Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a7b6bcb6-8e89-4b81-804e-96889fd99885.roa
File:                     a7b6bcb6-8e89-4b81-804e-96889fd99885.roa (raw, json)
Hash identifier:          Zl1e5sVvpKOvO6zaDloIP7+hVtzWtTqf1d+lGUzrJRw=
Subject key identifier:   FD:86:3F:20:C3:6A:A4:28:7C:52:95:7A:91:9D:DD:DF:4D:17:09:FA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0B3430420762A24E256CFF27C183CE23878FF460
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a7b6bcb6-8e89-4b81-804e-96889fd99885.roa
Signing time:             Tue 14 Oct 2025 15:51:12 +0000
ROA not before:           Tue 14 Oct 2025 15:51:12 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fec:8000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:34:30:42:07:62:a2:4e:25:6c:ff:27:c1:83:ce:23:87:8f:f4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 15:51:12 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=38527f5f42cf9c236d3bd50f6e8a4ccb8f538a5576dc559bfcd5ca3ce5b28bf2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f3:93:95:97:ba:ef:16:56:ee:2b:a1:ae:24:
                    5c:7a:89:ef:3b:e2:a7:ee:e1:81:c0:04:ee:87:7b:
                    6c:7f:14:72:fd:dd:52:87:de:1c:d2:81:43:91:64:
                    38:8b:65:15:49:0e:20:2e:8e:c0:8f:7d:2d:cf:ea:
                    fb:ba:94:bc:7f:4c:e2:32:76:45:4d:b1:39:cf:e5:
                    72:ec:c9:61:ab:57:7d:55:98:1c:22:4d:fd:51:68:
                    6a:5e:66:cc:1d:20:28:e6:49:02:2f:f7:e3:ad:5c:
                    d0:d7:6b:f1:eb:79:d4:29:2b:c9:c7:ee:04:80:77:
                    3c:18:ea:df:b1:9b:7e:79:5a:fd:19:e6:39:11:da:
                    d1:37:0a:6c:b8:b7:69:e1:b5:50:ed:41:b0:81:b1:
                    2a:76:5b:e6:b2:c8:36:5e:f1:4a:8a:37:d6:ac:29:
                    86:79:88:bf:16:b1:48:ed:da:a7:bd:bd:de:02:92:
                    90:a6:33:02:85:65:5c:15:64:d1:bf:c4:d2:05:0c:
                    f9:de:9c:b9:56:74:ee:a9:a3:b8:82:ad:57:3c:d4:
                    b0:6b:f2:de:6c:2f:67:ea:d6:66:85:a8:88:83:ce:
                    da:b4:53:4c:5d:c5:ab:4b:a6:c7:fd:ad:4e:56:4d:
                    d4:ae:64:46:4e:7f:53:00:b9:a7:eb:c3:fe:94:56:
                    cd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:86:3F:20:C3:6A:A4:28:7C:52:95:7A:91:9D:DD:DF:4D:17:09:FA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a7b6bcb6-8e89-4b81-804e-96889fd99885.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fec:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:de:71:8b:4c:4f:bf:ef:5f:0d:dc:c7:b8:aa:63:b8:7e:89:
         7a:2a:32:b2:c2:ba:01:9b:ad:fe:0f:1d:d3:54:81:15:1f:63:
         e6:d2:d5:48:8f:f4:ba:7d:bc:fb:e7:3c:ac:bb:f5:de:1a:d3:
         a2:96:9d:f8:9c:00:12:9d:02:e7:8c:7d:9c:dd:ac:e0:4c:d6:
         b5:b4:38:98:5e:55:b7:06:f0:fe:77:49:1f:60:89:a1:47:8f:
         a3:5a:6f:60:16:f9:43:2d:22:3a:b8:95:99:04:b5:12:d7:4a:
         25:d8:56:68:23:be:5c:00:ed:a2:4a:22:48:71:e8:81:78:46:
         33:df:52:45:7e:fb:04:e5:db:b4:de:ac:0f:bf:36:ee:b7:97:
         00:19:b3:55:91:c2:e9:1e:42:64:7b:d5:b2:fd:69:72:14:02:
         1c:b6:0e:b4:a1:b8:05:ec:3a:22:c4:a9:01:66:da:c8:34:51:
         da:a7:15:b9:c1:4f:8b:f3:40:4f:11:f6:d0:64:57:34:01:a5:
         b8:10:41:50:7e:f4:76:69:54:ad:61:23:ac:a0:0f:df:2c:1e:
         88:0f:fa:52:fa:ac:cc:c7:3c:e2:8e:44:9e:19:2d:b7:14:7f:
         0d:e9:bc:a8:c3:a6:d9:64:9d:b8:6e:f4:60:ce:ce:6f:12:bd:
         ca:72:6c:e3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----