Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45f5c9b9-6c4d-4a58-8ece-7eda954cdf74.roa
File:                     45f5c9b9-6c4d-4a58-8ece-7eda954cdf74.roa (raw, json)
Hash identifier:          CTr8vJmmdqYXLibT4hMZQaBx9AWVsEgrXai9XZLPcTA=
Subject key identifier:   0A:16:0B:BC:53:E6:DA:36:A3:35:C8:42:F9:F9:03:57:74:9E:AA:7E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       28439F84B09B3EBCA4CC9420DBC4C50C16823BE1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45f5c9b9-6c4d-4a58-8ece-7eda954cdf74.roa
Signing time:             Tue 14 Oct 2025 16:01:34 +0000
ROA not before:           Tue 14 Oct 2025 16:01:34 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f69:8000::/39 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:43:9f:84:b0:9b:3e:bc:a4:cc:94:20:db:c4:c5:0c:16:82:3b:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 16:01:34 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=0abcd85d0c8f07683ecef04b58319a4f782b3e1f865bf547aa911e10ae84a04e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:67:1a:da:e1:88:5f:27:2e:98:80:34:b0:e4:
                    63:ba:38:f3:6c:f3:09:0c:b0:3b:56:e9:d1:32:ed:
                    d6:f4:52:f2:23:79:84:3e:66:d4:89:55:2c:14:a3:
                    ac:38:7f:20:19:3b:19:af:59:29:72:08:3f:e5:0b:
                    4d:ba:86:c4:64:b9:25:96:35:d3:d4:f7:59:52:cc:
                    8e:c6:47:a4:a3:33:d6:65:c4:30:4b:93:3e:28:fd:
                    b2:43:71:85:ac:04:fc:14:5b:36:f3:11:43:b5:d7:
                    82:67:bd:8d:28:67:49:29:ea:3e:b3:c7:6a:99:5a:
                    e0:86:5b:02:40:70:56:05:53:a3:b1:9f:c9:3c:bc:
                    e1:21:43:d3:72:f8:62:d4:56:a3:9b:bf:1c:68:28:
                    a9:d4:b4:39:80:03:0b:c9:1b:ca:db:ec:d2:23:b6:
                    e0:7f:3c:e3:cb:71:0d:27:b2:3e:f1:d1:76:25:96:
                    83:3a:c3:c6:ac:9d:98:01:34:a2:d8:2d:7d:a5:6d:
                    51:d1:1b:7a:41:03:19:3e:5b:1c:4b:1b:32:49:5f:
                    67:b8:65:ec:5d:43:06:29:98:1d:a5:a8:c9:d6:2f:
                    0b:f3:cd:1c:47:93:96:22:96:6f:74:b4:57:d7:72:
                    fe:c8:bc:97:22:1f:80:77:e6:c8:41:b7:a1:9a:ad:
                    66:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:16:0B:BC:53:E6:DA:36:A3:35:C8:42:F9:F9:03:57:74:9E:AA:7E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45f5c9b9-6c4d-4a58-8ece-7eda954cdf74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f69:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         a6:e7:0e:f8:47:4a:de:08:3c:7f:f3:97:82:f1:b6:5a:24:cd:
         04:09:6e:25:c1:df:c8:09:89:83:b6:62:79:29:a9:25:ce:e4:
         0e:6e:6e:77:8b:84:58:f8:f1:31:18:39:d2:69:8c:76:0c:1b:
         bb:e3:d8:f8:34:c2:b0:05:1e:87:9e:58:dd:01:85:a1:8d:da:
         2a:cd:1c:96:db:ee:f7:98:e4:72:6d:29:b8:7c:9d:73:90:6d:
         3f:cb:1b:f8:6f:b6:3f:9f:95:59:2f:c5:33:74:e5:13:2d:b5:
         84:45:32:73:7a:83:ef:67:6a:6b:67:6f:85:10:62:b5:f7:58:
         66:df:ae:46:c9:92:61:76:80:1c:dd:41:da:34:b7:db:0d:02:
         4a:94:88:26:63:f2:f5:f3:e1:e9:bb:16:9a:5f:09:a0:5e:41:
         96:bf:a4:d1:d1:4a:21:b8:99:75:29:1f:d6:48:92:e6:5b:bb:
         8b:74:97:db:e3:e2:1e:6b:d1:9a:e6:e5:f3:fb:c8:27:25:57:
         8b:03:a1:f4:d2:cc:e5:4b:a2:5f:f1:9b:71:44:c4:c4:bc:ab:
         6e:7b:c5:0d:2d:1b:10:5d:bc:fc:59:76:fe:b2:73:06:1b:5b:
         26:b0:39:a9:43:a2:a7:47:93:02:5d:62:2a:be:0f:71:a4:5f:
         28:49:a6:f2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----