Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83bee3f1-9e56-4c74-8743-c09735d8c214.roa
File:                     83bee3f1-9e56-4c74-8743-c09735d8c214.roa (raw, json)
Hash identifier:          Itvxfh8i6R03NBHLIg6SGsPV9YdkvVOoxudOHoxD/OY=
Subject key identifier:   C9:8E:9C:78:93:81:E9:9A:11:C4:A0:6D:2A:E3:06:8E:12:1D:F9:7D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       69207A3A33852F77C26F0E0EE67494CA6A664DCA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83bee3f1-9e56-4c74-8743-c09735d8c214.roa
Signing time:             Mon 06 Oct 2025 15:42:08 +0000
ROA not before:           Mon 06 Oct 2025 15:42:08 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffd:ec80::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:20:7a:3a:33:85:2f:77:c2:6f:0e:0e:e6:74:94:ca:6a:66:4d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 15:42:08 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=2e3bc7ada5088ad91b1d5662dc77e4478412390e81ba1f416b3f0f1c1756ddc4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7d:c0:69:9d:d2:17:56:0f:7b:db:f8:fc:6c:
                    e0:ce:1c:f5:b7:3b:33:fd:ce:32:ad:c1:fb:22:75:
                    67:a3:0f:f6:f5:a4:76:52:a1:3e:e5:2f:7e:5d:5e:
                    0a:ba:3e:40:b8:a4:45:24:ee:92:d9:2a:c0:a7:91:
                    86:30:b1:95:fe:48:7d:a5:85:14:7d:a0:1e:d2:5c:
                    15:86:8c:6f:36:00:f9:9c:f4:bf:06:5d:dd:29:ed:
                    ee:2c:72:67:35:c4:d1:41:99:f9:54:a8:da:69:cc:
                    2d:53:f3:cb:5d:6c:a5:47:92:e9:dc:54:4f:a8:eb:
                    45:42:9d:24:14:9a:89:79:1f:9c:95:0c:af:e1:49:
                    d0:f9:b3:81:64:80:76:fb:c0:d3:e9:ce:f9:4d:8a:
                    78:af:d4:1e:83:91:f6:15:a2:a7:3a:b5:0e:55:21:
                    19:50:33:92:e2:17:78:59:d4:cf:5b:a9:19:e9:2f:
                    c2:ab:bb:fb:65:21:43:fd:5b:4d:de:e5:14:58:2b:
                    f2:2a:06:2a:09:6c:08:e0:07:59:f9:62:0c:1b:07:
                    00:ed:f7:3e:e3:29:30:98:32:64:32:01:40:58:51:
                    1e:b0:31:04:70:8e:4b:d1:f3:99:62:05:98:52:ae:
                    fd:37:c6:b6:b9:b0:b4:08:62:6e:58:d5:e3:06:3e:
                    71:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:8E:9C:78:93:81:E9:9A:11:C4:A0:6D:2A:E3:06:8E:12:1D:F9:7D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83bee3f1-9e56-4c74-8743-c09735d8c214.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffd:ec80::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:64:86:30:1a:e6:89:84:9b:c7:97:6c:d3:cf:53:f9:00:e0:
         3a:4a:14:82:9c:09:b0:47:5c:8a:85:71:22:9d:9a:87:38:6e:
         94:6b:18:45:5a:cf:ec:03:b2:4c:37:52:3e:f5:cb:09:cf:c4:
         00:89:7b:fb:79:d0:ae:0c:f5:e0:af:d2:5b:1c:5e:ae:24:44:
         9c:b5:98:51:a8:10:68:81:b2:1d:6c:90:3f:78:89:d6:6f:9b:
         c0:98:7e:a7:6a:60:2c:e6:72:5e:bb:95:7f:a4:86:30:d0:ea:
         e3:ce:98:43:81:60:5e:5a:fa:3c:7d:b7:1d:51:89:00:f5:cb:
         c3:6e:55:b3:7b:1e:07:11:3c:55:f2:3e:fc:de:28:d5:8d:f4:
         a7:4e:5e:c6:78:75:eb:3f:9d:f7:e2:01:cd:63:bd:e5:c3:1e:
         7a:e9:4e:fe:70:5e:74:76:36:f4:89:dd:ad:60:64:1f:3d:43:
         31:16:42:42:9e:1f:1b:83:fc:e5:96:63:46:8f:2b:09:c2:6f:
         c1:37:25:6f:8e:3c:8c:11:05:b9:ef:e8:be:6d:ea:b9:7b:78:
         90:c2:f3:21:5b:28:9e:39:2d:83:8c:21:e0:bd:b3:1f:cb:d7:
         1c:e7:b7:b4:01:be:79:68:42:3f:db:da:6d:22:83:c5:59:fb:
         f7:f6:c1:c8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----