Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60b87d32-0a4f-4766-9763-0e165ad166bb.roa
File:                     60b87d32-0a4f-4766-9763-0e165ad166bb.roa (raw, json)
Hash identifier:          4fatoEq6dSyUDGHz7mrb6sZaVYzZ35zOWiudWBqOq30=
Subject key identifier:   C3:CC:CA:D0:8B:06:74:CA:65:52:EC:4D:F9:4F:6D:72:0F:8D:D4:E2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6358D9AF9275A0CB65AEB1E4C0A2613050E0E198
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60b87d32-0a4f-4766-9763-0e165ad166bb.roa
Signing time:             Sun 19 Oct 2025 00:20:48 +0000
ROA not before:           Sun 19 Oct 2025 00:20:48 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ff3:8060::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:58:d9:af:92:75:a0:cb:65:ae:b1:e4:c0:a2:61:30:50:e0:e1:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 00:20:48 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=ae3390de6a1cbd8601c663dc7be2e7a5418c3da58c22cd741c2ba4b1ae8fda1a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7e:d1:f7:e9:31:06:2d:27:54:6d:c7:8b:99:
                    5d:41:3b:5f:18:4b:4b:df:5b:56:56:ec:f2:f7:11:
                    fa:16:5f:d0:bf:89:6b:d5:92:47:e9:fe:25:37:3b:
                    4a:d1:6b:dc:32:a5:ab:1e:5f:ff:60:1e:61:71:1d:
                    35:50:07:f2:69:58:a3:1e:93:8e:78:c8:5d:05:77:
                    20:0a:13:14:86:d4:96:55:7d:ad:8f:36:6a:f2:f7:
                    6c:05:d1:19:62:de:28:2d:f0:f2:e1:23:7c:1d:fb:
                    de:50:0c:8b:d5:7e:49:ab:90:4f:ea:50:62:a7:a6:
                    4d:94:6e:44:b0:18:7b:0a:11:61:11:f0:1f:82:ec:
                    b6:4c:b3:2b:93:e6:d6:15:5d:2d:eb:fc:17:16:e8:
                    cf:e2:cf:ff:c5:5c:cb:56:2c:d3:02:bc:18:36:a4:
                    24:43:4a:2f:ff:f1:4c:ab:ad:0e:df:06:92:ae:b2:
                    ee:e2:6a:b4:81:54:d5:7a:4e:37:19:58:b7:fc:de:
                    c7:6f:03:4c:23:54:b8:0c:03:54:8f:a7:73:dd:f7:
                    2c:bd:78:76:7c:59:ba:8a:13:34:97:fb:db:bd:cb:
                    da:ab:07:54:fd:58:10:4e:22:d7:99:5c:e8:6c:d3:
                    78:17:f0:72:02:d8:7c:31:76:88:2b:36:95:f4:5f:
                    1e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CC:CA:D0:8B:06:74:CA:65:52:EC:4D:F9:4F:6D:72:0F:8D:D4:E2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60b87d32-0a4f-4766-9763-0e165ad166bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:8060::/46

    Signature Algorithm: sha256WithRSAEncryption
         d7:c3:cf:d8:eb:cd:32:5b:8b:67:2b:8a:ce:0e:18:69:bc:80:
         ac:1b:0c:d4:cc:b2:d5:0f:8a:4a:c7:d1:76:70:db:6b:fd:b0:
         de:8b:f3:f2:cd:9a:bd:7c:2d:84:c8:13:9a:0f:49:34:56:91:
         97:60:c8:cc:9c:b0:98:d0:65:dc:7d:54:03:7e:05:27:30:6b:
         a4:4d:ec:84:88:00:f3:b1:c4:b6:cf:9c:2c:5f:37:ec:89:e6:
         40:8a:3f:d0:b5:f4:c0:d3:43:1f:90:31:be:ac:6a:77:be:d1:
         c0:69:62:2f:a7:68:74:6a:a9:ed:aa:f5:bb:13:ab:75:f6:cf:
         a8:27:c8:ac:33:14:76:60:d8:49:7a:3f:a8:ec:2e:6e:40:7b:
         b7:36:eb:96:a1:5b:ee:fd:20:41:6f:ae:60:bc:87:21:20:8a:
         72:3c:d8:1a:9f:0d:c6:dd:b4:97:22:4d:db:c9:17:ac:77:a1:
         3b:81:13:b5:6f:3f:38:cc:f0:6d:ab:f1:3d:18:56:8c:98:08:
         de:74:31:0e:31:54:44:aa:d2:38:a9:6b:fd:2e:74:bb:f1:21:
         2c:7e:f3:17:8c:2a:c2:6b:eb:ed:04:0d:ed:6c:b4:fb:b8:11:
         f1:41:d7:64:98:9d:23:b8:86:c7:0d:d9:b0:04:7e:63:47:ac:
         0d:ef:50:08
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----