Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2449603-a2b3-44df-ae94-c2ddb5ea8f63.roa
File:                     a2449603-a2b3-44df-ae94-c2ddb5ea8f63.roa (raw, json)
Hash identifier:          nBtPaxcdbZXMm4ez1+17vvGNh5RtJbPakTJ6Pqa3z2M=
Subject key identifier:   DA:9A:1A:1D:0E:A6:B7:B6:F7:4D:8F:0E:43:74:DD:3A:00:2C:91:6C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1A0818F4F9BFF9DC170BFF88E243235203C3A424
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2449603-a2b3-44df-ae94-c2ddb5ea8f63.roa
Signing time:             Sun 19 Oct 2025 00:00:07 +0000
ROA not before:           Sun 19 Oct 2025 00:00:07 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fed:2000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:08:18:f4:f9:bf:f9:dc:17:0b:ff:88:e2:43:23:52:03:c3:a4:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 00:00:07 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=f6d9d2e282a6258b77f26755dcc62c5a13b8b4c7700bb04a6e188f52adba1504, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7a:b7:76:ec:d5:2a:13:10:bd:28:d9:d5:c4:
                    de:4c:85:0c:17:39:d8:19:90:3b:6d:fd:fe:3b:c2:
                    dc:2e:79:f1:fb:bb:51:8d:22:7f:56:6e:36:d8:8e:
                    0b:ee:96:c3:17:19:b5:2e:31:2e:95:3c:8d:bd:97:
                    95:c7:b7:3e:86:3d:78:c3:b2:4b:d0:df:8f:d5:12:
                    7a:e3:80:04:4d:30:be:c0:8c:10:2f:d5:14:10:5c:
                    99:ff:93:1e:76:39:ac:53:c7:d6:36:db:a7:8c:01:
                    8d:2a:ef:51:a8:c1:28:b2:99:e1:e7:29:86:a7:39:
                    93:5e:d0:b8:c5:2b:0d:ac:2a:a6:74:c1:dd:67:e7:
                    f1:67:9b:3a:9e:e3:cd:77:12:4d:20:3a:11:43:96:
                    43:2b:e3:bb:0b:ec:14:92:92:c4:28:af:f0:3d:23:
                    df:8d:78:ae:cd:aa:04:64:ab:12:30:66:ef:84:f7:
                    52:8a:49:a6:8f:57:44:75:df:68:6e:91:f1:c4:56:
                    c3:ee:dd:ce:2b:66:12:8e:13:8d:41:5a:f4:8d:99:
                    8f:af:24:25:f6:48:7c:ae:da:ca:46:59:c8:b6:01:
                    6d:e1:cf:3d:9d:3d:8e:73:65:d7:92:72:8e:57:a3:
                    81:39:ab:3f:89:bf:72:ed:ec:66:15:51:58:ae:33:
                    ad:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9A:1A:1D:0E:A6:B7:B6:F7:4D:8F:0E:43:74:DD:3A:00:2C:91:6C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2449603-a2b3-44df-ae94-c2ddb5ea8f63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fed:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         cb:cd:a2:41:8a:88:05:f6:f0:fc:25:73:ec:d0:7c:60:bc:6d:
         dc:49:87:14:a1:51:f4:24:69:87:f4:f9:94:e9:2a:1e:f8:cd:
         e5:b8:f0:e6:22:f5:da:8f:5d:ba:2d:89:84:31:65:da:ef:a7:
         9c:3e:fe:81:87:68:89:fe:a7:b4:09:87:cc:2b:93:a2:07:16:
         4c:39:99:56:c2:b7:52:0f:3b:8b:4a:8b:3b:12:99:8c:43:22:
         df:0b:17:ea:b8:b7:14:85:1e:02:41:24:15:31:29:3d:92:f9:
         c3:28:87:a3:a2:2c:78:39:8d:78:06:8d:10:0d:d6:cf:06:89:
         c8:34:32:b2:c0:5c:30:88:09:39:3f:20:7d:59:69:1d:5a:aa:
         a6:ed:25:2c:9d:69:ab:92:b2:36:30:d9:8e:02:02:3f:a5:73:
         49:b5:34:93:9d:c0:cb:d5:d9:4c:cd:c8:7b:9a:22:e5:e7:8b:
         d4:49:6d:0f:a1:59:56:81:80:69:69:ee:38:fa:3b:ee:8c:1f:
         12:da:69:9f:05:27:af:b3:a5:b0:2a:00:fb:8f:10:29:33:d2:
         e4:6b:9f:8d:ce:3f:18:f5:89:53:75:9e:3f:ae:45:57:dc:c5:
         06:d2:56:bd:70:31:75:2a:91:81:2d:ec:fd:59:3d:ee:4f:2a:
         34:c3:0e:fc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----