Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1addf3a9-bb11-410a-918f-ad584f0c597c.roa
File:                     1addf3a9-bb11-410a-918f-ad584f0c597c.roa (raw, json)
Hash identifier:          FfQupJiL15UKJt3IO8uaeFbQ4jLi+NmF7za0eXqgiTo=
Subject key identifier:   6D:6F:8E:08:D6:07:3A:E2:58:58:D6:95:77:E0:C5:52:20:D0:26:68
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       674CD0EB25E90124D7039FB8378E810CBA898FBC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1addf3a9-bb11-410a-918f-ad584f0c597c.roa
Signing time:             Fri 17 Oct 2025 21:10:03 +0000
ROA not before:           Fri 17 Oct 2025 21:10:03 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:6080::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:4c:d0:eb:25:e9:01:24:d7:03:9f:b8:37:8e:81:0c:ba:89:8f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 21:10:03 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=fd9e0bfc719fab056f92c37fa499cace0e8462f2469066072831fd419517d9c9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:58:85:dc:ca:ef:67:87:dc:d9:c9:b3:92:16:
                    d5:89:bd:e2:95:bb:8e:dc:4a:db:09:c8:59:49:80:
                    9b:1d:e1:13:65:b7:ad:da:98:21:ff:b2:07:c8:4b:
                    34:f8:5d:cf:63:34:ce:9f:2c:02:d6:86:1b:00:86:
                    d7:ef:94:90:fd:25:5b:68:3a:96:27:29:7e:5b:2c:
                    e8:1e:75:37:60:f7:2b:47:5e:81:44:5a:c9:e1:55:
                    0f:a7:91:97:ba:cc:df:1d:70:7f:91:5c:06:6f:ae:
                    fd:e3:e4:14:5a:05:ff:97:1c:17:8d:4e:ba:4a:20:
                    58:f7:e8:76:89:9a:5f:a7:f7:e3:ce:a5:df:54:5d:
                    c9:fd:df:fc:d6:f8:2f:9e:84:78:cb:25:5c:69:2e:
                    4e:0f:7c:4d:95:bf:34:48:ae:49:cc:32:64:b7:c6:
                    ae:76:52:62:e7:97:9f:83:34:bb:9e:29:16:7a:bc:
                    e6:ff:2c:60:f1:4b:de:99:51:60:89:3a:0c:0a:7d:
                    90:fc:09:b1:93:18:cc:6e:ca:fa:86:c9:83:7e:56:
                    0e:30:0f:30:44:07:c5:be:04:d9:1b:0e:1d:ea:6d:
                    7d:50:e1:3e:04:d2:ae:9c:13:0b:7c:35:e0:f1:84:
                    00:93:fb:5a:27:17:d6:40:a7:76:56:b8:e9:1d:11:
                    5d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6F:8E:08:D6:07:3A:E2:58:58:D6:95:77:E0:C5:52:20:D0:26:68
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1addf3a9-bb11-410a-918f-ad584f0c597c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:6080::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:75:e0:1d:4a:32:06:0f:a9:ed:d2:40:dc:2b:ea:3e:ba:f4:
         f9:ec:96:ee:ea:e9:09:76:f0:49:ce:70:c2:3f:4f:b6:17:c1:
         44:29:5f:a2:49:cf:b0:ce:52:f0:f3:4e:b2:3b:9d:e0:04:3b:
         cb:f5:12:69:4b:c2:bf:5a:da:83:c9:9f:be:f5:90:a0:8e:6d:
         67:77:97:73:5b:bc:91:16:34:c8:88:b5:18:d4:e2:ff:e8:c0:
         a3:9d:1e:33:33:c7:93:f3:53:4b:39:a9:01:bf:1c:b8:64:52:
         3d:1b:cf:6f:06:74:45:5b:af:3f:8b:d5:9b:3c:08:66:92:e9:
         30:eb:e1:63:bd:ca:4c:93:3a:d7:30:be:34:c9:f5:4b:52:47:
         fb:7e:cc:c6:63:70:12:ba:64:a1:2c:9f:e1:c1:f0:c4:6f:ea:
         34:a8:06:bf:ba:f9:9c:5a:a7:07:3f:75:69:d7:2e:27:55:11:
         87:01:20:7e:ed:90:5a:47:74:cb:de:03:1c:4b:d0:bb:df:9f:
         68:58:ae:0a:0c:a3:8f:32:e5:3a:dc:49:82:9e:3d:1e:f2:eb:
         11:7b:06:90:6d:ab:ff:2f:94:07:b2:1b:f1:ab:d2:c9:1f:de:
         eb:0f:4c:13:52:c6:c5:39:ed:d4:b6:9a:5e:d5:a1:7d:17:fd:
         df:81:23:7e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----