Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27fd4be6-f2ba-41a2-a095-eaca42b4d144.roa
File:                     27fd4be6-f2ba-41a2-a095-eaca42b4d144.roa (raw, json)
Hash identifier:          vpbaZrY7koQcG6AmeCyH8NJAe0RWorDPcPFSaC+6sCE=
Subject key identifier:   78:9E:83:C9:33:39:53:F4:8A:B3:5C:2E:E2:E2:37:D9:7C:27:A0:B6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       539BABBC20084FB48B68EA47B718217A5DE2FF4D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27fd4be6-f2ba-41a2-a095-eaca42b4d144.roa
Signing time:             Fri 17 Oct 2025 21:41:05 +0000
ROA not before:           Fri 17 Oct 2025 21:41:05 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:81d0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:9b:ab:bc:20:08:4f:b4:8b:68:ea:47:b7:18:21:7a:5d:e2:ff:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 21:41:05 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=0cd773a79a984cd9d6c8ad6f559f88ba94d45bc1f62fc9a323f75265d4d55e12, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:88:52:6f:f0:23:6f:a5:99:34:fe:f7:b6:b2:
                    7f:41:b8:de:9f:dc:00:9a:2a:e5:ca:f7:89:23:bc:
                    29:f3:02:49:9b:33:81:5f:ec:f5:cc:c3:f9:43:3e:
                    7e:9f:f8:e4:bb:05:6f:07:8f:f3:1d:45:14:57:fe:
                    d5:69:20:f1:19:f2:32:f4:76:81:8f:fe:37:7c:a6:
                    b8:84:77:14:48:07:2d:99:f8:49:20:73:6e:b2:ec:
                    ff:d6:15:3d:97:79:a4:1c:19:0b:27:43:ac:da:ec:
                    3d:1b:5a:cc:d9:db:0f:e3:ac:8f:1a:d3:a6:c9:51:
                    bc:3d:06:46:5f:b3:e9:74:77:0b:f7:ac:ad:05:36:
                    28:6e:a7:46:7e:f1:24:ae:56:c9:a8:bb:1b:64:1b:
                    e8:78:f3:ec:84:63:d0:eb:7b:29:c8:3f:78:32:bf:
                    cb:d7:56:f1:d2:fc:bd:ea:f0:73:94:d3:2e:cd:76:
                    1f:a0:1c:0a:cf:41:93:a4:1b:7f:c2:e5:36:ec:58:
                    26:da:f4:5a:cd:32:e7:a9:32:74:d5:cb:85:97:2b:
                    85:a4:7a:e2:53:72:84:ee:2c:a1:c6:d9:e1:bf:a6:
                    3c:b7:8d:07:20:a6:5a:83:71:f2:87:aa:94:68:94:
                    9c:01:c2:8f:6a:3f:bd:c9:76:6b:33:7b:2b:2d:b0:
                    20:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9E:83:C9:33:39:53:F4:8A:B3:5C:2E:E2:E2:37:D9:7C:27:A0:B6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27fd4be6-f2ba-41a2-a095-eaca42b4d144.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:81d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:f9:6d:75:fc:07:57:6e:fc:d1:b8:e2:88:f2:b1:f0:e6:4d:
         50:b9:e4:da:17:4b:a3:8d:e0:e7:0c:be:7b:77:7d:c4:1d:9b:
         65:02:55:cf:34:8e:13:82:5f:99:ea:58:da:b8:31:bb:f0:a3:
         34:c5:ec:76:8f:b5:ea:0d:28:56:8e:b8:65:b9:50:66:fb:da:
         01:3d:bd:f4:1d:76:f4:13:72:01:6f:21:59:f3:8b:db:6a:7c:
         b7:83:5c:f8:33:13:13:9a:d1:a3:2a:6a:32:ae:53:28:71:b3:
         c7:b0:02:10:39:66:ff:a0:4c:24:61:cf:d5:16:f5:54:32:15:
         00:1c:88:66:70:88:b9:81:47:e6:d5:ca:cd:9d:f4:61:00:a6:
         12:b2:60:ac:99:6e:9e:eb:36:47:4f:2a:a1:d2:cc:3d:fd:95:
         ae:9b:f7:60:b1:33:47:eb:db:a9:1b:83:71:44:0a:76:a8:5f:
         04:a8:f6:12:ff:d4:d5:72:c8:92:7f:a4:1e:03:8a:3a:ce:ec:
         8a:6f:e6:73:af:71:db:c7:ea:65:b4:c3:94:4a:a6:c6:69:0d:
         bb:04:ae:fb:c6:56:65:5e:7d:b3:fb:6a:e5:77:40:d4:2f:25:
         f0:51:84:aa:a6:e0:0e:96:6e:6d:b1:b9:84:2c:17:10:43:05:
         32:b6:a1:d8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----