Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f4c8a2a-83fa-465e-8b41-32661fce3929.roa
File:                     9f4c8a2a-83fa-465e-8b41-32661fce3929.roa (raw, json)
Hash identifier:          WlvPVxpKv0VY4shJUrdizWvPMHVSacdrE9r5kAX3FzE=
Subject key identifier:   80:1B:8F:0E:13:53:BB:BD:D3:21:31:8D:D3:56:13:49:83:6B:B0:F3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0EEA5063F2BB1C9D9831923520DB2B40C37235E9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f4c8a2a-83fa-465e-8b41-32661fce3929.roa
Signing time:             Sat 18 Oct 2025 03:50:55 +0000
ROA not before:           Sat 18 Oct 2025 03:50:55 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:6080::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ea:50:63:f2:bb:1c:9d:98:31:92:35:20:db:2b:40:c3:72:35:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 03:50:55 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=d2d7652119a46848ad46397e83069ae94e88718738f2682f1cc4a1e489ac848a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cc:e9:8c:4f:65:16:43:00:34:22:5b:76:81:
                    87:5d:48:31:e4:20:a4:07:7d:81:33:8c:09:e8:9d:
                    36:3f:77:92:09:a6:9b:2a:26:34:e5:1b:f5:61:c0:
                    19:eb:72:4c:73:5e:44:5c:b8:03:85:f5:41:06:7c:
                    5b:67:3e:b5:01:ae:04:f0:fc:15:e2:7f:35:7a:bf:
                    5c:41:90:19:f0:6a:49:d6:10:88:65:e3:78:66:ac:
                    5a:16:1b:f2:6a:8c:99:08:88:91:3c:05:40:df:07:
                    87:32:0b:85:2e:a2:d7:d3:0d:f8:27:ac:9e:95:01:
                    fd:0f:98:46:d2:1f:a4:38:9b:84:a7:2a:41:1a:ef:
                    b6:b1:04:cd:a3:66:cd:44:2e:1a:63:38:0d:8d:e3:
                    e7:d8:15:cc:1d:9e:e0:24:a1:c1:87:ac:f2:70:89:
                    56:04:3d:38:b6:90:6f:8b:f2:3d:47:b2:2a:c7:c6:
                    9d:e0:55:19:b1:97:f9:ca:9a:18:ec:a0:df:dc:88:
                    1f:f4:a2:29:00:3d:12:0d:af:2d:71:ee:02:94:87:
                    58:ce:62:5a:a8:dd:5a:70:19:1c:14:e3:fb:a2:b5:
                    58:c9:0d:36:e9:d4:c1:ad:21:65:23:ff:6a:5a:69:
                    f9:4f:a1:18:9f:2c:22:9a:1d:59:84:74:ad:cc:44:
                    b9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1B:8F:0E:13:53:BB:BD:D3:21:31:8D:D3:56:13:49:83:6B:B0:F3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f4c8a2a-83fa-465e-8b41-32661fce3929.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:6080::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:52:d1:b6:c7:5a:99:e6:84:ff:7d:94:80:ef:65:25:56:82:
         9d:38:70:ce:7b:89:b2:c3:56:84:dd:6c:1f:cf:4d:28:36:9e:
         1f:c0:6e:6f:45:45:60:65:42:4c:f4:ca:7b:65:c7:b6:57:1e:
         52:e3:b5:ee:f9:cb:47:e5:54:fc:7a:fa:11:11:c8:b4:9a:05:
         e9:fa:92:99:68:98:b7:f9:b4:46:05:68:18:f9:4e:59:c8:36:
         59:50:24:81:88:4a:f3:d7:96:4e:72:9d:46:76:ed:00:ad:5c:
         52:ea:e0:e7:22:e7:5f:2f:96:e5:ae:45:5f:83:d5:93:d0:ca:
         c8:d4:4f:04:0b:16:04:29:dc:d0:b3:da:a6:03:67:87:6a:56:
         1a:2a:1e:bb:a8:06:93:77:f9:a2:ca:7c:32:c0:13:f8:5a:5c:
         3a:b1:44:21:8b:a8:8e:91:48:2f:55:ea:af:22:70:71:1b:34:
         fe:dd:6c:43:39:4c:12:a1:3b:6a:05:28:77:9f:47:b1:82:e9:
         82:87:c2:ff:1c:0b:e3:e7:60:47:3b:19:e5:b3:2f:df:21:75:
         1e:14:6d:af:cb:1a:95:74:e9:47:01:e4:19:ca:06:e4:ad:55:
         77:c8:f2:67:1e:f5:d5:ce:02:b0:12:81:83:81:1f:c9:ea:48:
         97:5a:42:96
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----