Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78a425bb-39fe-49d4-86c1-2d84726e43c8.roa
File:                     78a425bb-39fe-49d4-86c1-2d84726e43c8.roa (raw, json)
Hash identifier:          u59Bh/QRDrIFy5v/o7ICtPs7+YnjAdZYE+9hnDeq0Uo=
Subject key identifier:   EB:DD:54:4F:B6:AB:A4:11:64:F0:E9:79:88:73:25:62:6D:2C:2C:CA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6AF39F89DAD80A70DFBDDDFD4C8AAE48B08A99CF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78a425bb-39fe-49d4-86c1-2d84726e43c8.roa
Signing time:             Sat 18 Oct 2025 03:40:03 +0000
ROA not before:           Sat 18 Oct 2025 03:40:03 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f16::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f3:9f:89:da:d8:0a:70:df:bd:dd:fd:4c:8a:ae:48:b0:8a:99:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 03:40:03 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=74d80931431a77aaabf5def2c4998563ec8d1365dddc2b668d226dd1e725d17d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6c:a5:8a:74:b8:86:65:70:a2:8f:e6:ee:81:
                    bc:6e:5c:48:4b:bb:35:e4:d0:27:e8:8d:1f:2f:3b:
                    85:7e:8d:21:05:ba:7b:06:0b:e3:2e:d2:f4:62:04:
                    03:97:52:f6:79:19:6a:39:e7:0c:00:47:36:b9:5c:
                    98:d3:c3:30:45:47:a1:21:10:7e:94:8d:9f:3d:15:
                    6b:21:52:86:a6:30:00:a4:22:57:34:63:b6:2f:26:
                    cf:5a:e9:07:ff:3d:a0:cc:73:93:53:53:c4:07:d6:
                    4f:15:fc:7e:6d:44:b9:73:74:ef:ee:62:d1:2c:69:
                    bd:ef:62:df:5f:04:33:e7:8d:3b:2a:3f:c9:19:4f:
                    ff:e0:e7:23:b8:ee:77:9a:c0:ff:89:a5:79:22:10:
                    5b:93:75:05:14:82:7f:e7:65:3e:11:da:b1:c1:5b:
                    7c:44:93:73:46:5e:9a:a2:29:6c:a0:3f:02:83:e6:
                    93:25:df:e4:6d:97:7a:b8:30:4a:25:5c:5f:29:33:
                    fa:fd:d8:16:77:6f:2e:20:0e:ce:7f:c4:e4:19:45:
                    fd:91:4a:18:4e:8d:56:22:7a:fe:e1:a4:fc:ef:cf:
                    88:cf:7a:5c:10:fc:18:74:51:84:ae:6b:01:88:cf:
                    7a:37:a3:a5:43:0a:2d:f9:4d:cd:bb:78:c4:0b:88:
                    b4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DD:54:4F:B6:AB:A4:11:64:F0:E9:79:88:73:25:62:6D:2C:2C:CA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78a425bb-39fe-49d4-86c1-2d84726e43c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f16::/35

    Signature Algorithm: sha256WithRSAEncryption
         4c:90:13:e1:f8:8a:ac:73:f2:73:5c:d2:45:9d:25:f3:1c:47:
         97:37:92:42:be:dd:25:60:fc:4a:80:8f:e9:14:43:65:07:63:
         83:0d:ea:a2:97:89:80:08:e0:5f:73:82:f6:91:24:91:de:ae:
         db:9b:67:ca:a3:1a:ef:a0:a1:c0:2e:af:63:a8:f2:49:d6:cc:
         8f:69:9f:b5:e5:12:c7:0c:da:59:50:f5:19:e7:e1:a1:db:90:
         31:a9:5f:3a:2a:ed:7f:85:5f:2c:e2:99:be:8e:c4:9c:88:dd:
         15:3f:82:9b:cc:17:01:71:94:73:d1:88:4f:9d:d5:0d:e8:26:
         8b:9a:14:e2:2c:66:b3:84:5f:bc:d5:40:c6:61:8a:4f:fb:24:
         25:79:61:43:7b:ac:f3:26:43:f4:e6:6c:6f:4b:cb:70:ad:18:
         5d:11:06:14:4d:26:cc:b1:9a:a3:70:bb:ea:42:07:37:bc:ac:
         33:09:e5:ff:77:40:f5:44:0c:06:73:fe:41:7f:dd:80:bc:30:
         9c:c3:7a:78:a1:86:95:68:66:83:96:66:4a:42:a6:ac:45:7e:
         3c:76:c6:73:b5:58:cb:5b:49:ee:dc:3d:10:5b:1b:14:52:bb:
         d4:ff:c1:c7:e2:d0:06:58:67:28:e0:0d:a6:df:27:c3:f9:9b:
         6e:e5:e4:d9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----