Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6790ee9a-7d7b-4416-9f0a-9fecab956ccf.roa
File:                     6790ee9a-7d7b-4416-9f0a-9fecab956ccf.roa (raw, json)
Hash identifier:          wArARfEla8ahfOI96Hhwbo+s6PPHIDk1VNQhPiUoOf8=
Subject key identifier:   3C:E5:1C:AA:4F:DF:D9:BE:E3:17:3B:58:69:4B:61:1D:E2:D4:C9:89
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3ADD1EE004AFDB3BBAF544684C19AD38914AB03D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6790ee9a-7d7b-4416-9f0a-9fecab956ccf.roa
Signing time:             Sat 18 Oct 2025 00:40:05 +0000
ROA not before:           Sat 18 Oct 2025 00:40:05 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1ff6:2000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:dd:1e:e0:04:af:db:3b:ba:f5:44:68:4c:19:ad:38:91:4a:b0:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 00:40:05 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=4d36689eb206a3749e8dba804e4c2d9fc86a53292d5d2f1334fb5c44abfe7bde, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f1:02:74:a6:fc:e8:b2:49:0a:bd:3c:11:f3:
                    0f:ce:6f:62:a9:d2:91:a8:fe:e4:c1:78:b1:1f:25:
                    ff:21:e6:40:10:a1:55:0a:5a:c9:52:62:1a:4f:16:
                    97:1b:9f:28:d8:2a:37:be:fd:48:4d:aa:2b:38:ae:
                    31:db:b1:52:10:77:b2:1d:64:74:52:0d:d1:da:c4:
                    89:1c:62:63:92:2b:58:5c:e7:3e:d0:c3:4e:75:59:
                    c8:8c:32:6f:20:8e:a0:af:03:c5:e8:2e:25:83:dc:
                    0f:d0:4f:8f:8b:71:42:22:d7:9f:73:1a:f7:dd:f5:
                    77:e9:f4:3b:13:e8:0a:54:49:01:fb:ee:df:5b:8b:
                    ee:a2:f0:bf:6d:a8:a6:d5:23:10:c1:7e:a0:76:a3:
                    68:1c:31:95:65:7f:61:80:74:f4:43:ee:8c:e6:13:
                    88:36:ae:a0:8d:c3:6c:b8:ca:1f:68:70:94:47:83:
                    e9:e8:00:a5:b2:b0:12:7b:19:b6:86:47:a1:bd:6b:
                    b2:f1:37:15:33:fe:f5:cb:e3:a6:8b:a5:f8:9d:4e:
                    89:db:e3:1f:b2:e1:c0:f3:bc:4b:79:17:a3:7f:f6:
                    fe:49:db:ce:fb:94:0c:96:99:95:25:e8:a8:27:74:
                    cf:c7:19:31:19:e6:6f:9d:65:11:9c:c1:b9:1f:88:
                    28:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E5:1C:AA:4F:DF:D9:BE:E3:17:3B:58:69:4B:61:1D:E2:D4:C9:89
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6790ee9a-7d7b-4416-9f0a-9fecab956ccf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff6:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         6a:b1:7e:4f:73:5a:40:94:1f:12:1b:cb:95:91:a0:f7:2c:bc:
         65:17:cb:1c:8c:05:d4:a5:48:f4:ff:a8:8d:92:a5:8d:36:57:
         d8:eb:17:a3:40:4f:8d:1a:f7:9e:6b:16:0a:5a:d8:6c:4e:3f:
         fa:10:bf:58:b2:fb:87:2c:8e:5a:f4:ea:56:62:8b:17:c6:08:
         01:de:f5:cf:f1:72:fb:73:7f:0e:1e:db:f0:a8:79:ae:8b:5e:
         42:b5:9c:95:2f:ec:61:26:61:f9:a8:c6:cf:16:68:24:38:cd:
         43:ae:3c:ca:cd:20:52:71:d7:e9:50:4c:94:a0:af:83:9f:0b:
         52:09:58:09:5b:3a:2b:b7:d4:a8:88:e5:9e:42:3c:ab:6f:f7:
         05:19:eb:17:86:37:37:7e:7b:18:55:34:02:de:34:ff:5b:86:
         09:1f:80:fa:4b:18:fa:a3:3b:5c:a5:77:cc:c2:78:6b:66:70:
         0d:9d:1b:6a:66:18:f7:e5:f2:9f:3d:4c:6f:22:ce:b1:25:28:
         07:c4:dc:5a:b9:1b:30:8e:fd:58:17:fd:af:f7:4c:09:4b:72:
         9e:1c:cd:09:2e:09:df:7b:a5:e8:2a:a2:4e:33:8e:ab:66:ed:
         7d:f9:4c:6c:57:4a:d5:03:8c:b7:1f:d7:47:b3:bf:b7:4e:2a:
         f9:8e:fa:0a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----