Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d516efa-ce98-4404-a4cd-dcf95485dc97.roa
File:                     4d516efa-ce98-4404-a4cd-dcf95485dc97.roa (raw, json)
Hash identifier:          OsKFBtnZZVtp3fBAduq330JPVSe9tOi9HwCOe5k4hkc=
Subject key identifier:   EB:0B:B7:6A:05:B2:10:19:DE:78:DB:64:54:38:30:2D:8B:6B:10:FA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       697C3442A62755A0329D81A5977227814E144915
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d516efa-ce98-4404-a4cd-dcf95485dc97.roa
Signing time:             Fri 17 Oct 2025 20:51:29 +0000
ROA not before:           Fri 17 Oct 2025 20:51:29 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff2:e000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:7c:34:42:a6:27:55:a0:32:9d:81:a5:97:72:27:81:4e:14:49:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 20:51:29 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=67d0b325cbeddb652545fd138f509fa60c705c445b4f590beb7f7f50ad1d2a6a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:42:f0:3e:10:d0:4e:e2:84:cd:25:55:22:f5:
                    25:5d:f1:7f:63:e6:fe:9f:33:d2:50:3d:8b:a2:27:
                    9c:57:2b:b4:a5:50:34:b2:cd:f1:75:26:60:4e:56:
                    53:19:ff:bb:02:c0:af:4c:33:fe:5d:7a:53:b7:8f:
                    00:52:b3:da:08:2d:91:69:96:16:54:c0:cf:a7:be:
                    42:f3:a1:e9:17:5f:67:5e:8e:60:18:1d:1d:45:96:
                    39:5d:6d:a4:ed:c2:f2:d2:1c:c5:b2:e5:0e:4b:bf:
                    5e:cc:87:dd:5a:d0:b4:17:9d:7d:c1:a5:f1:68:70:
                    02:0c:92:76:ac:a9:f4:ad:0e:4b:71:0f:96:ec:a4:
                    c8:7a:1a:66:73:2e:ad:ef:a3:0c:a4:f0:75:61:09:
                    9d:f9:e4:35:ea:49:55:a7:2e:4a:2b:24:93:e9:54:
                    6a:e0:8a:3d:cf:f6:32:fc:95:9a:a9:b1:74:8d:b3:
                    ce:39:45:94:9c:02:ad:6e:7a:1c:b2:88:57:a4:99:
                    bd:cf:b8:bb:2b:ee:56:35:b7:65:29:d3:bd:db:9e:
                    75:06:e5:1a:58:b9:eb:0b:9b:de:9d:27:39:77:8c:
                    cd:2f:20:a0:12:63:72:68:d1:84:90:ab:81:4e:d8:
                    4c:b0:d3:0d:d2:d2:3c:fc:d8:08:5b:d4:77:f6:ae:
                    f5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0B:B7:6A:05:B2:10:19:DE:78:DB:64:54:38:30:2D:8B:6B:10:FA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d516efa-ce98-4404-a4cd-dcf95485dc97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         c9:aa:f0:24:f8:58:c6:db:e5:bd:23:b9:2d:c1:19:70:22:02:
         a0:6f:75:81:73:97:16:73:87:c3:6b:1f:0a:3c:f8:90:05:ad:
         f2:ab:7a:e3:2c:c0:96:76:87:08:d5:e5:2f:cc:93:7a:56:79:
         15:f7:15:46:fe:0e:5f:01:12:7b:51:5d:f7:04:a5:01:fc:fb:
         28:b3:89:1f:64:73:9f:87:cc:58:e5:36:c9:f3:76:61:fb:60:
         88:2e:03:93:e3:e3:c4:e1:6a:8f:f7:5e:e0:f5:10:9e:13:b4:
         59:55:49:64:51:00:b3:ff:9e:75:82:bc:c0:1b:68:16:ec:e6:
         2b:77:70:de:f5:5f:cc:96:fc:9d:a7:f4:ea:53:e2:ee:19:bf:
         a3:e9:a3:b1:d6:98:fd:2b:13:f4:e9:97:a5:82:81:8b:80:2d:
         c4:f3:f8:6a:a9:9e:76:0a:8e:e7:73:f8:ed:39:8a:d1:2c:82:
         9e:da:cd:6c:b8:6d:08:3c:e1:b2:39:d3:e2:a2:fe:ad:e7:d8:
         89:8e:4d:ac:a2:a6:fc:f4:20:dc:6f:b2:4a:4e:50:62:41:c6:
         88:ab:4a:15:50:e2:d6:a1:4f:e4:43:f7:8d:e0:1f:bf:59:17:
         70:83:81:af:64:ee:52:de:0e:1a:bf:2f:ea:48:84:5d:00:0e:
         6c:8b:54:ca
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----