Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35d8b8e0-8b5e-4f54-933c-eff053d0f3a8.roa
File:                     35d8b8e0-8b5e-4f54-933c-eff053d0f3a8.roa (raw, json)
Hash identifier:          BYx+3Ol3knoJELqq6um1imJRSKJ9U1kCfu0dKIXMeFA=
Subject key identifier:   7F:12:8E:09:FD:14:43:F1:54:19:ED:0F:D7:C8:5E:C0:CE:EE:11:4C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3233C4F46F9FB024EDB3E1DB3CD1CD63CFFD2836
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35d8b8e0-8b5e-4f54-933c-eff053d0f3a8.roa
Signing time:             Fri 17 Oct 2025 20:30:36 +0000
ROA not before:           Fri 17 Oct 2025 20:30:36 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff2:8060::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:33:c4:f4:6f:9f:b0:24:ed:b3:e1:db:3c:d1:cd:63:cf:fd:28:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 20:30:36 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=1579b0ee93f3c1b0614d1ce57dc666ae4a6cab95fa0bbf1ca7e7bfbd6f7ba361, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f2:c8:4e:3c:65:e6:fc:38:c2:11:75:b6:62:
                    e2:a1:12:64:90:d2:ee:ae:f5:7b:60:6b:52:ce:26:
                    70:0e:b9:c4:7d:76:11:ef:a8:c2:9b:42:6f:0e:44:
                    6f:fe:87:d6:c3:c1:14:57:73:8c:44:ac:2d:47:08:
                    a8:cb:a4:1f:85:5f:15:84:61:b1:72:a3:04:14:88:
                    69:e3:df:b2:59:b8:1b:73:bf:98:9c:b1:c8:1a:57:
                    72:26:20:ab:51:ab:c1:0b:a6:5e:73:91:b0:37:9d:
                    5e:39:0c:b6:dc:3e:58:e9:6e:f3:f5:d3:a5:04:df:
                    fb:2c:a5:79:94:ef:b7:3a:eb:29:7f:08:52:c6:98:
                    2a:9e:a1:8e:ae:9f:13:86:6f:6b:6d:25:a7:b8:86:
                    b6:f5:9e:ec:2b:bc:be:78:b7:37:50:4c:d6:92:a0:
                    37:5b:bf:7a:46:32:c3:c5:21:cb:00:c5:d7:d1:20:
                    3e:c7:74:df:f8:d3:e3:77:56:d6:44:f0:36:d4:c6:
                    d6:20:bd:21:2d:fe:b1:b4:5f:43:d9:67:05:60:4f:
                    2e:1a:27:ce:ca:27:99:bf:45:f8:9e:a5:ae:41:5d:
                    62:8e:d7:7e:44:50:9b:f6:4d:5e:5f:28:22:55:f9:
                    9c:e0:1b:37:fc:60:2f:ae:ec:c6:1c:a0:37:bf:6a:
                    88:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:12:8E:09:FD:14:43:F1:54:19:ED:0F:D7:C8:5E:C0:CE:EE:11:4C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35d8b8e0-8b5e-4f54-933c-eff053d0f3a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:8060::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:88:f7:d7:e8:82:2c:eb:fc:3e:16:37:32:b9:34:ac:07:19:
         3e:be:51:3e:19:d9:06:93:bb:33:00:86:dc:bf:39:87:66:ee:
         b4:6b:76:7c:a8:6e:61:5f:b0:53:3e:95:a8:35:80:cc:ec:e9:
         2f:84:fe:4c:07:da:c9:40:33:e8:08:2b:47:f3:a1:a5:a2:1e:
         d5:63:93:05:6d:a8:24:2a:fb:77:19:2e:6a:15:90:bc:8e:16:
         b2:70:97:3a:ca:49:a7:29:0d:54:3b:4d:45:27:04:25:86:a8:
         98:09:d2:24:7d:42:bc:d5:6f:33:f1:c2:f6:18:0c:33:07:76:
         85:22:ec:34:5e:de:54:df:d8:0f:0c:96:9e:e5:91:8e:d1:82:
         8a:25:b9:2a:22:3e:c5:00:d6:b1:af:80:33:88:7b:8e:f5:c3:
         48:f5:b7:61:2d:eb:ed:27:9f:cb:e8:fb:56:de:a7:f9:ed:76:
         9e:09:91:54:66:4b:70:be:57:62:b4:72:30:1a:8e:11:f4:6a:
         e3:b2:3a:b9:72:a9:39:31:2f:0b:07:1a:d8:b1:82:d8:f5:3e:
         10:4f:be:74:c1:51:4a:20:34:ea:c1:c8:da:2c:67:a1:1b:ca:
         35:f4:62:d5:9e:98:85:e9:36:6e:a6:b2:91:70:6b:e9:21:bd:
         97:8d:bd:e8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----