Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d875efc-9c2f-4d49-87e6-ad3ebee32018.roa
File:                     1d875efc-9c2f-4d49-87e6-ad3ebee32018.roa (raw, json)
Hash identifier:          r8A2zm0bXA/Dg7g3njr+tGYfXbP6YYq4H2iKg6UFUxo=
Subject key identifier:   6C:92:2F:2D:56:94:3F:BE:57:DA:23:E7:9C:FB:2D:70:E6:32:09:CC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2DE9EF6E3EC14643063A849A2D148F134CF72F0D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d875efc-9c2f-4d49-87e6-ad3ebee32018.roa
Signing time:             Sat 18 Oct 2025 03:21:37 +0000
ROA not before:           Sat 18 Oct 2025 03:21:37 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fb9:6000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e9:ef:6e:3e:c1:46:43:06:3a:84:9a:2d:14:8f:13:4c:f7:2f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 03:21:37 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=b2fbcda79834f121c79a97ab8623d984c11c3892cc618e0f757a76062eb2334c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4a:c8:bc:0b:96:b6:10:81:18:e8:18:6e:8f:
                    aa:a4:bb:7d:33:f6:1d:5d:04:4a:70:85:77:a1:69:
                    33:3c:3e:f1:64:70:78:c0:07:d4:36:00:97:f5:0c:
                    e6:ef:09:ab:9f:70:09:da:62:41:8e:52:3b:0d:c0:
                    d5:10:a6:26:ea:37:42:68:1f:d9:0d:53:18:b9:9a:
                    c3:cf:0f:74:c1:86:7a:5d:54:84:b7:65:65:05:94:
                    46:91:2c:28:9a:71:85:d2:d4:e3:2f:fe:9f:e7:75:
                    e5:22:4e:37:53:59:70:ef:a1:e8:77:41:f6:d2:5d:
                    c0:2a:45:05:fe:03:cc:1f:53:cd:77:1b:e2:9b:59:
                    b8:29:fb:dd:97:e8:de:a1:a8:da:19:a6:97:e7:76:
                    9f:a2:ee:0f:35:cb:90:46:5c:74:55:92:3f:98:51:
                    c5:86:15:19:37:0b:1b:30:69:4e:a6:d0:1d:5e:02:
                    a6:41:bb:a4:69:a3:8e:f2:3e:b9:6c:af:eb:7b:3a:
                    7f:4b:dd:8e:fa:6b:85:4f:cf:d8:70:95:e7:38:6e:
                    c1:b6:a6:9e:16:58:93:12:26:96:7a:05:c3:21:0f:
                    ef:be:47:9f:1b:38:3f:36:23:90:e3:1f:33:d9:dd:
                    76:77:f3:6e:6d:34:45:63:8f:5c:8b:f6:93:d8:94:
                    10:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:92:2F:2D:56:94:3F:BE:57:DA:23:E7:9C:FB:2D:70:E6:32:09:CC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d875efc-9c2f-4d49-87e6-ad3ebee32018.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fb9:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         77:fa:c1:45:96:57:83:c2:46:e8:da:71:43:36:8c:5f:0d:e4:
         b9:3f:80:a4:07:0c:62:5c:95:5d:57:7a:b9:37:f5:c3:bb:a3:
         23:18:7f:68:fe:97:8d:47:23:86:80:cc:57:39:52:57:13:23:
         bd:08:4a:ad:4a:82:10:c2:32:68:5f:5c:4e:df:ec:cf:cd:60:
         59:22:49:9f:6b:7d:fa:a1:17:6f:fa:34:03:a9:24:b3:c5:46:
         82:23:16:64:eb:80:71:d6:aa:54:c1:3e:32:32:7e:7d:52:56:
         dd:52:c0:65:d2:8d:36:7c:51:f1:de:c2:77:16:be:92:8e:90:
         76:22:55:6a:de:1d:bd:68:82:97:13:32:4d:85:db:64:bc:f6:
         21:8f:62:2e:0e:7f:e2:af:03:80:46:32:20:f1:64:a2:02:9f:
         4c:1d:97:ad:26:88:72:a3:df:14:13:60:67:a3:4b:1a:ea:22:
         a7:16:ec:27:b2:9f:95:c5:2d:26:76:10:4e:d3:11:6f:a1:c5:
         12:1e:6a:f8:cb:35:72:21:f2:9a:14:60:8a:fc:e4:d2:cd:61:
         66:87:e4:31:a0:80:c7:73:59:31:17:96:30:21:b8:af:00:37:
         70:6d:f0:8a:e8:a8:1c:dc:6c:e8:b8:b5:39:2f:93:fa:7e:8a:
         3e:3a:bf:18
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----