Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62617ace-6d38-48b5-9b72-d18ee055c2fa.roa
File:                     62617ace-6d38-48b5-9b72-d18ee055c2fa.roa (raw, json)
Hash identifier:          D6AR3psY5cnRRO9bNATZFCr7xAosLO7HsR4Z1tzk5Gg=
Subject key identifier:   83:55:CF:C5:51:92:CA:18:54:1D:67:CF:90:8B:50:1C:9A:4D:1F:E2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       25EB693E4CE5961FB0429296DE19A02F4B41D892
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62617ace-6d38-48b5-9b72-d18ee055c2fa.roa
Signing time:             Tue 07 Oct 2025 00:42:03 +0000
ROA not before:           Tue 07 Oct 2025 00:42:03 +0000
ROA not after:            Tue 11 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ff4:a400::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:eb:69:3e:4c:e5:96:1f:b0:42:92:96:de:19:a0:2f:4b:41:d8:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  7 00:42:03 2025 GMT
            Not After : Nov 11 23:59:59 2025 GMT
        Subject: serialNumber=a85a5fbf19530248db861a63e3a334650cc128033a6b4aa002dd8fc46feaa4bb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4d:26:2f:0c:fa:68:ee:c1:21:44:61:0f:3f:
                    68:d6:25:dd:1d:45:70:82:ce:b4:f1:c2:74:9e:72:
                    48:db:a9:a4:f7:5d:8a:95:c6:ce:c1:31:68:a9:4f:
                    6e:25:95:c9:d2:70:fe:66:0b:e1:1e:74:91:a6:a7:
                    fe:3b:57:89:91:8e:51:de:60:20:d2:67:4f:a9:f8:
                    07:aa:52:cc:51:31:5b:cc:97:fc:87:02:34:d4:17:
                    e2:90:f6:c9:7a:75:7e:45:dd:17:47:f6:f6:b4:e7:
                    8c:fa:fd:76:5b:27:f1:91:7d:5a:a2:31:7e:e7:8f:
                    4f:88:a8:3d:cc:ab:37:91:33:36:9e:aa:4f:60:c5:
                    5c:03:37:05:e2:ed:d6:1d:16:b3:07:99:9a:19:0a:
                    e9:19:18:db:2b:61:bc:67:8a:a2:55:75:42:c0:c4:
                    7c:6a:3a:9b:64:72:c6:7a:3d:a8:15:57:7d:e0:b0:
                    28:ec:07:f7:f1:88:f8:b9:68:e2:7b:f5:bd:4a:b2:
                    ce:c7:cd:2b:f0:58:7e:d4:fe:18:1b:80:a9:ee:47:
                    9d:46:25:df:39:7a:de:eb:94:8a:9a:9c:cd:17:b7:
                    88:6e:37:b2:df:b3:71:f4:de:43:01:02:ed:a5:88:
                    b9:2d:8d:5b:47:a8:8e:1d:84:a3:b0:8a:83:81:22:
                    86:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:55:CF:C5:51:92:CA:18:54:1D:67:CF:90:8B:50:1C:9A:4D:1F:E2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62617ace-6d38-48b5-9b72-d18ee055c2fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff4:a400::/40

    Signature Algorithm: sha256WithRSAEncryption
         86:1e:ee:05:3f:5b:14:8a:1a:6f:d3:1c:a1:e3:2d:19:3c:c6:
         6d:57:77:d9:47:42:65:9e:8e:65:8d:8e:87:0c:52:f7:39:32:
         a3:eb:36:f6:4e:7d:ff:ee:65:d9:0e:a6:c8:ff:cc:07:70:e5:
         dd:54:95:f7:33:ab:9b:66:8f:0c:40:ce:9f:f5:39:f8:e2:55:
         42:7c:84:37:b6:a4:08:96:ee:d4:7e:c9:23:f2:8a:e4:8c:4a:
         41:b8:e1:28:d6:f5:66:f7:e9:67:de:90:1f:48:cd:04:6b:36:
         57:e2:62:03:fa:71:25:a3:e0:be:3b:b2:8c:ed:95:bc:ea:c5:
         b5:a9:43:fb:26:3b:05:e7:24:ad:25:40:cc:12:ae:15:b0:74:
         90:d2:d2:07:a5:a5:29:69:ec:6c:ef:c8:51:0a:0d:d7:a6:58:
         78:8f:49:df:f5:4a:2a:6f:45:1e:e7:4c:9b:ff:2b:88:53:82:
         52:61:e7:29:b3:cc:f3:82:6c:32:ec:8e:60:f6:8b:c8:24:70:
         00:ed:64:2c:c4:32:22:fd:dd:79:9c:d3:aa:1f:2c:3d:ad:ee:
         89:8c:61:eb:85:af:8c:18:91:69:7d:f4:85:7a:68:97:5a:33:
         45:71:0f:c2:ff:45:36:8a:b0:0b:f7:be:ed:88:62:b9:ec:7e:
         22:42:9e:5d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----