Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8594dd2f-da95-44b0-b8df-88c0e3e8b1e6.roa
File:                     8594dd2f-da95-44b0-b8df-88c0e3e8b1e6.roa (raw, json)
Hash identifier:          VmKPQsIb4tYa2F92cu5bYQXfPTN0TybBPKhL2VGK6zo=
Subject key identifier:   E1:03:6C:5A:DB:03:4F:D0:56:F6:04:19:F6:8D:09:C9:6B:E2:B3:D1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       786BE29F41EAE66FCB3976C71C4F9C44764345DF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8594dd2f-da95-44b0-b8df-88c0e3e8b1e6.roa
Signing time:             Mon 06 Oct 2025 15:51:55 +0000
ROA not before:           Mon 06 Oct 2025 15:51:55 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffd:4080::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:6b:e2:9f:41:ea:e6:6f:cb:39:76:c7:1c:4f:9c:44:76:43:45:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 15:51:55 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=fc79889328650e3073addb36aeb54793e626e3e6805e2a41a099ff5b7981e05b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4f:26:13:bb:0a:de:86:15:8c:f1:de:62:4c:
                    cf:2a:0c:e5:79:38:79:95:8e:2b:a3:2f:f1:55:56:
                    9e:ef:80:ee:be:2e:e8:f5:6c:2c:12:3e:93:9d:5c:
                    a5:9e:1f:cc:fd:5f:10:e2:c1:e5:c1:d1:b6:5d:83:
                    46:f9:16:31:39:6b:90:0a:8d:0c:70:38:b3:a8:38:
                    b1:81:69:dc:c7:c5:1c:38:9b:9b:7f:47:0c:4d:e0:
                    90:50:52:97:a2:1c:41:35:2b:54:3f:a7:7b:82:98:
                    5a:04:fc:60:fe:8d:14:53:36:b5:3d:83:24:a7:f9:
                    d5:65:be:29:ca:68:c7:03:fa:ed:e8:8a:9f:67:08:
                    51:88:e0:1d:6b:c4:97:09:cb:26:bf:db:ef:c9:b3:
                    1f:48:ab:6c:52:fb:48:aa:e9:de:19:f2:0b:69:82:
                    d3:23:5c:be:3f:9f:de:8a:7a:f5:1f:69:2d:6c:21:
                    d3:b2:93:c6:0a:89:ca:8e:76:72:e8:25:f8:6e:49:
                    28:84:2e:bc:01:b0:77:c7:19:e8:f3:64:ed:41:26:
                    94:31:36:aa:8c:aa:8c:95:0c:82:ff:f1:57:22:b2:
                    7b:6e:f2:08:cc:de:d3:30:47:22:fa:eb:04:ea:80:
                    60:26:15:78:e3:24:88:f1:b6:47:90:5d:9a:c6:2b:
                    05:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:03:6C:5A:DB:03:4F:D0:56:F6:04:19:F6:8D:09:C9:6B:E2:B3:D1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8594dd2f-da95-44b0-b8df-88c0e3e8b1e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffd:4080::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:87:24:f6:5a:d3:34:4a:4d:b3:3e:7f:94:5f:42:4e:29:69:
         e5:84:5c:bb:29:67:ee:78:a1:a8:97:c0:3c:3c:df:3f:71:cc:
         71:f6:bf:73:b9:0f:d9:f2:fa:1b:9a:c5:1f:aa:37:2f:ac:75:
         5f:20:16:53:a2:dd:6e:6f:32:9f:0d:55:90:5a:d9:a2:7f:9a:
         0a:66:4a:db:39:cd:9b:43:80:3b:53:34:68:45:fb:01:98:79:
         4e:60:c5:eb:31:74:7e:d9:2c:8c:3c:96:4a:a9:1a:4f:a2:55:
         74:26:52:dd:74:2d:aa:e5:bd:da:6d:de:a4:03:89:41:77:bf:
         ba:07:54:62:66:8f:cf:0c:f7:96:16:f7:74:30:27:bd:7f:17:
         c9:99:8a:16:ea:89:d9:00:d0:f8:08:c9:55:49:4f:4a:7e:5a:
         23:03:7d:32:dd:7b:42:6b:3c:26:4c:b5:bc:8f:3e:66:3e:56:
         fb:97:ec:61:ec:5d:e9:fd:4a:c5:92:d8:82:10:7f:f5:97:6b:
         75:61:ae:21:db:63:d4:01:bd:16:02:36:94:4b:08:19:6b:92:
         f2:b9:95:c5:cb:91:3f:cc:94:89:ee:00:0b:cd:af:68:27:bc:
         97:d5:a1:13:84:f5:51:61:c0:95:70:41:4d:db:33:4d:af:eb:
         83:03:19:5c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----