Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/497c9f23-488b-464c-a6a0-2f9cf9d7daeb.roa
File:                     497c9f23-488b-464c-a6a0-2f9cf9d7daeb.roa (raw, json)
Hash identifier:          LMx3oY6UwA/zhFYkOSJ6ZoVhYVyZnMQG7Cs+CP0XuLQ=
Subject key identifier:   4B:7D:32:7B:FE:05:E0:C1:73:7F:FC:40:9D:AB:9A:8D:A4:0D:14:79
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1206F51578B81648B405B4C1D6488F690046552E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/497c9f23-488b-464c-a6a0-2f9cf9d7daeb.roa
Signing time:             Sat 18 Oct 2025 05:00:04 +0000
ROA not before:           Sat 18 Oct 2025 05:00:04 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff2:c080::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:06:f5:15:78:b8:16:48:b4:05:b4:c1:d6:48:8f:69:00:46:55:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 05:00:04 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=6a635cde7d9ec982cffa28666ef0d0775d8ea4403f52a2408e057ecdcea02f80, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7c:08:c1:df:75:68:0a:fd:89:87:5e:91:8a:
                    69:af:33:c2:20:4e:bc:e3:46:8c:b9:54:a5:bd:ac:
                    0c:b5:f5:00:fe:51:e9:3d:3a:39:01:45:de:32:f3:
                    86:3e:d7:25:19:08:15:92:22:1f:b0:75:e3:7e:6e:
                    9c:34:08:4b:e3:ee:7d:dd:41:9f:6e:03:5a:dc:b2:
                    e5:78:47:42:86:92:de:04:c4:0c:14:3f:5d:cc:72:
                    73:86:e9:89:2b:8d:ed:a3:ac:ae:fa:bf:47:7f:33:
                    62:2f:b3:e7:ff:95:6e:29:f7:e7:22:98:9e:72:d5:
                    3d:7c:74:57:d3:63:36:f3:f1:97:aa:09:61:69:ae:
                    d6:bb:b9:4a:74:b7:8f:95:97:ec:72:de:e0:a1:c5:
                    f0:3d:fb:36:ba:17:db:31:24:fd:70:78:43:31:1f:
                    82:52:b7:b8:66:1e:47:a8:66:dc:b4:84:e0:66:1f:
                    d6:e2:46:71:e7:52:66:15:5b:6c:21:af:5a:63:a6:
                    cf:5c:e2:27:54:de:87:4b:f2:37:71:25:5e:bd:c5:
                    6c:e7:07:1b:09:6e:30:aa:ee:69:5d:79:a9:10:26:
                    ab:13:af:c5:55:b7:2c:43:60:c1:fc:7c:8a:2e:fa:
                    2b:e6:0a:69:fc:06:08:27:65:3b:fd:5f:f8:fd:6c:
                    f8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:7D:32:7B:FE:05:E0:C1:73:7F:FC:40:9D:AB:9A:8D:A4:0D:14:79
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/497c9f23-488b-464c-a6a0-2f9cf9d7daeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:c080::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:16:a2:8c:46:ae:af:e8:e3:67:18:80:07:7c:cf:61:71:c1:
         3b:d8:c1:ff:3a:60:8e:2b:ff:86:e1:c2:5e:32:1e:50:4e:3d:
         c7:a7:a5:d0:7b:77:9e:42:d8:f4:6e:c6:4e:35:66:4e:87:be:
         a7:3a:e8:fe:e2:c4:90:19:d2:0c:1f:f4:97:9d:98:97:a6:14:
         c4:be:f8:61:22:ea:8f:ef:b5:fa:a5:59:09:f5:de:b6:d0:71:
         2b:f8:b8:31:47:4e:b0:78:d5:1d:1a:33:ee:5c:98:23:81:11:
         8c:d5:8e:9a:a0:ab:af:90:0e:77:6e:a2:b1:7c:4b:0e:f1:43:
         eb:60:19:60:ee:e0:b4:67:98:fc:2e:42:6a:0c:26:4e:ac:78:
         0a:2b:45:fd:2f:67:c0:dc:bd:a1:8d:4f:63:08:36:34:1d:a5:
         85:1b:ec:af:46:22:c9:42:1a:a4:99:f4:bd:ee:d8:3e:dd:b5:
         4f:8f:14:b3:62:fc:d6:44:c5:96:ed:85:fe:47:b6:60:f4:fe:
         c1:c9:8a:9c:20:9a:75:f0:38:ba:a7:00:f9:be:4f:90:83:1b:
         5a:85:82:7a:ae:83:3c:de:99:8c:fe:90:0e:2f:59:0c:da:1d:
         ce:28:50:2b:d6:3b:a9:fb:56:18:61:21:15:53:5f:d4:57:b4:
         84:62:50:8f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----