Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1186eb64-ee57-4357-90a4-25d99e03e859.roa
File:                     1186eb64-ee57-4357-90a4-25d99e03e859.roa (raw, json)
Hash identifier:          aimKTK75KwzvmXIB2HTWwF8jSlAx4yLfpj9F1lw/rn0=
Subject key identifier:   FC:FD:3A:18:DE:C3:39:45:B2:A5:1A:90:63:A9:E5:63:C4:20:37:34
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       79C5A4E5D278F60ED42AA2B541F0A162CB2D9CA2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1186eb64-ee57-4357-90a4-25d99e03e859.roa
Signing time:             Sat 18 Oct 2025 01:10:59 +0000
ROA not before:           Sat 18 Oct 2025 01:10:59 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f11:4800::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c5:a4:e5:d2:78:f6:0e:d4:2a:a2:b5:41:f0:a1:62:cb:2d:9c:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 01:10:59 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=86fe2d339f05086d4a5648d4b2e17c477d2d05fd4186f4cc3a6318a10edfdb04, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:20:f7:ed:d7:ad:3c:39:cc:0e:26:18:72:bd:
                    3e:11:3c:d4:8d:88:b7:58:bc:1f:24:54:77:fa:76:
                    66:17:e4:9b:e4:1b:8b:8e:3f:7b:f8:9b:e1:59:15:
                    49:d2:2b:50:5d:43:0c:77:2a:a8:e5:a8:21:c0:27:
                    23:d0:03:b0:e2:0f:71:6c:60:a7:86:b2:08:8a:f8:
                    a0:fc:4b:b8:6b:b7:bb:59:9f:0e:a4:f6:0c:94:c3:
                    0b:4b:21:1b:01:c1:63:16:0e:ae:91:16:51:da:88:
                    32:91:5f:eb:e3:37:fd:0f:a6:f3:73:23:b6:e8:80:
                    a9:17:bf:74:b8:5b:1a:4f:2f:04:9f:cb:23:61:1b:
                    ac:4b:d6:78:5f:e4:2a:0d:84:58:b5:58:45:7d:d3:
                    0e:fa:46:77:12:df:25:ca:8f:77:1d:ef:aa:92:a6:
                    0f:e3:49:dd:76:85:78:7a:28:25:a0:b3:1a:be:aa:
                    c5:c9:d3:03:88:f1:a1:5d:eb:d3:b1:a1:5d:4a:b0:
                    40:21:82:ec:8e:d9:f6:74:f7:45:dc:dd:9a:5a:50:
                    2a:61:6e:d6:25:35:f9:df:99:fd:8a:0e:7f:09:c0:
                    58:9d:bb:23:5c:1b:da:80:ba:d0:cb:59:a1:5a:b4:
                    2f:d5:96:52:a8:ea:ce:97:9c:fc:ef:d9:06:59:8a:
                    90:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FD:3A:18:DE:C3:39:45:B2:A5:1A:90:63:A9:E5:63:C4:20:37:34
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1186eb64-ee57-4357-90a4-25d99e03e859.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f11:4800::/37

    Signature Algorithm: sha256WithRSAEncryption
         87:94:ce:06:f8:2b:03:f9:88:cd:24:a2:a9:bb:d8:ab:3b:0c:
         26:4c:dc:d1:77:de:3c:b6:7f:89:f3:55:58:3b:08:d2:87:36:
         07:25:d0:a7:32:40:56:8d:cb:3f:05:cf:d6:1e:7f:5a:de:d3:
         68:bf:b8:7d:c8:45:5a:44:10:3f:1e:bd:51:9e:08:f4:6f:d9:
         a8:91:11:5e:d5:be:78:42:67:da:6f:ad:89:34:ab:ae:bd:92:
         5a:75:58:1f:83:76:d9:d2:84:ad:14:8b:fc:9c:65:1d:0e:da:
         b9:56:8a:2b:25:d6:76:23:64:5d:17:e0:1f:53:1d:a9:e8:68:
         09:f9:68:96:c6:2d:a7:b9:57:2e:0b:3b:8f:f8:e2:c5:a5:60:
         b6:9f:a5:cf:9a:27:45:eb:ed:86:1b:11:d1:85:b5:62:e3:d5:
         8f:fb:ae:a7:c0:0a:53:ec:44:5a:63:21:38:0d:8f:c1:63:d6:
         72:6a:3c:25:df:dc:ef:0d:7c:46:dd:bb:46:c1:d1:b1:df:50:
         d4:bd:40:bb:d3:59:b0:93:b8:5a:cb:bd:7f:a1:25:2f:fa:0b:
         c5:8f:f9:18:d4:e3:dd:4f:43:e3:f0:cc:8c:44:05:96:4b:46:
         6c:84:59:ab:b4:1f:42:3f:b3:f5:35:23:aa:e0:ef:81:85:37:
         9d:5e:d3:56
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----