Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ececb56-9d12-4215-aa1e-a4b9ad6e9a77.roa
File:                     5ececb56-9d12-4215-aa1e-a4b9ad6e9a77.roa (raw, json)
Hash identifier:          /lGooeDqidgn2TeIizUuWWc05UK+YmztsOjlt/Ka/3Y=
Subject key identifier:   93:31:14:5A:93:7E:D0:BF:35:5F:16:94:3D:47:B0:42:41:D7:77:4E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4FCDA65D76DEC01524135603E73870598A6FFE46
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ececb56-9d12-4215-aa1e-a4b9ad6e9a77.roa
Signing time:             Sat 18 Oct 2025 00:10:44 +0000
ROA not before:           Sat 18 Oct 2025 00:10:44 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f21:4000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:cd:a6:5d:76:de:c0:15:24:13:56:03:e7:38:70:59:8a:6f:fe:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 00:10:44 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=5ae748a62bd08d59bdc5a7fad0b635a4a1156efda1ae890a68eb2d2632bacb91, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:44:24:1e:eb:45:7a:9c:62:ef:55:7a:7b:b8:
                    18:d1:6d:80:58:1c:97:eb:63:fd:61:df:41:3e:8b:
                    e2:98:01:84:0b:05:a0:62:c7:60:16:27:4b:70:62:
                    a0:0b:f0:1b:77:cb:80:ee:4d:e5:02:99:2e:a5:72:
                    be:26:57:27:ed:c5:96:68:d3:26:86:a7:6e:4e:50:
                    c3:55:de:ac:33:7a:ea:67:f9:a2:53:ca:00:19:98:
                    66:fa:fa:72:89:4d:e9:3a:45:c2:11:60:2e:c7:4f:
                    67:9a:c5:8f:5a:d5:11:02:e0:83:a0:5d:8e:fb:c5:
                    ab:4b:7c:83:a3:2c:e6:37:86:a5:50:04:f2:62:9d:
                    8a:cc:8c:72:dc:49:ac:bd:be:7b:ba:c8:55:3f:c5:
                    34:30:48:74:37:56:21:e8:f3:6b:ef:34:e8:cd:3c:
                    f6:25:12:7d:b9:6d:d6:2c:29:ea:23:ba:0b:93:b7:
                    7f:86:50:e7:88:c0:97:74:b1:4c:c2:89:6f:f2:be:
                    65:05:9d:aa:d9:64:59:e5:81:94:2d:b2:85:83:26:
                    03:ab:17:21:d1:cd:cc:cb:d7:54:8e:04:b6:ab:c6:
                    18:28:e7:f0:c7:6e:74:e3:09:3e:26:05:15:86:eb:
                    0e:90:97:c9:b9:e2:93:16:b5:22:3a:a0:32:4e:e2:
                    28:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:31:14:5A:93:7E:D0:BF:35:5F:16:94:3D:47:B0:42:41:D7:77:4E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ececb56-9d12-4215-aa1e-a4b9ad6e9a77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f21:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ab:05:a6:bf:37:5b:93:2d:ed:4f:7c:ee:56:1b:a6:39:a6:b8:
         eb:d8:58:ce:7c:e6:c6:1c:8f:ec:51:cb:14:65:34:a4:fc:b5:
         89:56:fc:96:1c:b4:43:74:09:b4:f8:2f:9a:18:e0:bb:fc:6c:
         1c:6b:ed:8d:23:06:7a:f6:09:ce:73:ee:32:69:fa:5c:98:06:
         93:e3:3d:c8:ec:76:ad:9e:f2:6d:ee:b4:ae:5d:08:fd:bb:fe:
         13:fa:9e:7d:d1:d6:98:89:d8:63:ba:c9:74:a2:a0:70:ca:14:
         03:25:25:c8:11:ff:d7:16:33:14:c6:b8:18:66:d7:1f:fc:7c:
         8c:78:38:83:a7:f3:ab:c7:5b:28:83:0b:e2:25:5f:3f:a5:11:
         a1:85:3a:c1:67:c4:48:f2:9c:d2:99:63:b3:eb:e7:50:24:0c:
         e3:4c:bc:c4:26:76:2d:f8:ba:2e:50:06:f0:12:ed:33:0e:e1:
         73:5e:11:aa:37:a6:6b:95:b6:37:55:b5:21:8f:b9:3e:4e:15:
         c9:e3:36:43:73:3c:cc:63:62:57:f3:78:cd:81:33:e7:cd:a5:
         30:2d:79:96:cc:2f:9d:e8:c5:8d:98:33:ac:cb:09:e6:78:d8:
         5c:ff:13:8c:56:ce:e6:59:0e:67:ab:28:78:dd:2f:7b:1b:f9:
         4c:54:c0:83
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----