Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c72e834-f548-4673-aeec-af4df6752288.roa
File:                     0c72e834-f548-4673-aeec-af4df6752288.roa (raw, json)
Hash identifier:          /iep/ROuhG8FGfnbhw8VJSW9akBYQftlMW7mMoGcxBk=
Subject key identifier:   9A:6A:36:27:54:9F:E7:68:0F:CC:E5:5A:95:B3:C3:1D:A9:2D:3A:80
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2F1B27D450B506CBDCEF217F0DCED85CED3F54A5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c72e834-f548-4673-aeec-af4df6752288.roa
Signing time:             Fri 17 Oct 2025 21:10:13 +0000
ROA not before:           Fri 17 Oct 2025 21:10:13 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:50c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:1b:27:d4:50:b5:06:cb:dc:ef:21:7f:0d:ce:d8:5c:ed:3f:54:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 21:10:13 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=eb87a0e6ac0e9b52b8c6273b2342d9bfac97d5a8ae1be3decf9128e71a95b5df, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b6:17:44:54:21:cb:d7:6c:2c:fc:66:5b:1c:
                    16:1b:c2:46:bc:49:19:27:b2:3d:23:09:14:96:cf:
                    6f:cd:ba:dc:c0:65:ed:02:e8:2f:90:16:77:04:4c:
                    c2:9c:52:a7:70:ab:43:a1:7f:2d:68:c5:c9:77:e4:
                    71:91:8a:b4:6e:b7:e0:2f:9c:5e:fc:48:e3:93:21:
                    9a:dc:38:b5:4a:09:65:5d:e1:dc:31:e0:8e:e9:91:
                    7e:3b:87:59:3f:8d:70:1b:52:97:83:6f:86:d7:cc:
                    f2:8f:08:8c:a9:cb:5e:2e:27:73:b6:c6:da:af:85:
                    58:42:91:a9:03:10:ad:98:b4:39:96:ce:f3:d7:79:
                    06:97:df:46:43:b1:33:8a:c6:5a:99:be:20:27:61:
                    10:af:d4:6f:d3:b9:bf:51:5e:9e:42:81:f6:c3:43:
                    ce:7e:0c:2d:ce:31:2a:2d:7a:8b:2a:57:49:c1:88:
                    89:59:79:13:00:82:05:ae:bf:b2:e6:91:be:09:94:
                    2c:f1:83:93:24:51:c9:0a:71:fb:99:1d:fb:fc:ec:
                    b9:4e:32:43:24:62:e0:f7:2d:e6:31:81:3c:b0:8b:
                    6f:8b:68:a9:a9:5a:bc:30:db:7c:f9:15:43:a3:e9:
                    5e:bf:94:af:35:a0:91:05:f7:b0:31:df:f5:60:87:
                    c0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6A:36:27:54:9F:E7:68:0F:CC:E5:5A:95:B3:C3:1D:A9:2D:3A:80
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c72e834-f548-4673-aeec-af4df6752288.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:50c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:1e:38:cc:74:92:5c:7d:70:dc:34:8e:50:18:ee:94:f2:19:
         ac:4e:15:2a:ed:7c:50:93:57:5e:ce:d0:c9:97:3e:22:7e:04:
         4b:fb:d7:fb:3b:79:62:c8:82:a3:d9:2d:81:4b:41:b3:da:ff:
         02:bc:a8:07:18:87:0a:fb:a2:a0:de:c4:a3:d8:8a:f6:37:8b:
         e2:46:2d:26:46:62:da:ff:d2:f3:a8:39:07:29:73:59:f5:c6:
         1c:1d:25:c8:d8:36:32:06:6a:8a:89:6e:42:2b:5d:68:87:17:
         92:f0:59:23:2b:fc:90:a0:f8:28:b6:14:b4:6d:ea:97:eb:6e:
         37:cf:e6:a4:70:e4:6e:80:0b:85:bf:10:59:53:82:d3:06:aa:
         7d:a2:38:d2:ae:ca:31:55:04:74:45:34:77:ea:b3:6d:cc:1d:
         fd:09:6c:30:49:a8:59:8e:79:7f:3c:64:9b:59:d0:eb:cf:db:
         52:3b:ac:a9:8e:d6:2c:ac:fb:46:ba:bc:b2:bc:f5:bc:62:a3:
         6a:98:2a:76:52:84:c5:fd:6e:fc:a1:b1:e7:87:ce:39:ff:c8:
         9d:be:97:6d:7b:3a:33:23:e3:c7:7e:dc:5f:15:26:66:b5:be:
         c4:08:1d:70:4a:3f:b6:b2:ba:9c:5f:86:2e:0d:27:db:67:1d:
         27:b2:cf:fc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----