Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/312b1710-9a65-4adf-b0ed-caae30ff6b25.roa
File:                     312b1710-9a65-4adf-b0ed-caae30ff6b25.roa (raw, json)
Hash identifier:          uCKdlwf8ymizjuFvNIPhNN7iogQRXj4rNfaEpirXtF0=
Subject key identifier:   D0:B3:28:C1:AD:3E:A5:CF:87:04:2F:B2:11:08:C7:F0:D8:39:3A:D8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       63AB22DA1D9F6DF80629A590C88C5D296F2D77FB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/312b1710-9a65-4adf-b0ed-caae30ff6b25.roa
Signing time:             Sat 04 Oct 2025 00:52:33 +0000
ROA not before:           Sat 04 Oct 2025 00:52:33 +0000
ROA not after:            Sat 08 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff3:7400::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ab:22:da:1d:9f:6d:f8:06:29:a5:90:c8:8c:5d:29:6f:2d:77:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  4 00:52:33 2025 GMT
            Not After : Nov  8 23:59:59 2025 GMT
        Subject: serialNumber=a3595d30962a757646e074f7062b91d0c13efacb10007cd4b37a301c544d4ad5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c1:2a:6f:3f:8f:1e:6f:f5:41:aa:99:6c:e2:
                    e6:74:60:42:c8:aa:14:a6:f6:13:35:9f:30:3b:1f:
                    a4:6a:bd:19:e6:28:22:97:cc:ca:ce:d5:19:4f:66:
                    89:ee:8b:fb:b5:5c:00:a8:b4:d6:8e:85:c8:62:6f:
                    4e:3f:8f:70:ff:e1:aa:67:53:27:d6:39:ae:ce:b8:
                    7b:f5:19:37:41:ba:86:63:b0:08:02:9c:d0:5e:5d:
                    9d:72:20:1d:37:26:c5:bc:f3:7b:8a:e3:51:7c:6b:
                    23:7f:a1:43:7c:47:34:ef:0a:03:f2:29:a7:b2:43:
                    d4:90:6c:fd:cb:5e:4b:2f:80:3f:da:3e:b3:27:2e:
                    1c:cc:fe:75:e5:9e:b7:14:59:12:43:42:aa:80:ea:
                    c2:29:2d:f3:9d:a2:3d:eb:08:3f:db:71:92:b1:ee:
                    7a:48:86:19:65:26:eb:75:9d:81:bf:0d:96:a9:cc:
                    99:b4:18:4a:b8:fd:97:d0:33:5b:76:1d:d7:17:98:
                    b4:49:f2:a3:41:41:32:52:57:66:13:a4:5e:91:59:
                    7e:27:1e:d5:4e:85:04:38:88:36:e3:52:2c:93:5e:
                    4f:c5:ab:ce:f2:5e:1e:54:b5:14:ab:7a:42:5e:2b:
                    1b:3a:ff:73:2d:dc:48:0b:04:e0:31:67:d0:e0:99:
                    84:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B3:28:C1:AD:3E:A5:CF:87:04:2F:B2:11:08:C7:F0:D8:39:3A:D8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/312b1710-9a65-4adf-b0ed-caae30ff6b25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:7400::/40

    Signature Algorithm: sha256WithRSAEncryption
         93:88:f5:9c:9b:51:13:7a:ef:8d:fe:9c:b6:c4:0a:8c:01:11:
         36:14:68:25:03:11:27:ab:ff:b9:5f:2f:b1:f2:52:f9:b6:04:
         b2:bb:7b:db:ff:d1:51:80:56:e3:e7:a1:c6:2e:62:0d:2f:cc:
         a9:73:48:fa:09:3e:52:f9:a3:dc:6f:65:b6:eb:4f:dc:db:a5:
         91:e7:bc:74:d7:29:c9:1e:64:3d:27:6a:00:87:b8:e4:f7:3d:
         8a:f6:d3:b7:6b:5b:ec:58:c9:1f:dd:47:60:df:47:19:f4:de:
         be:c1:49:94:0b:77:03:68:30:dd:d3:9e:ba:65:24:65:1b:cb:
         40:74:2c:39:04:81:4d:d5:9e:53:f9:61:fb:1a:1d:9f:2b:27:
         d7:3d:36:49:31:f8:02:0a:65:fb:2a:84:bc:5c:fe:85:c8:6b:
         94:db:e6:3d:79:3d:0e:67:a8:1a:0f:00:c5:80:e2:aa:1d:02:
         6d:5a:c9:38:d2:4e:aa:a4:30:fa:58:11:9a:1d:c4:79:15:fc:
         5c:e9:f1:dd:43:45:22:21:22:72:9d:f5:91:7e:bc:9d:c1:93:
         ce:21:d3:93:2b:01:86:c5:dc:d1:65:94:02:33:51:b1:05:25:
         7a:dc:93:48:80:ce:b7:5b:5d:7c:b9:26:81:d2:11:6b:13:d5:
         c4:14:b4:50
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----