Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20835921-52a1-4298-9dfe-c6c9d7802f1c.roa
File:                     20835921-52a1-4298-9dfe-c6c9d7802f1c.roa (raw, json)
Hash identifier:          hT5tgG1GN9zlpDMQU1rNwMJXfLXJTua9CrYfLYuz1fI=
Subject key identifier:   75:BC:5A:CD:79:F1:3E:09:9C:90:CE:32:A2:44:2B:4B:CA:D1:2F:2B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       564BA33A4DB6164D5CDDDC555DDF62C7BA47B81C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20835921-52a1-4298-9dfe-c6c9d7802f1c.roa
Signing time:             Fri 17 Oct 2025 20:30:35 +0000
ROA not before:           Fri 17 Oct 2025 20:30:35 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ff2:8060::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:4b:a3:3a:4d:b6:16:4d:5c:dd:dc:55:5d:df:62:c7:ba:47:b8:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 20:30:35 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=dcc17886ea01cec764c4c40f1b4ce05d1addd815621677a1b4c9709289b471a8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:40:89:23:89:db:48:c0:10:70:b1:70:a3:bd:
                    58:f7:cc:39:24:12:3d:a6:3a:05:0f:07:8f:cb:6e:
                    ef:9b:db:14:40:62:c9:87:36:83:93:45:9f:92:5a:
                    9f:8d:84:f7:f6:6d:e8:5d:29:19:f1:00:35:06:b2:
                    31:06:06:09:9e:22:32:48:d2:d8:b8:4b:58:5e:ed:
                    ff:4e:98:85:61:e2:f8:0d:96:9f:1f:cf:39:46:db:
                    63:e2:99:08:9b:3e:17:a0:03:99:b3:fa:32:7b:7f:
                    db:1f:13:0d:ed:5e:39:4f:eb:9d:0f:48:9a:8b:a0:
                    43:d8:04:71:75:fe:7f:25:a6:a7:0e:86:20:1d:7a:
                    19:be:26:46:d3:b5:8b:e1:98:81:cd:b4:e2:4f:bd:
                    72:2b:7f:46:c7:0b:aa:30:ef:e3:b3:5e:59:45:35:
                    89:b9:1e:16:ce:84:3c:f3:76:ed:ac:54:bf:bf:9f:
                    1f:7b:1b:f9:95:21:10:b3:0a:75:46:09:ab:d4:a3:
                    62:21:bc:03:1a:d7:63:89:e2:2b:d8:97:a1:70:0a:
                    cf:c0:25:16:98:dc:e6:ea:e6:de:f1:9f:d3:84:e2:
                    56:81:32:21:9e:bf:9a:88:62:0d:bd:7d:24:17:83:
                    c7:e9:fd:5b:38:32:67:c8:77:e0:1c:52:72:71:80:
                    20:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BC:5A:CD:79:F1:3E:09:9C:90:CE:32:A2:44:2B:4B:CA:D1:2F:2B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20835921-52a1-4298-9dfe-c6c9d7802f1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:8060::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:9d:5a:37:fd:fd:e6:d6:8f:ba:4b:18:0a:92:bf:20:0c:3e:
         b1:69:dc:d2:db:23:70:0a:e6:a7:e2:9a:ff:d7:ab:53:9c:9e:
         12:e9:48:b9:d8:ad:f3:36:bd:9b:22:24:28:4f:56:8d:ea:15:
         8a:8f:00:b9:14:93:b9:b4:5e:18:a3:65:93:8e:23:fe:39:c4:
         c6:5f:68:4d:6c:69:5f:09:64:dd:b1:33:77:3b:e8:e2:27:0e:
         39:92:3d:35:ac:1e:8e:59:21:9b:b5:d3:1b:b6:ce:c4:79:85:
         53:52:22:56:dc:a8:6e:1e:e2:e5:96:40:5e:33:5f:ea:39:88:
         7e:38:49:48:4c:e4:5a:3d:64:5c:ea:55:36:f9:c9:19:54:d0:
         b6:cd:79:a4:f1:48:a0:c1:10:04:3c:7d:fb:58:69:9c:4b:a7:
         66:3e:7c:b1:eb:b3:bc:34:69:6f:ff:eb:89:d0:b3:71:c7:bc:
         47:b2:90:b3:71:96:95:4e:53:29:31:d3:06:c9:31:a4:c9:28:
         95:f8:99:2c:bd:8b:e6:31:6f:43:cf:12:97:c2:5b:1f:dc:55:
         06:3e:ef:5e:44:1c:2d:ad:41:2c:2e:cd:4b:b0:82:1e:44:38:
         3a:06:31:3d:31:69:d4:83:42:db:06:ca:12:5e:46:08:47:11:
         1d:07:79:8d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----