Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c79ff15-79ff-4cf4-8ed6-25e4f0696700.roa
File:                     1c79ff15-79ff-4cf4-8ed6-25e4f0696700.roa (raw, json)
Hash identifier:          V+5UOgDSwkRpmdBMd1hezmPMvknFDZZCrTy5Izf72Qk=
Subject key identifier:   35:A2:90:A9:A1:FD:D9:76:BE:40:93:2C:82:26:B2:3A:CD:72:61:D8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6736040D59C62C56A00CFDAB6ED9ECB5377B46DE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c79ff15-79ff-4cf4-8ed6-25e4f0696700.roa
Signing time:             Sat 04 Oct 2025 00:41:06 +0000
ROA not before:           Sat 04 Oct 2025 00:41:06 +0000
ROA not after:            Sat 08 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff3:50c0::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:36:04:0d:59:c6:2c:56:a0:0c:fd:ab:6e:d9:ec:b5:37:7b:46:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  4 00:41:06 2025 GMT
            Not After : Nov  8 23:59:59 2025 GMT
        Subject: serialNumber=09a13d2d6ce4c315863f6ef08c28bfdafed77dbae422595101d52817feffe01e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b2:d7:7d:e2:62:cf:57:96:4e:87:cf:c8:80:
                    45:10:f2:3f:88:f4:cb:6e:0c:24:f0:e0:b1:05:ac:
                    6a:62:e6:1f:02:84:eb:f1:02:e5:80:06:82:7b:b1:
                    dc:32:e9:d5:42:e2:c4:18:7f:6e:b0:f7:30:ae:b4:
                    a4:8c:54:fb:9d:6f:3c:d0:96:53:00:4d:9b:71:35:
                    1e:d5:3e:93:c4:00:a9:d1:93:96:43:b5:af:cb:35:
                    37:12:09:1c:c6:53:78:a4:f4:f0:7d:cd:42:13:7b:
                    82:ad:66:62:3a:8b:1f:cb:fc:ed:67:dc:13:22:4c:
                    f9:8b:01:a8:40:e1:6c:ce:fb:3e:e7:f6:5b:96:f4:
                    a5:93:9a:88:5d:51:4a:7a:7c:36:f4:ca:f0:fd:69:
                    15:d2:fc:e2:4b:2b:23:aa:6c:d6:f9:39:1a:3b:fc:
                    66:ac:ba:40:2d:8c:62:f4:fa:e4:cb:5d:86:86:85:
                    27:a3:cc:6a:1a:6d:a4:1a:1b:78:55:4f:68:43:93:
                    b3:ad:02:8e:f2:87:7d:13:d1:34:ec:45:9f:c9:6d:
                    c6:3b:30:af:bc:ae:0b:14:71:02:1a:70:1b:16:da:
                    3c:40:d2:a4:94:34:6b:a7:d7:1a:0a:af:38:6a:0d:
                    63:a9:a2:a0:3b:ca:8b:dd:8c:f8:5d:2f:a3:ec:9a:
                    5a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A2:90:A9:A1:FD:D9:76:BE:40:93:2C:82:26:B2:3A:CD:72:61:D8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c79ff15-79ff-4cf4-8ed6-25e4f0696700.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:50c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         36:25:ed:a5:2a:2c:51:ca:d0:e5:75:d5:6e:26:b5:b4:e0:42:
         07:7c:24:df:32:54:18:79:18:cb:fc:82:a8:74:9a:02:29:19:
         02:8f:5f:fe:35:7f:21:17:c1:9a:31:41:6d:90:87:ff:12:54:
         1d:11:6c:32:66:51:71:f1:50:0a:61:2a:cd:e5:95:18:40:79:
         5e:0c:69:a8:a0:41:7e:a3:ef:43:87:0b:89:b2:ea:31:9b:b8:
         66:99:93:63:06:5c:77:d5:2c:0e:20:98:ad:8d:e3:99:db:ee:
         21:9f:9c:06:e5:3f:77:ba:b7:09:9c:80:b8:2f:7a:24:ec:9d:
         57:6f:78:e3:d2:83:52:b7:42:03:db:9f:42:dd:79:ef:61:18:
         27:57:4a:5f:f1:ad:7b:c3:70:cf:42:86:e3:63:74:b6:12:31:
         56:5e:36:d5:8e:5c:f0:3b:ae:f7:72:0d:24:04:85:1d:83:81:
         4f:a4:74:86:51:3c:c7:d2:08:68:5a:40:a2:02:d5:da:69:1e:
         1b:e4:c0:8f:50:c9:bd:16:ba:ba:d4:90:12:e2:22:4a:e1:89:
         ea:ce:fb:ad:e3:70:41:c3:fa:f5:d5:80:96:cb:65:b6:10:a2:
         7a:56:cf:85:ba:b0:26:bc:a9:77:5a:90:f9:b6:ed:e1:89:80:
         24:cc:12:69
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----