Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6886096-9e4e-4fe8-846e-f196a932065c.roa
File:                     b6886096-9e4e-4fe8-846e-f196a932065c.roa (raw, json)
Hash identifier:          2mXTn4O8jI6p6+3zDc+34WO+R21rk2DJ8QP6qwxdyoA=
Subject key identifier:   07:91:F4:E4:1D:D7:7C:C3:F3:E5:FE:7A:C1:D3:C3:3B:58:5F:E5:0B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0A2FF95504294D42F856F0F65F6733305B8A57A2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6886096-9e4e-4fe8-846e-f196a932065c.roa
Signing time:             Sat 18 Oct 2025 04:10:05 +0000
ROA not before:           Sat 18 Oct 2025 04:10:05 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:a400::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:2f:f9:55:04:29:4d:42:f8:56:f0:f6:5f:67:33:30:5b:8a:57:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 04:10:05 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=4ab4a06520fe9c291b06d809f9066ee80d92608f0f558bad261f1b34fe15795d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:55:e2:1d:72:79:cf:ff:a3:77:d5:90:a3:d7:
                    8e:98:d9:f2:55:d9:82:60:dc:14:65:70:e7:aa:33:
                    21:f6:20:c0:a5:01:f0:56:16:29:9e:fe:27:51:23:
                    ba:f3:49:56:29:ac:44:38:bd:d4:10:dc:ea:71:ff:
                    ae:d8:86:80:5e:f1:e2:37:7a:da:d5:85:65:f7:e9:
                    4e:9a:19:7d:b1:54:28:8c:93:da:63:f6:ff:88:e8:
                    33:ba:7a:b1:15:3b:76:9c:ac:e6:6c:4b:f3:86:9e:
                    45:1e:9a:36:4f:dd:74:df:38:56:e2:a4:bf:b4:5e:
                    59:db:87:f5:67:27:9e:fe:5b:a4:8d:9c:9e:01:ac:
                    26:5a:66:26:5d:fa:5a:1b:1f:ed:1d:c7:75:6a:45:
                    c5:a0:9a:a2:1c:2e:9e:ba:e6:47:b8:d7:54:21:31:
                    88:fb:70:d3:49:fc:bb:a8:c2:1e:6d:20:8d:f4:9f:
                    06:31:3d:58:ec:90:20:84:b6:f1:d8:bf:da:4f:43:
                    67:f0:5e:30:33:ca:76:da:25:c0:ec:34:84:14:e9:
                    9c:d5:e3:e5:83:83:c8:7d:f0:a6:19:b7:92:1e:24:
                    94:67:78:f3:20:b6:d4:bd:b0:dd:29:e6:9c:98:ad:
                    a0:2c:a4:2a:75:49:21:17:df:40:fd:72:98:93:a8:
                    09:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:91:F4:E4:1D:D7:7C:C3:F3:E5:FE:7A:C1:D3:C3:3B:58:5F:E5:0B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6886096-9e4e-4fe8-846e-f196a932065c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:a400::/40

    Signature Algorithm: sha256WithRSAEncryption
         5e:cd:28:0c:89:cd:36:5d:85:2f:9d:91:05:93:af:fc:cd:23:
         e8:ae:2f:82:ad:62:55:cb:be:d8:09:97:43:de:cd:a5:f9:0e:
         f9:be:a0:90:08:a3:3f:15:93:36:bb:19:47:df:4b:f9:49:2f:
         ca:28:8e:e4:55:e3:b2:eb:cb:0b:db:30:1f:fe:55:46:26:9d:
         bb:93:bb:dc:32:06:c7:3f:dc:21:8e:a9:78:5b:8e:67:82:f4:
         da:39:14:c2:be:30:70:68:7d:45:dd:20:49:62:16:f8:12:8a:
         d5:dd:b2:11:8b:e5:a2:d9:4f:08:80:40:10:5f:8b:fc:39:52:
         0e:94:37:28:ed:ef:93:34:c4:26:48:e9:f1:32:b3:9e:9f:96:
         5a:2a:44:78:b9:ac:1a:8d:42:95:4a:07:cb:9f:1c:a1:d3:19:
         17:91:98:fe:b1:56:fa:d4:6a:c2:68:e6:ed:4a:29:25:3d:a1:
         60:4b:c7:cf:ef:ad:89:a6:88:84:66:9a:6b:7d:53:77:2c:ab:
         a3:e7:5a:13:9e:c2:7a:43:8c:d8:fc:07:e8:43:0d:b6:f1:28:
         cf:e6:92:1b:cd:b7:d2:d1:f5:dd:e2:b7:05:67:8b:57:e3:19:
         e4:94:72:ec:51:22:85:0e:e7:d6:c8:8f:9f:fc:20:b0:a4:58:
         47:94:67:87
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----