Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74aa0ca6-295e-420a-82f6-2cff3a44f60e.roa
File:                     74aa0ca6-295e-420a-82f6-2cff3a44f60e.roa (raw, json)
Hash identifier:          UsB+v9VicOdKxQfo1SsdaKXns0joGSQV0nTCU5Pxpik=
Subject key identifier:   D6:57:AA:86:1F:37:55:94:51:67:30:27:EF:6C:7C:96:F3:FF:FF:43
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5891BEEA67E73B44CB9F9EFA9CCDCC17DB4C34C5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74aa0ca6-295e-420a-82f6-2cff3a44f60e.roa
Signing time:             Tue 14 Oct 2025 15:51:55 +0000
ROA not before:           Tue 14 Oct 2025 15:51:55 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fec:5400::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:91:be:ea:67:e7:3b:44:cb:9f:9e:fa:9c:cd:cc:17:db:4c:34:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 15:51:55 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=810ec83e3974145c29647096859812cde670bdc2359ca78806a0e7f2698813a4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:70:25:76:28:38:1a:28:47:2d:91:c0:4d:95:
                    e7:b4:dd:02:3d:2f:1c:5a:10:65:45:d0:04:ec:82:
                    0b:30:c3:46:d2:af:ac:58:35:c4:05:1b:2a:be:e9:
                    f0:5e:28:88:c4:94:e5:a2:2a:fe:a3:ea:e5:ae:38:
                    5c:1c:97:7d:4a:c6:18:60:dc:86:61:31:93:74:ac:
                    96:03:6d:ed:0c:01:9b:ba:51:4e:11:e6:72:4b:f9:
                    1c:a9:97:32:e5:11:8b:83:a2:91:74:f0:3b:94:ec:
                    ee:eb:95:e6:e6:6f:9e:8d:d5:92:5c:dc:ba:e6:f6:
                    59:ce:8e:fd:59:64:df:b5:47:99:ef:d7:9e:71:51:
                    17:48:e3:67:51:f3:bd:f8:56:7e:84:6d:f1:70:d8:
                    63:15:fd:df:08:eb:9a:0f:3c:29:03:14:7b:12:5e:
                    40:09:58:18:6a:e9:7f:44:1f:f8:81:e7:a6:c5:d8:
                    ad:f1:58:4f:21:7b:26:cd:40:0b:33:23:3e:c9:c9:
                    22:c7:e9:f6:c4:c1:17:5c:a6:94:00:ce:a4:e4:5d:
                    51:e9:a3:11:a5:9f:94:b8:b5:ef:94:69:8b:3f:f4:
                    de:ff:f0:b4:34:51:1e:ac:c2:27:e1:0c:12:04:b7:
                    c4:d9:f0:0f:95:e7:71:06:a6:25:69:7d:63:54:98:
                    99:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:57:AA:86:1F:37:55:94:51:67:30:27:EF:6C:7C:96:F3:FF:FF:43
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74aa0ca6-295e-420a-82f6-2cff3a44f60e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fec:5400::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:db:6d:89:83:b7:0f:96:42:b4:e4:f1:5a:1b:4e:31:7a:86:
         aa:73:ba:ee:ec:ec:a0:1a:5a:03:71:80:24:a5:e2:0b:c4:b1:
         61:e1:3e:dd:f5:7d:b0:e4:ea:f2:f0:0b:a4:6d:ac:87:f2:59:
         43:69:78:2d:70:53:13:ec:d6:d3:2c:51:35:16:4b:50:a3:4c:
         9d:26:03:c4:eb:64:ae:0d:30:1e:b5:ff:4e:e7:22:0e:6b:87:
         ab:b9:66:4c:d5:bf:7e:9c:6b:aa:46:f0:83:5b:c9:c1:10:f4:
         09:c5:8c:fc:ff:8f:ad:b5:88:4a:c6:da:d6:61:d3:68:cf:d9:
         11:76:b1:68:70:a9:c6:36:e8:a8:5c:12:17:a4:86:ed:7d:86:
         68:82:6d:6e:27:64:a6:5d:66:25:e4:40:c1:5d:cc:55:da:12:
         6f:21:ad:fc:7c:39:52:33:55:57:04:62:6f:2f:d8:3a:1c:56:
         0e:d1:cf:b9:2d:fc:34:25:5b:84:dd:c0:ef:64:f4:39:8b:a7:
         70:be:f1:4b:c8:0e:68:04:5c:33:62:d5:aa:e2:63:eb:0d:e1:
         f0:96:fc:ec:97:b7:8c:1e:7c:21:33:b1:09:6a:15:b8:58:73:
         6d:e8:5b:46:e1:2e:cd:90:59:4a:14:be:b8:cd:d0:53:05:cd:
         c0:5c:cb:ec
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----