Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91abda45-0cb9-4b48-94cf-80f7b19fa7f5.roa
File:                     91abda45-0cb9-4b48-94cf-80f7b19fa7f5.roa (raw, json)
Hash identifier:          RPkW90mzP15fwTwIrGktxc5I7K1gxr0fOmvyXEgwogw=
Subject key identifier:   F3:8B:A2:CB:14:72:CD:04:3B:09:74:66:EE:0F:AB:B1:52:C8:C7:BE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5D26C2BD1B8CE230C7D5250D5F3BB3B9823EE7D4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91abda45-0cb9-4b48-94cf-80f7b19fa7f5.roa
Signing time:             Fri 17 Oct 2025 20:20:15 +0000
ROA not before:           Fri 17 Oct 2025 20:20:15 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1f61:5080::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:26:c2:bd:1b:8c:e2:30:c7:d5:25:0d:5f:3b:b3:b9:82:3e:e7:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 20:20:15 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=bdc1cb44b89b57abe380f2a48bf4a2fdf960a769d5f0ca6685a06f0414dc2caa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:90:2c:c6:24:5b:2b:b3:ba:5a:ec:f2:a2:84:
                    5a:68:81:69:cf:e6:6b:06:99:d1:c0:4b:cc:25:12:
                    13:5a:c4:c8:cb:c3:64:a5:c4:db:a4:b9:fd:fc:16:
                    9b:9f:23:58:28:67:db:28:1b:c9:25:b7:8c:80:67:
                    52:b5:b6:3e:cf:01:83:11:7c:a2:84:fa:91:0c:ba:
                    ce:f3:08:50:c8:58:7f:a9:d9:9b:a4:27:3a:c5:cd:
                    ad:e5:be:36:06:ca:5b:dc:8d:6d:fb:50:7b:6a:61:
                    a7:d6:ca:9c:10:73:fb:d6:57:e1:42:ec:1a:98:23:
                    7b:d2:71:2c:06:1c:92:62:ea:4d:0b:3b:ed:f5:42:
                    38:bd:d7:9f:97:67:56:f9:49:a7:73:96:6d:6c:76:
                    7e:34:50:11:f0:8b:96:7c:74:ce:f1:1d:76:30:7b:
                    0e:70:54:28:fc:74:88:bf:b2:f6:71:7c:c5:d0:7d:
                    a5:16:98:e9:8f:3f:72:63:f3:0b:05:92:e7:fd:a9:
                    cd:fb:11:96:4b:a1:67:21:bd:64:78:11:df:06:fe:
                    a5:7d:7d:39:37:9e:10:23:65:ec:87:11:e7:b9:b6:
                    33:4d:e7:cf:45:78:c2:52:93:26:f0:18:0e:c7:fc:
                    12:61:7a:64:82:ea:dc:38:0b:e6:2d:d3:e5:aa:2f:
                    c9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:8B:A2:CB:14:72:CD:04:3B:09:74:66:EE:0F:AB:B1:52:C8:C7:BE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91abda45-0cb9-4b48-94cf-80f7b19fa7f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:5080::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:75:e6:ee:53:b5:09:18:c6:1a:99:5d:17:34:f1:1b:71:2a:
         94:af:93:13:25:cb:38:bd:ff:30:db:7c:71:c6:f0:4a:69:68:
         23:9d:fb:09:2f:03:a1:13:93:cb:07:b3:95:f6:90:8d:55:54:
         4d:72:82:04:db:77:5b:be:00:b7:38:9e:0f:24:fe:37:ec:b2:
         80:98:49:56:b2:f7:11:c2:a9:0d:1e:7d:34:b0:88:ef:7b:7d:
         84:35:69:ec:4c:71:dd:2e:84:d8:26:2a:5e:9f:9f:ff:fd:c0:
         e4:2b:49:ca:e8:58:01:61:35:fe:e0:02:c2:c5:7a:e0:ae:9a:
         56:23:e1:1a:f0:fd:b4:db:67:5d:aa:3b:a7:8f:39:62:07:99:
         4a:72:4d:8d:ea:b0:c1:c8:8a:d8:eb:a6:1e:e9:57:50:5e:54:
         f2:fa:78:91:7a:4d:3f:e5:47:71:bb:f2:f2:6e:2e:e4:df:fb:
         29:d4:f6:ce:d6:40:09:f7:62:15:b6:8b:b4:a9:05:ab:f1:7a:
         16:21:ca:7c:b9:ee:14:23:f9:45:d8:e6:5f:46:11:1b:b4:8f:
         be:6a:d8:f8:ad:a4:50:fc:ce:78:79:a6:bd:d6:a3:c7:e2:46:
         4a:75:eb:e7:15:25:3b:a2:84:ba:4f:09:e6:2e:b8:32:ba:c5:
         7e:44:6c:16
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----