Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c593235-d4d1-42e7-a46c-4f5812080ba3.roa
File:                     1c593235-d4d1-42e7-a46c-4f5812080ba3.roa (raw, json)
Hash identifier:          WZFICKAAROZq/VZLekMFqIK8eLUZA5iA/MjwzBBYlTw=
Subject key identifier:   BC:F6:5F:AE:50:09:01:DE:FC:F5:35:A7:6F:3D:CC:32:5D:64:53:C2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6841F288D0ADBE02D0DD110F15BBA2F53448150A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c593235-d4d1-42e7-a46c-4f5812080ba3.roa
Signing time:             Fri 17 Oct 2025 20:31:39 +0000
ROA not before:           Fri 17 Oct 2025 20:31:39 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:8160::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:41:f2:88:d0:ad:be:02:d0:dd:11:0f:15:bb:a2:f5:34:48:15:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 20:31:39 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=6075f1f9a5e50e3c8d46efdd513e845e16328848c31436439e4e60eb544ea79d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fb:95:fc:e1:90:ad:bb:57:7f:1b:b1:03:ac:
                    10:fe:f0:59:f0:96:0b:41:21:19:0f:68:02:b9:2c:
                    8e:c5:ce:07:61:a0:91:48:51:ec:d5:f0:78:bc:40:
                    bb:27:89:9b:d2:72:f4:1e:6d:ca:ef:30:a8:77:c3:
                    69:08:95:aa:49:ce:ab:68:3f:e6:69:da:f6:fb:40:
                    26:93:00:58:53:fb:e4:a5:b1:34:26:20:42:63:f0:
                    18:b3:3e:b0:04:c4:d2:e0:e8:88:2e:a6:e0:91:59:
                    96:48:0c:44:5a:84:8b:b0:65:31:83:1d:b9:42:45:
                    7f:d8:5f:e7:47:13:73:51:8f:e7:ed:ae:bf:c0:e8:
                    bc:6f:92:14:64:3c:ac:52:78:19:2e:b0:73:af:6b:
                    60:6d:27:72:71:af:db:94:32:f1:2a:0f:97:4b:17:
                    66:b1:a9:85:e8:39:a1:7a:3b:0d:70:d6:93:c9:0f:
                    d6:fd:09:fa:42:ec:83:4b:93:df:a0:85:70:de:40:
                    9f:53:27:52:ef:f5:2b:b6:eb:93:44:57:11:82:c2:
                    f6:fc:b5:29:b7:8d:0d:e4:26:39:c8:4c:77:8b:85:
                    66:e6:b2:fe:1c:5a:a8:e4:71:49:60:8a:78:4e:4c:
                    52:c0:ea:53:50:f2:69:6f:c7:9c:75:78:84:80:a8:
                    aa:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F6:5F:AE:50:09:01:DE:FC:F5:35:A7:6F:3D:CC:32:5D:64:53:C2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c593235-d4d1-42e7-a46c-4f5812080ba3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:8160::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:ef:57:75:a4:16:ad:3e:09:29:2f:f9:16:c0:05:4d:a3:d2:
         6c:39:39:5c:50:87:cd:8e:cf:23:6b:6d:cd:96:e7:f4:91:a3:
         98:4a:97:96:0f:e5:8a:2f:ce:2a:16:c4:f7:e0:dc:98:77:0c:
         78:64:c2:0b:41:31:34:04:fd:0d:a0:ac:a1:fe:04:4d:58:49:
         34:e1:98:0b:e8:4a:75:e5:43:98:3e:9f:f3:f6:47:78:4d:63:
         5c:ba:ee:fd:16:50:2f:5d:15:5a:f9:40:91:8e:ac:33:1c:54:
         64:98:97:71:4d:ce:e7:f6:7a:74:ad:a1:f0:94:b5:74:81:5c:
         d0:d6:71:52:a6:f9:65:d3:b6:04:08:b5:70:55:53:92:88:a3:
         b7:34:74:f6:4a:fc:52:4f:d5:93:3d:ae:07:96:90:b6:33:6b:
         c3:f8:2d:0a:83:82:9d:bb:2f:82:d6:b9:0e:40:9e:51:f7:df:
         d0:88:96:bf:c5:17:e4:b5:09:6a:f9:1e:39:8d:dc:80:e6:4a:
         6a:7a:ca:f2:11:67:55:08:be:e2:99:ef:b3:2c:c1:67:c4:d9:
         48:c2:a6:5c:06:43:17:d6:e7:c8:63:ef:13:9d:c4:44:07:c4:
         61:ab:56:02:78:e5:5b:de:d2:6c:21:ba:cb:c6:3d:4f:dc:63:
         01:c8:02:e4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----