Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22dc0f2d-bcfa-41b3-b89f-afb024155d39.roa
File:                     22dc0f2d-bcfa-41b3-b89f-afb024155d39.roa (raw, json)
Hash identifier:          uhxD+ZVC/yXPkTvJSe9GN1UKXm2zelpfXshzbe/viYs=
Subject key identifier:   D4:2C:F8:C1:D0:DA:61:9C:E4:5F:4F:E1:D1:BC:14:39:34:EA:44:92
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       54E0FE4568D791878867112CD07644C4E1E00E04
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22dc0f2d-bcfa-41b3-b89f-afb024155d39.roa
Signing time:             Mon 06 Oct 2025 16:02:06 +0000
ROA not before:           Mon 06 Oct 2025 16:02:06 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f36:ec00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e0:fe:45:68:d7:91:87:88:67:11:2c:d0:76:44:c4:e1:e0:0e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 16:02:06 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=cdacdedcdb5634450c7d67fda770491616473929612ea84343bf3ceed3c7008e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:35:e3:cb:30:e0:83:60:23:41:34:bc:b9:b2:
                    0f:da:c3:0a:a4:94:9f:99:73:a4:9f:3c:ea:a6:d8:
                    94:45:f9:e3:bd:1c:2d:7a:21:d0:70:87:3d:2a:a0:
                    84:9b:31:b6:09:d0:4c:2f:6a:f7:9c:19:a7:c0:3a:
                    7c:e9:c2:1b:47:d5:2e:26:12:50:65:22:9f:ec:df:
                    c1:61:0a:8a:c9:4c:b7:91:f1:07:e4:de:ba:0b:f5:
                    40:4f:77:40:30:2c:9e:4b:22:9f:88:19:fd:f3:d7:
                    0b:fb:5b:a2:ed:fb:c2:3f:fc:eb:92:50:5f:0f:c1:
                    15:79:5a:47:17:78:6b:fa:e6:47:b0:6f:b6:59:1c:
                    50:51:73:3d:d9:dc:05:1e:60:f5:d3:8f:75:f7:89:
                    32:d4:34:0b:9f:71:b1:2d:1a:89:5b:cf:8d:c3:84:
                    c0:f0:25:23:20:7e:fb:4d:81:d1:84:7f:bf:b8:f2:
                    16:66:5c:6e:5e:88:10:1b:6e:7c:49:94:db:7d:0c:
                    2f:f4:1a:41:86:1e:ab:42:30:18:5b:fe:5a:44:de:
                    a6:b9:1c:8f:e6:4b:8f:61:ef:10:19:53:fa:81:56:
                    e9:62:0b:d7:73:7e:5a:de:ad:84:8d:df:7c:89:07:
                    f4:e6:d7:56:74:36:e6:04:f1:63:e7:dd:9d:f8:74:
                    e6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2C:F8:C1:D0:DA:61:9C:E4:5F:4F:E1:D1:BC:14:39:34:EA:44:92
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22dc0f2d-bcfa-41b3-b89f-afb024155d39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f36:ec00::/40

    Signature Algorithm: sha256WithRSAEncryption
         33:80:e1:91:04:72:57:18:ca:54:99:1f:73:2d:7e:ff:0a:a5:
         61:47:b4:16:a3:7c:ae:5c:f0:39:f6:50:6e:28:35:67:88:69:
         21:28:08:3f:a1:f2:8d:ff:76:0f:4f:64:c5:62:0f:ff:5a:27:
         4c:d7:1f:96:40:f2:5e:7b:b6:eb:91:f2:0e:fd:a6:3d:0b:a3:
         0d:85:7a:55:7d:1b:d9:33:94:49:3b:1b:d2:72:9b:8c:90:b7:
         d4:e8:d0:42:d6:c9:d7:30:54:84:3d:2c:b2:7f:b2:62:c5:ee:
         44:f6:01:16:3f:75:aa:1d:71:73:0b:9d:10:9c:7f:68:46:0f:
         e0:6a:9f:d3:6b:8a:cb:3e:aa:14:f0:22:44:67:d9:31:ec:64:
         37:65:d7:0a:de:fb:cc:10:3a:44:a0:80:f8:96:64:50:05:95:
         90:c0:72:80:d8:e8:b0:75:40:62:2b:22:f5:f3:c9:50:3e:6b:
         b8:e5:09:af:db:23:46:f5:06:2c:66:c0:4c:a5:d7:4c:8f:f7:
         c6:0c:02:2c:f9:2d:f2:52:87:df:ea:f6:f2:d8:d9:35:ff:ab:
         16:e5:cf:40:1e:14:4e:c2:41:ee:9b:18:e5:bb:99:b8:32:ed:
         c7:87:3b:ee:15:71:e6:3c:a7:84:c1:e9:55:cb:52:a7:9c:30:
         cb:97:33:3b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----