Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11fc0d9e-8319-421b-96a9-fce7851d3980.roa
File:                     11fc0d9e-8319-421b-96a9-fce7851d3980.roa (raw, json)
Hash identifier:          r951teOXRlVucMhhDvzNKPP73LgacOrxr7oqg/uM6UA=
Subject key identifier:   5C:7D:09:9C:F7:C2:C1:61:6C:46:0A:2C:AD:81:1B:AB:60:B2:9E:B9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4A3FAD0FA4B967CA15E83E87755B8FF2B8DFC1FD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11fc0d9e-8319-421b-96a9-fce7851d3980.roa
Signing time:             Fri 17 Oct 2025 20:21:22 +0000
ROA not before:           Fri 17 Oct 2025 20:21:22 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:80f0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:3f:ad:0f:a4:b9:67:ca:15:e8:3e:87:75:5b:8f:f2:b8:df:c1:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 20:21:22 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=50203b98efdc652ad34ae1ba6bb3229f00a2b00ac659d7bc0829dbd023d65ffa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:12:37:ac:94:99:8d:5a:37:bc:17:52:5e:d1:
                    cb:a7:c6:1d:a3:6d:ef:f9:df:59:e0:0c:9a:0b:9a:
                    b4:2a:3e:f6:3a:13:aa:8d:b1:37:02:d4:88:95:71:
                    8d:72:f0:25:f6:5b:4b:40:20:e1:a0:80:e1:cb:b6:
                    b9:bb:2b:f9:94:f1:1d:b0:8b:fb:9e:9a:cc:f5:53:
                    32:ab:d5:fb:6f:52:09:64:4b:93:c0:8f:ba:cf:64:
                    4b:ce:3c:db:03:e1:ad:84:16:94:3e:1b:da:a7:8d:
                    94:d5:6d:d8:44:db:a7:16:25:53:b3:7b:ed:d1:4a:
                    6a:87:dc:9a:29:2f:27:b6:56:67:94:52:cd:f5:c2:
                    a0:81:fc:4f:6e:a5:71:c2:69:b2:c1:74:aa:f6:54:
                    c0:f4:5b:99:75:30:11:40:e1:5f:82:c9:e5:09:2f:
                    46:53:0b:30:43:14:ef:e1:dd:0f:a7:f9:93:0a:9e:
                    c8:41:9c:3c:0b:2e:a4:0f:83:c4:9e:77:62:7f:64:
                    94:8b:f7:e5:08:b4:1b:42:40:cf:ee:01:9b:15:cd:
                    27:b9:90:68:ff:9b:b1:8e:4b:27:d8:e5:0e:e6:fc:
                    57:45:c2:93:72:3c:4e:fc:ab:fb:5b:84:bb:e2:10:
                    f8:10:8b:e6:c3:0d:a4:2a:37:f7:3e:0d:a1:83:51:
                    8c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:7D:09:9C:F7:C2:C1:61:6C:46:0A:2C:AD:81:1B:AB:60:B2:9E:B9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11fc0d9e-8319-421b-96a9-fce7851d3980.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:80f0::/48

    Signature Algorithm: sha256WithRSAEncryption
         d2:6c:95:45:a8:98:17:77:d8:47:e4:14:ac:11:49:f1:33:c4:
         56:bc:9d:c9:97:51:e1:2d:c7:30:eb:c0:2f:91:18:f0:53:84:
         44:c9:93:84:66:ad:66:0c:7a:f4:02:c5:42:47:67:dc:26:c3:
         da:3b:40:3b:e7:e0:ec:eb:96:21:8c:1b:f2:79:03:89:49:c6:
         e9:52:fc:47:7b:83:c4:47:48:b7:90:84:16:2b:33:f1:c2:9f:
         86:0c:12:ca:c9:7e:2f:77:6f:15:50:46:3a:49:d4:ee:ed:14:
         9d:54:49:5f:1b:be:60:35:b2:37:e2:1e:be:f5:60:a1:f9:98:
         83:27:f8:31:41:d8:af:e9:d8:42:fc:6b:16:d0:b2:39:cb:09:
         e5:54:ff:27:89:fe:d7:c1:dd:56:f3:6e:29:52:8c:4f:ee:42:
         20:57:83:97:9e:5d:a8:f2:7a:05:0a:f4:36:f9:3f:fa:dc:dd:
         f1:02:2c:2f:6f:5a:b9:d9:74:42:10:5f:66:5d:5d:d7:e5:e5:
         08:06:bb:35:42:28:12:2a:c6:67:b1:f6:05:7a:b6:f6:9c:c6:
         bc:2f:35:07:9a:a3:ed:c9:07:f8:ff:54:26:6d:6b:33:54:c7:
         83:27:05:de:9c:0a:7d:3a:13:8a:7d:62:78:bb:72:1d:8f:8f:
         f1:f8:25:2b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----