Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62842a99-8d9d-42aa-97f7-b9f2281d3077.roa
File:                     62842a99-8d9d-42aa-97f7-b9f2281d3077.roa (raw, json)
Hash identifier:          nX8mQXPTgkAbwAUNkcNIFr73key3RRKhZvdiEy6ArZk=
Subject key identifier:   DC:35:41:39:8A:76:91:19:73:06:8A:90:73:65:76:3E:46:9B:0D:E1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       50BDD2B13E37C9D2928F5D4BE44A00596845A6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62842a99-8d9d-42aa-97f7-b9f2281d3077.roa
Signing time:             Sat 18 Oct 2025 03:31:10 +0000
ROA not before:           Sat 18 Oct 2025 03:31:10 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f2f:4000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:bd:d2:b1:3e:37:c9:d2:92:8f:5d:4b:e4:4a:00:59:68:45:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 03:31:10 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=9d75b2ea24953576538c02735e666d15ef8f6957040a8d3ea6dd54daece02760, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f2:03:dd:52:71:d2:db:20:41:13:16:a6:34:
                    30:4b:e6:c3:5b:f1:67:11:c4:d3:05:1d:e6:d7:44:
                    1f:64:63:8f:a1:9a:73:40:54:b0:d1:2b:3c:c5:3a:
                    c4:00:76:c9:7c:a0:0b:20:83:6b:07:a6:4f:81:1e:
                    8a:a6:54:00:61:dd:cf:7d:06:89:35:39:37:22:23:
                    17:92:54:25:46:84:77:6e:3d:a4:ec:af:12:be:01:
                    d9:93:ac:85:e7:58:52:43:6b:d0:56:20:cc:dc:3f:
                    8e:8b:80:32:fc:fc:75:16:18:29:b3:17:30:e1:86:
                    71:36:bf:f7:94:1c:0f:bf:2a:f4:51:e4:af:89:54:
                    e4:e0:d2:1b:94:fe:54:cc:e7:5f:85:2b:3c:74:6c:
                    f2:cc:c8:8c:aa:3a:05:aa:57:14:b1:03:d9:b7:8f:
                    90:28:75:1b:dd:74:65:32:83:7b:dd:9a:f0:36:56:
                    f8:e4:5d:12:5e:48:6d:a3:6a:c7:15:a2:c3:40:63:
                    79:7d:a7:1f:e7:af:32:c6:e1:87:dd:e4:ac:11:ec:
                    51:53:a7:6d:5f:17:96:59:70:9d:2c:3a:a1:f4:ef:
                    f9:02:7e:7b:a5:b0:53:7d:5d:db:f3:62:fa:59:fa:
                    b4:1d:3c:e0:57:3e:bf:14:2c:c8:df:f4:98:d9:ea:
                    a1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:35:41:39:8A:76:91:19:73:06:8A:90:73:65:76:3E:46:9B:0D:E1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62842a99-8d9d-42aa-97f7-b9f2281d3077.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f2f:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         d1:9e:4d:11:c4:0b:e9:9d:5d:35:33:a2:33:99:8b:2a:3d:4e:
         ec:99:6f:bc:f6:5f:18:ce:56:b6:0f:b3:98:98:f2:ac:0d:f0:
         d7:53:33:17:fe:c7:22:88:89:2a:3b:d4:29:51:f1:7b:4b:f4:
         7c:a5:c4:61:8f:22:cf:a5:83:c1:cc:ab:d1:82:d6:24:0f:31:
         a5:41:b9:27:35:f9:3b:ef:d9:5a:96:54:bd:12:bd:20:22:c5:
         02:50:94:7f:34:e2:4a:09:3c:4d:ed:79:08:3b:b1:82:d3:4f:
         ca:45:51:0f:67:b8:8e:cb:2a:91:73:26:97:d6:ff:98:d7:d9:
         3e:03:18:bf:a7:8b:cd:3d:ee:6a:b5:6f:f0:e4:af:be:32:b4:
         79:dc:13:6d:e3:98:21:0d:d9:78:7a:df:5b:f6:95:e3:02:c2:
         07:2e:4b:cb:ab:fd:5c:a1:d8:9e:5d:e0:df:97:8d:b1:1b:b1:
         a6:72:b4:b1:ff:a3:d4:a5:03:fd:7e:1d:d2:a8:ef:65:07:9c:
         fa:fa:08:96:89:0e:59:6d:89:23:37:58:83:19:ea:85:59:6a:
         80:50:26:80:f4:12:4d:a4:b5:9d:c0:0f:b5:b8:4a:01:fa:89:
         38:6d:58:75:0d:3f:f2:50:91:c1:9e:16:63:8d:c7:0c:c0:0f:
         76:70:79:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----