Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bb5b3ff-d7f0-4096-afb0-76a4caac2233.roa
File:                     9bb5b3ff-d7f0-4096-afb0-76a4caac2233.roa (raw, json)
Hash identifier:          pRZPi6HfT3Q9qp2hehkHTxFVi+gkQ1yri9u7BNrELPg=
Subject key identifier:   A2:CA:7B:1F:B3:31:89:4C:5E:F7:BD:3D:19:29:5D:45:5D:5F:23:A8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       470212587EEB46AFB70D5CC423F7F617D2CE0423
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bb5b3ff-d7f0-4096-afb0-76a4caac2233.roa
Signing time:             Sat 18 Oct 2025 01:20:53 +0000
ROA not before:           Sat 18 Oct 2025 01:20:53 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff1:4000::/39 maxlen: 39
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:02:12:58:7e:eb:46:af:b7:0d:5c:c4:23:f7:f6:17:d2:ce:04:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 01:20:53 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=8ab877b17e014082035d7223b743fe14bd48ba3c9d05fd0dc62b958dc975fe51, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:58:33:ab:db:99:10:1b:04:7b:71:f2:8a:f7:
                    b3:2c:79:3d:f1:3c:db:d0:43:09:ce:36:74:95:ac:
                    70:99:8e:9c:5f:80:92:e9:b7:1c:96:87:87:8a:5c:
                    87:e6:63:7a:82:a6:90:0a:2c:1c:6f:b6:53:30:7d:
                    9d:5a:aa:13:b4:9e:1f:00:34:90:f3:af:a2:0b:3b:
                    a2:a9:6b:42:a7:96:fd:0a:d2:66:36:54:20:a7:83:
                    fa:97:ab:2a:56:76:93:64:9e:49:24:e4:7b:74:ec:
                    d7:8f:1f:90:c8:fc:6e:4e:f6:9a:9a:5c:94:97:91:
                    d5:c8:21:89:a7:d6:66:72:9d:33:61:b2:c0:04:ca:
                    77:3a:f1:c2:10:85:52:1f:bd:7d:8f:46:ee:cb:9a:
                    a7:49:ea:14:c0:38:06:9c:94:9f:f5:3b:99:41:12:
                    11:4c:94:51:68:69:87:08:69:83:cb:64:14:e0:83:
                    03:8a:37:09:f1:61:bd:68:5d:d5:76:e8:09:c7:6d:
                    f1:a8:7c:0e:a9:3d:00:d4:9d:78:12:ef:52:2c:3b:
                    e7:c6:eb:b2:ac:ee:14:43:6e:41:e9:b1:1d:f4:19:
                    12:b5:05:80:49:ce:81:36:f1:39:21:ec:66:91:99:
                    dc:55:23:28:9a:e8:13:26:06:88:fc:c1:a9:7f:57:
                    ee:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:CA:7B:1F:B3:31:89:4C:5E:F7:BD:3D:19:29:5D:45:5D:5F:23:A8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bb5b3ff-d7f0-4096-afb0-76a4caac2233.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff1:4000::/39

    Signature Algorithm: sha256WithRSAEncryption
         c7:d1:3d:b0:a4:db:b3:2c:02:d8:74:49:c3:98:d9:33:b4:db:
         9f:53:fa:80:45:30:1a:91:02:8b:c6:72:22:3d:72:89:ce:87:
         13:46:78:19:1d:66:d0:75:31:f8:dd:2b:10:f1:e8:20:1a:8f:
         4c:c6:8a:f4:5d:76:f5:d3:ab:04:dc:82:92:d7:22:3d:f6:53:
         b0:9e:1d:3e:88:e6:e3:72:98:50:74:42:cf:82:b5:8c:cb:a9:
         89:b2:2d:78:19:ca:50:4d:f8:2c:89:7a:dc:0c:49:0b:63:40:
         15:b7:ae:dc:45:fe:9a:ca:1d:23:52:09:73:40:c9:a3:8b:d6:
         85:88:c4:78:b2:79:68:66:8b:2f:8a:c3:d1:10:e8:16:26:26:
         5a:e4:ab:89:e6:0e:b6:c3:39:ab:ab:ab:e7:89:6d:b8:4f:ec:
         2b:f6:9b:72:8c:94:83:81:59:8e:5e:46:dc:86:bd:1a:b2:8c:
         c4:da:06:46:0e:da:14:2b:be:e4:e1:a8:18:ff:1f:d9:03:6e:
         f1:e3:9c:57:75:34:91:b5:1e:29:b5:c2:b8:88:26:41:db:55:
         6f:b0:33:3c:72:28:a6:e0:f8:59:e0:8e:73:ad:6f:a5:e2:dd:
         97:b5:43:5a:68:48:d9:6c:3a:43:08:6a:8b:29:6d:cd:33:a5:
         98:f0:39:a9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----