Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/390a9ddd-ca1d-4e54-a3ea-f0be32b32d11.roa
File:                     390a9ddd-ca1d-4e54-a3ea-f0be32b32d11.roa (raw, json)
Hash identifier:          VYRiARXjQzYQAFWDGM3BM6yIlWJ3DlOxVYLbrXAmxB4=
Subject key identifier:   25:8A:88:41:C2:CF:C2:AD:21:97:53:48:79:5D:26:74:D9:AE:0E:A8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4DD081054FEEA794887BE8145035FCED1B3047CA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/390a9ddd-ca1d-4e54-a3ea-f0be32b32d11.roa
Signing time:             Fri 17 Oct 2025 21:40:13 +0000
ROA not before:           Fri 17 Oct 2025 21:40:13 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:8120::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d0:81:05:4f:ee:a7:94:88:7b:e8:14:50:35:fc:ed:1b:30:47:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 21:40:13 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=730e63c259a099da9d8a97035fef22a4087ba5e3116e816d0d0a3841466dfedf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dc:56:5f:67:c8:10:06:ab:ab:29:32:0d:22:
                    ca:48:90:26:cf:bf:bf:c2:55:c0:e4:79:80:12:59:
                    30:86:97:01:82:48:21:49:ca:be:4a:a1:9b:a1:81:
                    41:36:1d:b9:66:c0:40:0c:b0:c4:2c:a6:4a:c0:bc:
                    7d:ad:de:7a:a9:99:b5:68:87:49:5f:39:2d:35:57:
                    ab:90:27:2c:8d:24:a5:c7:dd:0c:1c:4a:97:10:ca:
                    50:07:0a:25:97:51:98:71:92:a7:c7:da:24:f6:00:
                    13:4a:83:1a:ca:55:53:84:01:38:cf:84:7f:0b:1e:
                    9b:e7:08:f5:91:73:85:ee:58:c7:e2:71:05:2e:15:
                    72:00:58:25:a8:06:28:cc:4e:f1:ad:cf:17:1d:4d:
                    fa:7d:ad:eb:b8:df:ce:9f:78:ce:0e:3a:7b:fb:75:
                    e5:4a:00:f5:c5:ae:3a:e7:97:71:a8:90:99:77:80:
                    23:1b:45:62:85:f8:9e:bd:69:cf:aa:ab:1f:63:13:
                    c9:06:e8:38:6f:cb:c2:ec:f2:aa:73:b3:98:6f:e4:
                    e6:e5:8d:92:fe:17:68:b6:2c:06:1b:9c:51:a0:dc:
                    05:28:0f:4b:f3:57:28:c6:cd:d9:50:69:96:ab:16:
                    fb:e2:21:e1:2c:fe:81:67:61:1b:2e:91:10:22:7c:
                    ea:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:8A:88:41:C2:CF:C2:AD:21:97:53:48:79:5D:26:74:D9:AE:0E:A8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/390a9ddd-ca1d-4e54-a3ea-f0be32b32d11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:8120::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:5a:b1:d4:9b:67:5f:f2:ff:39:81:cf:1b:a0:ba:3d:bd:88:
         63:04:d2:a8:e0:5b:bc:c2:9a:0f:ad:60:fd:2e:48:ae:c1:4b:
         e0:37:37:37:7c:c1:98:73:c7:af:a5:05:3e:69:4c:ec:73:6e:
         39:d8:ac:fd:77:ef:17:ee:95:84:2b:a6:63:29:b2:6b:c3:e5:
         29:2c:49:82:c0:0a:22:de:4f:8a:eb:3b:3a:03:73:16:69:8a:
         4a:67:3f:41:0e:e1:55:da:d8:aa:fd:1e:7b:fd:38:6a:fa:cb:
         bc:27:4c:98:18:1c:85:74:e6:aa:d9:75:c2:9f:ed:e6:66:48:
         20:2e:03:b1:d8:cb:46:2e:9c:37:88:34:2b:13:3c:09:04:19:
         42:bf:80:3f:f5:16:7f:1e:db:64:d7:07:48:e4:7a:09:8b:54:
         a1:cc:71:0c:57:1d:a6:1d:7b:e2:e5:86:6c:96:b3:63:87:4f:
         c1:ee:9e:e7:11:b2:c8:f4:00:7f:1d:d5:cb:54:bf:ba:a6:8e:
         4d:c0:40:df:9e:2b:de:33:db:2c:d2:b8:18:1a:a7:77:8e:e7:
         1f:68:81:c4:5c:f1:04:83:d7:34:73:88:2f:ab:da:dd:75:99:
         d6:9c:ee:ea:9e:99:2c:70:39:f8:a6:a1:a9:6e:79:b5:eb:60:
         86:de:3a:33
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----