Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abca4e34-4067-4f69-a8e5-ff555a04b157.roa
File:                     abca4e34-4067-4f69-a8e5-ff555a04b157.roa (raw, json)
Hash identifier:          teOSb9hqS0sPdDzEBI7ZRN69oYDOpVNALRofDsm4sRg=
Subject key identifier:   D4:C2:94:DA:FE:34:64:64:F4:90:6F:BE:0F:F3:7D:73:F2:F0:76:D2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7FE2B3A9BC6082138BCE06E66B4CE6680193A66A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abca4e34-4067-4f69-a8e5-ff555a04b157.roa
Signing time:             Fri 17 Oct 2025 20:51:27 +0000
ROA not before:           Fri 17 Oct 2025 20:51:27 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:8180::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e2:b3:a9:bc:60:82:13:8b:ce:06:e6:6b:4c:e6:68:01:93:a6:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 20:51:27 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=c53437955a75186f8006a0cdca2ca71c4cc2808564ed7224f93bf30b249cf9a3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bc:1b:8a:97:44:29:6e:cb:bc:82:e1:d7:c6:
                    c8:73:ee:9b:80:b6:60:cc:45:ee:6d:52:1e:45:d2:
                    bb:a7:ef:17:ed:41:de:20:76:17:48:90:60:41:ad:
                    18:fd:09:ed:78:7b:24:34:ab:e7:58:6f:fc:51:4f:
                    72:2e:b7:6a:cb:34:17:91:e6:b7:31:f2:73:2a:eb:
                    15:13:d0:04:66:ee:db:1a:e4:80:54:fc:fa:61:8d:
                    80:c2:ba:da:c3:ad:72:41:03:67:f5:96:f1:9f:3b:
                    28:75:5e:14:21:4b:c5:e4:4b:5b:c6:de:09:fd:d6:
                    8f:38:82:8a:29:59:0d:b5:c1:aa:fd:f7:20:e5:fb:
                    3b:f6:3e:42:b0:ea:20:0e:b1:e1:2a:6e:b6:79:7b:
                    85:cd:7a:66:7e:d2:37:d5:a0:da:d9:eb:3e:19:85:
                    ca:f1:82:d7:49:67:6d:0a:ed:f8:89:d5:ae:c1:74:
                    ec:e3:02:ff:84:77:33:59:c6:c6:9a:8c:78:8d:18:
                    31:34:66:8e:85:68:15:c3:f0:c0:e8:94:ac:b2:b7:
                    c2:99:ce:5f:77:0b:1f:96:2b:29:72:6b:3d:c8:dd:
                    75:da:87:08:24:de:55:05:ff:7e:f6:34:50:e5:57:
                    1c:fc:0f:d9:41:4e:ad:fe:f4:84:9f:ab:2b:b6:13:
                    42:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C2:94:DA:FE:34:64:64:F4:90:6F:BE:0F:F3:7D:73:F2:F0:76:D2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abca4e34-4067-4f69-a8e5-ff555a04b157.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:8180::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:8a:93:09:82:ae:8c:7d:d2:4d:e3:2f:78:23:3d:ac:c4:3e:
         96:56:97:23:91:b6:43:37:ed:2d:c6:82:fa:0f:4f:3f:8d:0f:
         67:92:96:fe:09:59:09:40:70:d7:91:33:f8:ca:b9:27:d7:72:
         b0:e1:84:90:4a:84:19:eb:5f:da:85:ba:74:f9:91:b8:b3:d4:
         c3:b0:cd:22:6b:ae:17:0f:14:a6:59:ef:8b:fd:66:56:22:20:
         07:12:24:88:18:f0:8c:cf:58:63:92:9a:bc:23:e1:d6:0c:40:
         45:59:f6:2b:63:37:b3:c0:85:db:4a:ef:93:c8:f9:72:8e:eb:
         8f:91:2a:4c:09:be:d8:64:b8:59:a7:6c:c2:b2:8c:23:c8:a7:
         36:63:09:d2:b3:ea:24:d7:2e:3e:76:c6:10:24:e2:b2:d9:b5:
         50:da:cb:88:ce:63:ee:b0:93:3e:41:46:2a:fe:d4:10:e8:f3:
         3e:1f:f4:52:4a:6d:2f:64:fe:5b:74:85:9a:88:06:65:99:00:
         c4:35:f2:93:90:17:e0:37:5d:c0:50:5e:ee:86:5d:5e:04:69:
         b2:54:f0:3b:ab:a4:0b:83:c6:0a:d6:71:cc:7a:79:65:eb:f3:
         0b:70:4b:20:60:fe:7a:96:e8:37:79:37:02:d8:c3:6c:0c:54:
         5d:dc:a4:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----