b:
                    7f:56:ec:35:ac:11:c5:3e:68:2f:82:ee:86:d0:8f:
                    d5:45:1b:5f:5e:55:49:70:1b:1d:e9:b4:36:47:2b:
                    0a:2a:dc:30:7c:95:23:5b:58:ff:0b:ec:c9:40:62:
                    d6:6e:c4:d7:10:47:0b:99:a3:b7:0c:11:7c:c3:7e:
                    cb:b6:a4:7a:14:92:2f:ba:65:d2:87:5f:ce:96:b1:
                    ca:17:a4:89:06:6c:82:5e:b2:c2:8b:0a:72:be:4d:
                    f4:ec:fc:99:9e:ba:e6:b6:bf:f5:ba:34:3d:eb:02:
                    e0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E8:F4:96:F0:3F:64:96:6C:9F:3C:8E:90:37:DA:AF:7A:3B:00:54
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08741a48-fdc4-4380-ba1a-6d0d28bf1d26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f29:c800::/37

    Signature Algorithm: sha256WithRSAEncryption
         51:1f:e9:77:45:41:30:f5:2a:00:fb:fe:f3:2d:85:d1:69:6d:
         f9:5e:3c:1c:af:da:97:1c:89:d8:e6:12:3a:80:25:6a:ea:49:
         a7:81:22:4a:d2:7d:94:c3:c5:5a:93:a0:36:5e:58:01:bf:26:
         b8:bf:0d:b8:b9:66:0a:23:60:2e:d2:a9:0c:21:bb:34:0e:73:
         15:83:94:3e:a3:a0:87:54:7f:5f:48:8e:05:06:f1:c6:e9:58:
         72:e7:6e:50:d1:e1:4e:a5:bf:bb:0f:10:db:19:9d:0b:d7:d9:
         7a:f3:42:c0:2b:40:fa:60:3c:a8:bc:69:6a:7a:d1:19:22:9b:
         db:fa:09:8a:45:c2:ae:a9:73:17:39:73:8b:a7:66:c4:82:eb:
         8c:94:6b:62:d4:02:7b:04:6d:5e:97:45:4f:0b:6d:67:49:af:
         8d:2e:46:33:fd:c1:71:1d:dd:b3:74:d5:e0:ab:e6:17:48:4e:
         8d:dd:31:b7:81:7f:2e:15:cb:c9:4b:78:b7:fc:a2:95:b2:79:
         f8:05:33:ad:4b:e9:a7:d1:bc:8b:a2:13:32:13:62:a4:96:66:
         8d:10:0b:e7:3e:83:5e:ab:e0:50:a7:b6:75:c5:6e:cb:98:b1:
         74:c0:aa:0d:db:df:74:88:90:3e:f5:9a:86:bf:74:f4:71:50:
         c6:41:0e:6b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----