Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f60a8cf-ea77-4bee-86e9-b042eea58b9f.roa
File:                     6f60a8cf-ea77-4bee-86e9-b042eea58b9f.roa (raw, json)
Hash identifier:          EdxJgoI6Jz7aeGWN/Fx4BJjgKf/rQrSVH4p1yxhs/K8=
Subject key identifier:   4B:16:F7:79:6B:A6:26:B5:64:4E:2C:01:0F:58:2F:01:E2:E2:AC:80
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       18D6956E568F94A48A02B772CD75323B9E26452A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f60a8cf-ea77-4bee-86e9-b042eea58b9f.roa
Signing time:             Mon 06 Oct 2025 15:42:48 +0000
ROA not before:           Mon 06 Oct 2025 15:42:48 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffd:2080::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d6:95:6e:56:8f:94:a4:8a:02:b7:72:cd:75:32:3b:9e:26:45:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 15:42:48 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=89fe9a15f8ec58e87295edcb4af10dc464415eb0a6dd705f3e9040aa5ac9b10c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2d:61:72:8e:03:1b:91:5f:42:d5:ac:7f:44:
                    43:b1:c6:77:30:25:d3:74:9a:1b:e3:7a:2b:ff:8d:
                    85:2e:4e:8a:ae:87:20:58:de:af:e1:0a:e3:8e:7c:
                    8e:61:5b:4c:a7:df:26:d9:74:0f:a0:36:2c:b5:e7:
                    d3:1e:62:35:01:20:0e:f3:85:9e:48:c5:80:a2:6a:
                    52:9f:d2:74:d3:bf:31:8d:68:79:c7:a8:e9:80:44:
                    c7:97:8a:83:7c:67:51:4c:8c:51:38:7b:91:d2:0c:
                    8b:ff:4f:74:f5:a0:b0:d6:3f:6b:b8:91:df:65:0b:
                    f1:aa:38:46:3a:38:1f:a5:ac:5f:12:c5:38:0f:4c:
                    98:54:b4:ce:56:b8:c1:92:f2:ca:d4:23:d6:4c:5b:
                    9a:ed:ec:3c:05:7f:01:e1:c7:21:99:40:f0:9f:74:
                    da:a4:bb:21:b4:da:c8:9d:13:cd:0b:54:77:ce:63:
                    ba:ae:04:a1:30:3b:a4:d8:e1:90:7a:59:75:78:54:
                    2f:f0:d2:cd:d9:be:e4:c8:bf:f2:42:5b:59:cf:8f:
                    b2:5a:99:67:77:31:08:c2:25:5a:88:46:e2:2b:54:
                    d5:de:b1:2c:9e:cd:49:4e:01:c6:d9:5f:b3:6e:54:
                    72:70:0d:a9:53:04:28:b7:bd:5a:8e:a1:10:9c:1b:
                    1e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:16:F7:79:6B:A6:26:B5:64:4E:2C:01:0F:58:2F:01:E2:E2:AC:80
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f60a8cf-ea77-4bee-86e9-b042eea58b9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffd:2080::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:69:a4:72:29:3b:db:6d:73:e3:d8:1c:f1:c6:db:d2:f9:15:
         8a:84:65:9b:40:ab:95:13:eb:46:a2:d9:d2:6a:70:c2:41:2d:
         c5:4b:60:75:54:ff:5a:74:c3:58:0e:a3:4b:fc:8e:02:0b:5f:
         80:40:c6:e7:0c:ed:81:5a:70:9e:ef:0d:3e:f5:bd:ad:ec:1b:
         d8:d5:7c:74:bf:12:c1:db:bd:3b:e4:92:8d:83:aa:7f:82:47:
         94:32:78:f4:4c:19:14:72:5b:5c:72:26:71:2e:f3:19:ee:32:
         9a:c1:84:89:d8:9b:a3:6d:95:65:6e:0f:a9:3c:d6:8b:8a:c7:
         fd:8f:02:94:e6:02:1c:5c:fd:b2:0b:3a:a3:e0:b5:d8:12:6c:
         17:fe:4f:77:cb:05:94:09:c3:0c:ee:ce:4c:42:1f:3d:63:0f:
         15:02:26:8a:15:19:70:77:99:c3:61:9a:16:94:42:71:e4:dd:
         62:89:85:cb:df:83:6e:c2:c0:f1:7e:7a:cb:63:91:ec:73:07:
         6c:79:1d:75:3c:16:89:6a:65:36:ab:57:0c:18:b1:fb:59:60:
         0a:18:d3:ca:30:e4:ff:0b:06:1c:57:75:b3:56:c0:2f:38:cb:
         8b:06:35:33:97:74:9c:ae:c6:0b:c2:f5:ad:07:05:99:d9:26:
         41:74:01:96
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----