Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73de9b9e-a3ae-4f17-bfe6-aedc24e4851f.roa
File:                     73de9b9e-a3ae-4f17-bfe6-aedc24e4851f.roa (raw, json)
Hash identifier:          F0IYXD/RAg4WiIgZOE9d3XziukSbj+dMqLEa4ihPTcc=
Subject key identifier:   EE:BC:A5:2D:FB:BF:05:39:03:5E:5C:93:CD:7D:5E:28:9D:1B:89:1F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       57ED7EF14D5DC285A715083DB6BA0717076C9CCA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73de9b9e-a3ae-4f17-bfe6-aedc24e4851f.roa
Signing time:             Tue 14 Oct 2025 15:51:13 +0000
ROA not before:           Tue 14 Oct 2025 15:51:13 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fec:8000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ed:7e:f1:4d:5d:c2:85:a7:15:08:3d:b6:ba:07:17:07:6c:9c:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 15:51:13 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=ba4c6cc65837a9955ac55d5bc0adf30fdc694807b17a3fc9c3a7e5a5cb86cd4a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c1:1c:bf:46:f0:7c:f4:06:a3:5b:8e:58:49:
                    a5:e1:91:7f:be:5e:09:fc:3e:68:8a:19:4e:0b:c1:
                    42:36:50:c1:b5:36:8e:7d:d7:a8:a6:3b:ce:de:a9:
                    78:db:41:9c:43:73:45:86:fa:b6:0c:ab:64:26:8d:
                    34:f0:6c:c1:47:a2:07:61:2d:a1:34:48:ca:39:ec:
                    60:78:22:27:96:2f:23:4a:f3:c9:27:45:08:ad:32:
                    5c:43:94:be:9b:17:8f:ef:2c:4b:8f:d0:87:aa:ad:
                    4b:73:d1:b1:2a:75:2c:8e:93:40:2f:7a:a7:2b:68:
                    2b:d7:ca:69:8f:e8:7d:e3:f9:0e:30:f5:82:0f:cb:
                    1e:c6:9c:01:15:7a:dc:9c:16:31:17:74:0c:8e:b5:
                    28:4d:66:76:ad:ac:7a:dc:29:c4:59:c4:e3:21:31:
                    e7:32:7e:ae:5f:b9:6e:75:62:37:5f:c2:b9:38:da:
                    ef:da:7f:9c:25:ca:3a:9e:49:e0:8d:44:1e:21:1e:
                    92:6a:b3:4c:a1:c9:e5:5b:3e:75:a7:19:a7:01:95:
                    38:c7:55:c0:af:b4:77:fc:b2:e7:f1:f0:8b:e1:97:
                    58:08:ef:d4:e9:5a:df:11:38:c7:e7:59:f7:0f:46:
                    1a:69:2e:04:c7:c2:d6:ee:94:f8:7d:03:58:7e:42:
                    02:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BC:A5:2D:FB:BF:05:39:03:5E:5C:93:CD:7D:5E:28:9D:1B:89:1F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73de9b9e-a3ae-4f17-bfe6-aedc24e4851f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fec:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:5f:3b:a0:8e:0d:ec:2d:5a:35:aa:d4:6e:15:c3:03:c3:0e:
         86:71:16:c6:a5:6a:f1:c4:ec:5e:39:b6:9a:d7:dc:58:ab:3d:
         9b:a6:df:60:9a:c8:8b:ad:07:ee:b7:6e:10:2c:fd:d6:6a:af:
         18:a9:3c:b0:2e:2c:41:7a:ec:50:69:a9:25:86:52:bf:f8:5a:
         a3:86:f0:c3:ee:9f:93:b0:5d:ba:b6:b0:50:44:ff:ca:f5:89:
         f2:6a:b5:a2:7c:91:29:50:e0:5c:7c:1b:46:b8:cb:3a:f7:25:
         c7:c3:a5:a4:ef:4b:fa:5e:8b:ed:fa:8f:4f:3c:e4:20:9e:63:
         d3:b2:00:4f:e6:04:0d:1c:70:b5:ce:f1:af:45:ac:d5:2b:81:
         19:c1:37:68:e0:39:4e:9d:87:33:25:0a:2b:5d:78:58:93:fb:
         de:90:79:df:88:85:46:c7:e8:ae:07:12:a9:a4:7c:65:89:53:
         b3:19:7f:27:90:fe:a1:9f:2a:d1:80:89:aa:af:0b:11:dc:c7:
         b0:40:61:4f:e1:d3:a1:0c:fd:ea:f2:af:ca:73:cf:fc:43:35:
         b9:55:96:02:8b:81:30:a8:04:2d:20:6e:a7:9b:0f:da:5b:77:
         91:3c:2a:89:1a:80:71:0f:94:e2:08:b0:b2:9f:59:e8:49:fd:
         d5:24:3c:67
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----