Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/334b74da-25a5-4155-8dcf-838c529ccfcf.roa
File:                     334b74da-25a5-4155-8dcf-838c529ccfcf.roa (raw, json)
Hash identifier:          IMVGlIuguctY2G53derXSKvh33FxX5CO/ooueGE39ho=
Subject key identifier:   6C:88:D1:2E:5C:B5:F7:10:9B:4F:43:2B:19:A9:80:BC:C9:A5:FF:61
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5D73C05F30F2CE5EAF6157AF5D81C008B6B7BC79
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/334b74da-25a5-4155-8dcf-838c529ccfcf.roa
Signing time:             Fri 17 Oct 2025 21:31:22 +0000
ROA not before:           Fri 17 Oct 2025 21:31:22 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f61:4040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:73:c0:5f:30:f2:ce:5e:af:61:57:af:5d:81:c0:08:b6:b7:bc:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 21:31:22 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=d391cd10c64cf40c5fc8d4f55d52151d9780c551f817ab6fb438c082547e1e95, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:61:f6:88:05:68:c4:5f:54:bd:05:ca:a3:e9:
                    47:e4:7e:ac:da:7f:66:d2:3f:66:a9:04:1a:e7:6c:
                    56:23:5c:f9:73:03:51:b7:52:36:c2:a7:72:4e:91:
                    2c:42:b9:66:d4:0e:1f:8f:f8:62:6f:4a:61:ce:8a:
                    56:cc:e9:d1:8f:29:f2:9b:8b:97:32:54:00:3a:2c:
                    6b:3f:c1:3a:d2:1a:4a:ca:c4:51:d5:10:f0:6e:55:
                    06:21:ba:1d:42:f3:e0:df:d0:89:15:82:8d:2d:a0:
                    22:f8:3a:12:23:b3:7b:8b:fc:7c:17:50:2f:6f:1d:
                    f0:f0:62:22:0f:61:b2:e6:32:86:50:2c:60:f2:29:
                    89:7c:73:1a:7a:8d:aa:e7:77:fe:7d:bf:2c:32:6d:
                    ed:ee:d7:4a:fc:cb:06:41:a1:d5:61:5d:03:69:23:
                    92:50:d3:68:a6:7b:df:02:a8:08:94:f4:97:4f:ad:
                    a4:c7:a7:cc:07:e7:2d:89:3d:4e:2a:10:ac:03:f8:
                    c6:c2:51:24:1b:5c:0f:87:50:07:c4:33:6f:13:aa:
                    57:f2:8a:7f:8c:ea:45:00:d7:ee:01:77:5f:a7:b4:
                    6d:6d:9e:95:68:29:c7:97:95:9e:6e:ad:89:c4:b6:
                    d1:d4:0b:94:2c:8f:7c:80:2f:30:d7:6c:c8:98:82:
                    48:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:88:D1:2E:5C:B5:F7:10:9B:4F:43:2B:19:A9:80:BC:C9:A5:FF:61
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/334b74da-25a5-4155-8dcf-838c529ccfcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:4040::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:47:b4:1b:05:8e:2e:fd:11:eb:87:90:ad:2a:9c:81:7d:22:
         27:c2:a0:52:62:a8:63:31:ad:e4:2c:10:18:8d:03:f0:2a:ca:
         22:4f:cf:1a:76:ac:05:c2:c8:5a:1e:c1:e0:4b:9e:03:90:22:
         d8:dc:4c:25:23:31:de:6a:d2:7a:8b:1f:24:89:38:26:a8:ae:
         67:d9:f0:10:0a:38:cd:b4:c2:24:5b:52:44:c8:3b:b1:5f:f4:
         07:37:61:dc:51:36:11:69:eb:f7:77:48:a7:86:79:5a:fb:39:
         6b:16:a9:be:4e:a2:63:12:9e:83:7d:38:28:a6:8c:b7:5a:4f:
         42:53:9a:9e:a4:c4:f2:24:43:4d:7f:95:1e:20:41:30:79:b6:
         5e:39:72:92:3c:d3:0d:8d:2c:a8:cc:e7:4c:63:ab:18:4d:72:
         ad:3f:ba:8e:bc:67:23:a4:4a:49:e8:47:80:d5:5a:9e:eb:73:
         d0:73:59:c7:62:4a:96:41:ce:fc:ad:76:df:e0:32:47:0e:f3:
         42:60:53:e2:d5:8d:55:2d:ef:80:08:eb:31:1d:90:e6:a3:f5:
         58:48:25:f8:a0:0c:76:c6:41:d8:d3:3b:56:ad:cd:54:cd:a3:
         d0:0c:8c:79:06:2c:d6:46:9a:a0:ad:e8:3b:4f:d9:22:96:00:
         d9:fd:82:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----