Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4207af49-7ad9-49ed-ad86-0e3920e6a1de.roa
File:                     4207af49-7ad9-49ed-ad86-0e3920e6a1de.roa (raw, json)
Hash identifier:          f0w9IoEd7setigxC+Kq4HzUsiQ0VLit2SogZbGDvv08=
Subject key identifier:   26:34:E4:C7:4D:CE:63:4E:D7:A8:6C:9A:19:FE:4C:95:9E:EF:60:84
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3A3AE3FAEB5C91D5D82A67B7FCCB9B38D19D4388
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4207af49-7ad9-49ed-ad86-0e3920e6a1de.roa
Signing time:             Mon 06 Oct 2025 15:39:05 +0000
ROA not before:           Mon 06 Oct 2025 15:39:05 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffd:2040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:3a:e3:fa:eb:5c:91:d5:d8:2a:67:b7:fc:cb:9b:38:d1:9d:43:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 15:39:05 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=7d9e0267655362deab3e87b31cd67423419cd69a4220763d18cc4e38eeec4f7c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:09:4a:7a:cb:5f:a1:5b:06:00:64:1e:a5:21:
                    8f:06:46:c4:a1:70:b8:ea:8d:cd:58:ab:52:50:8e:
                    4b:30:92:ff:69:0d:20:f5:c4:92:26:8d:29:2e:26:
                    fc:ea:db:97:d4:f0:7d:6e:3f:bf:1d:9f:c1:a3:1f:
                    13:a2:1b:3d:be:e2:54:c0:1d:36:05:ae:ac:a0:7a:
                    39:03:b3:fb:20:6e:3a:c4:a9:c5:1e:76:64:7f:d6:
                    6d:73:c3:58:d4:31:a8:11:c8:30:75:36:72:55:7d:
                    05:ca:3a:a3:72:c5:0b:83:87:c2:b3:fc:44:7e:8f:
                    44:70:c1:d3:a2:39:be:18:78:9c:8a:d5:f3:3d:67:
                    cb:ef:bd:cc:9e:80:7f:ce:be:64:95:9c:7b:2a:9f:
                    3c:8c:db:18:6b:ca:f8:aa:46:b2:8b:72:62:65:82:
                    d0:2e:72:f4:23:c5:cf:72:7b:46:b8:45:64:8c:2c:
                    08:24:fb:f6:12:f8:e9:31:e5:ca:8c:a3:10:75:5d:
                    69:62:74:ef:b8:f1:03:a7:9b:56:f2:b0:93:e2:c7:
                    cd:f8:af:05:18:92:99:ce:cc:44:12:64:86:ff:c7:
                    34:d3:a7:b4:2d:34:a1:f7:94:16:ea:74:32:28:6a:
                    d0:03:dd:2f:18:e1:da:0a:11:17:d6:6a:3f:76:fd:
                    33:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:34:E4:C7:4D:CE:63:4E:D7:A8:6C:9A:19:FE:4C:95:9E:EF:60:84
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4207af49-7ad9-49ed-ad86-0e3920e6a1de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffd:2040::/48

    Signature Algorithm: sha256WithRSAEncryption
         cc:30:ab:0c:34:7d:fe:48:36:d7:c0:f7:17:a4:ab:5d:36:d4:
         5e:29:4d:70:db:7e:ef:95:ae:fc:7f:91:09:dd:58:0a:49:13:
         86:6e:d2:29:04:eb:29:1e:40:41:16:4d:ec:9f:2b:16:bb:5b:
         24:96:2b:df:7f:b3:7d:de:82:30:5b:db:b8:8f:eb:db:1f:d7:
         f7:63:4b:a5:ef:58:09:26:65:d9:c8:b5:51:b8:46:ea:58:31:
         93:94:7e:d3:d5:d6:9f:30:51:bc:4b:94:8c:4a:5b:0f:76:b4:
         3a:c6:67:ce:6a:f6:3a:de:f7:6d:e4:72:ed:36:55:e6:76:52:
         ac:3a:ff:97:71:1d:cd:e8:3a:ef:4f:9f:85:89:e1:59:45:31:
         ed:cc:57:10:fc:d8:68:76:39:de:41:ad:40:7c:cc:fe:00:90:
         de:25:98:05:93:17:03:1c:a0:a3:38:fe:4f:7f:a8:e5:ad:a1:
         62:f3:4f:8f:0f:f9:5a:f3:f7:74:46:15:00:db:af:70:1b:df:
         64:f6:ba:85:c3:77:c1:29:64:e8:6c:1f:95:ab:76:61:8d:0b:
         d8:56:d3:6a:27:54:c0:c3:b5:76:b1:ea:91:51:0d:c7:94:e6:
         bc:ac:70:95:1c:43:a6:84:c3:23:93:ff:ab:b6:29:9e:2f:54:
         a6:f3:0b:e3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----