Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/429a2825-6541-483f-a805-1faa5a6939bf.roa
File:                     429a2825-6541-483f-a805-1faa5a6939bf.roa (raw, json)
Hash identifier:          XDOvF2FxUCEng0+Lyn9OuvVdWsPSVk5ud5E9sN5zl1g=
Subject key identifier:   16:0C:AD:AD:C0:B3:89:B6:DC:1B:D2:88:E0:B2:B4:49:D5:40:27:A1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       02619197BA7A894B354AA4B6877B97DE233B61E8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/429a2825-6541-483f-a805-1faa5a6939bf.roa
Signing time:             Sat 18 Oct 2025 04:11:43 +0000
ROA not before:           Sat 18 Oct 2025 04:11:43 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f14:c800::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:61:91:97:ba:7a:89:4b:35:4a:a4:b6:87:7b:97:de:23:3b:61:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 04:11:43 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=4df0642441edd8bde6f24a414d3066f51e138bffbcb5163a2b14aba962c944d4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:be:4b:88:d7:61:4c:d3:db:7a:51:f8:9b:05:
                    cb:8a:1a:93:1c:0e:b3:e7:11:91:cb:ee:c9:e3:6d:
                    7f:61:e3:4a:12:d7:3c:ab:af:a8:67:ec:ab:56:a0:
                    ff:b7:09:30:e8:c0:43:a4:be:35:65:ed:70:54:d3:
                    ff:5f:d2:c0:ab:4b:50:77:d5:06:1d:b7:02:06:47:
                    9d:ef:c4:94:18:25:cf:ef:39:0f:f6:f6:b1:7c:a0:
                    72:59:ce:d8:c9:cb:c5:1f:8a:92:23:2f:18:eb:b1:
                    e8:43:f9:f2:10:1a:67:78:9c:d0:3d:37:78:24:e1:
                    9c:3c:1c:10:46:24:83:e0:b2:89:59:4b:0b:ae:15:
                    d2:63:6e:18:9e:8e:bb:73:64:6b:f2:52:03:1d:c7:
                    66:20:e1:9a:25:db:32:3e:29:84:35:05:12:71:86:
                    bb:28:3d:28:39:9e:52:51:ee:ae:53:8c:cb:4a:a2:
                    b5:11:aa:f3:4b:33:91:db:20:54:19:5e:0b:d4:1f:
                    ab:c7:2d:fd:3f:42:f1:4f:99:dd:5d:22:38:ba:a3:
                    07:e0:6c:fa:06:0e:46:b3:42:7f:12:8b:6c:0b:f6:
                    e3:31:57:da:96:4a:f1:95:c6:2b:d7:c8:52:77:27:
                    83:27:85:06:bc:20:fe:5d:5f:b2:ff:b9:b3:78:c5:
                    ee:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0C:AD:AD:C0:B3:89:B6:DC:1B:D2:88:E0:B2:B4:49:D5:40:27:A1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/429a2825-6541-483f-a805-1faa5a6939bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f14:c800::/37

    Signature Algorithm: sha256WithRSAEncryption
         d5:09:7c:a4:fb:8d:4a:98:03:26:09:ab:d3:05:3e:1a:99:b1:
         54:80:1c:6f:e5:01:c2:e2:74:6f:8b:48:7f:e7:9b:fa:36:e2:
         bb:56:b2:22:f8:f0:b1:f0:c9:1c:af:f7:27:00:a1:78:53:d7:
         59:87:4e:fe:6a:93:b0:48:35:6d:d4:ca:80:78:e5:c0:3c:c2:
         86:cf:0e:4f:4b:2e:de:56:55:25:1e:48:ae:72:7c:e2:2c:f2:
         7a:67:32:6f:82:4f:49:b1:f5:cd:12:48:0a:a8:a6:66:d9:1d:
         fe:69:e8:92:aa:e3:0a:16:59:b1:70:04:9c:36:3d:fa:b5:57:
         4e:3b:06:0a:5e:93:1d:4b:8a:0c:92:0c:cf:55:dd:c3:5b:8f:
         91:d0:7f:16:3c:d1:67:3a:dc:fb:33:9a:09:de:91:72:75:1d:
         c4:31:6b:30:5e:66:a6:bb:2d:3d:05:2a:e1:2f:8e:10:32:5d:
         bc:22:8d:d9:bd:a8:da:08:3f:57:95:87:65:20:e8:8f:e8:d9:
         48:91:80:56:ed:3e:c2:b6:c3:91:44:c8:88:0c:b7:7c:fb:f8:
         57:ec:2c:f4:50:b0:34:32:fa:56:f4:1f:5d:aa:47:72:83:76:
         a4:71:0f:18:1c:a7:cb:0b:e4:b8:21:11:51:01:bd:64:6e:d5:
         19:d2:61:f2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----