Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f007f8f-fbc3-4057-918f-31222a09c4de.roa
File:                     3f007f8f-fbc3-4057-918f-31222a09c4de.roa (raw, json)
Hash identifier:          0neANPwBfE7NoRJ1JJFWte4iBpb0TMWY28svUusBQls=
Subject key identifier:   56:D1:7B:48:E0:51:39:46:AC:24:F4:5C:FE:71:36:F0:A9:56:AF:1B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       673A7408C8F6013212AD1303CF2B1E7101667CA3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f007f8f-fbc3-4057-918f-31222a09c4de.roa
Signing time:             Fri 23 Oct 2026 01:40:38 +0000
ROA not before:           Fri 23 Oct 2026 01:40:38 +0000
ROA not after:            Thu 21 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f18:4000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:3a:74:08:c8:f6:01:32:12:ad:13:03:cf:2b:1e:71:01:66:7c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 23 01:40:38 2026 GMT
            Not After : Jan 21 23:59:59 2027 GMT
        Subject: serialNumber=d6bd73e0552e127eaf94e6d887365628e526a2f021b80da27dc37e3427acfe31, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:12:11:33:a6:7c:2f:1f:11:cf:65:86:83:2b:
                    0d:3e:d7:6d:74:28:ad:1d:a3:dd:a6:8b:b8:2d:c9:
                    5a:45:2e:0a:98:e7:ab:5d:bb:dd:7c:c4:89:a5:17:
                    0e:53:f6:49:d5:69:47:9e:49:84:da:68:2e:4d:03:
                    75:c6:a8:75:b6:9b:0b:8e:fa:27:74:42:ac:36:a8:
                    06:43:c4:34:6a:57:8f:ce:55:d4:94:c4:1c:9d:50:
                    5f:21:c8:96:2a:4d:5b:a9:2b:74:1c:b8:ce:dd:cc:
                    db:98:bf:84:80:06:95:6d:6c:84:46:d2:bc:75:c8:
                    cd:1c:c6:44:65:cf:07:d4:44:b6:17:e5:77:30:da:
                    c4:2a:8d:83:38:92:38:d1:b4:38:fa:91:c9:de:0b:
                    f4:65:95:57:32:6b:45:9a:b1:f4:a7:73:ff:90:04:
                    61:6a:37:b0:2f:cf:8c:aa:3c:aa:ea:18:db:2d:e0:
                    1a:80:ca:b7:c0:82:25:b8:bd:bd:e1:bd:43:21:9b:
                    d9:55:1c:61:80:b8:6b:71:00:e0:0b:fd:cb:34:97:
                    71:5d:fc:b5:5c:92:9e:35:07:44:e3:d7:44:5d:33:
                    61:6e:b2:51:86:03:1f:46:b9:86:be:cb:43:01:b2:
                    08:5e:b9:0c:88:02:2b:fa:81:7a:51:31:78:c8:13:
                    ea:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D1:7B:48:E0:51:39:46:AC:24:F4:5C:FE:71:36:F0:A9:56:AF:1B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f007f8f-fbc3-4057-918f-31222a09c4de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f18:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         cc:04:33:b2:9e:f4:d1:15:50:09:03:80:a5:56:cd:04:7c:08:
         7b:ce:4f:79:65:ea:d4:8a:bc:f6:ab:b1:e8:e0:ce:3b:a0:c0:
         b4:08:97:43:c3:36:37:05:c3:1a:db:08:38:d1:63:b0:70:71:
         80:e3:e8:8e:1d:ac:31:fb:1d:eb:4b:26:67:80:9f:12:16:c9:
         30:78:9f:de:d0:44:87:e0:5f:b4:c1:ef:bf:43:04:92:0e:3b:
         9d:c7:0f:59:7b:19:96:68:3e:df:0a:24:51:40:0e:83:fc:4e:
         dd:5f:b7:cd:28:33:95:d4:1a:ea:8f:bb:b2:dd:c9:44:3d:36:
         8a:78:a5:8c:49:fd:bc:66:7c:e6:5b:59:42:e6:74:30:21:a3:
         61:1b:e7:44:61:11:6f:9f:78:a7:d8:5b:69:bc:1e:af:49:e0:
         1a:7f:61:3c:ec:b3:ad:a2:cc:8c:3d:03:fc:3d:db:1c:72:d1:
         f3:f5:3d:74:5b:3e:c4:34:82:38:09:80:d2:ba:c3:78:ef:3e:
         72:b0:e1:e5:88:da:db:8c:e6:ec:a0:bb:f0:80:97:c6:85:d2:
         03:80:3a:2a:c7:e9:59:57:cc:f2:f2:d3:ce:c0:0d:3f:0c:6d:
         53:77:e9:8a:7c:98:63:d8:cd:f3:e3:a6:6a:a8:01:33:28:66:
         53:6d:b5:6d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----