Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7fd3b9b-ce27-4690-920b-774b7d5ae223.roa
File:                     b7fd3b9b-ce27-4690-920b-774b7d5ae223.roa (raw, json)
Hash identifier:          a19UvS3cLPfkMUAIpPVzz9mYtrEFqf9bjy91Qk/qo9Y=
Subject key identifier:   94:95:FF:1F:9B:54:73:1E:70:AD:1B:91:B9:C8:D5:D3:18:56:93:71
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7ABE90D296AE6B85C15EC2523DE8A7F688CFA571
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7fd3b9b-ce27-4690-920b-774b7d5ae223.roa
Signing time:             Fri 17 Oct 2025 20:20:15 +0000
ROA not before:           Fri 17 Oct 2025 20:20:15 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f61:8020::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:be:90:d2:96:ae:6b:85:c1:5e:c2:52:3d:e8:a7:f6:88:cf:a5:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 20:20:15 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=7b6bcb5f4ef1b9127651a0d78b3503019ac3ef949803ecc46a978e644bda54b1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ef:c1:5a:8a:a5:20:c2:22:18:f6:0c:6f:59:
                    3a:6b:e3:68:3b:42:ef:f0:00:c9:bb:2e:90:89:9e:
                    21:d0:bf:da:6d:78:a6:72:48:08:68:27:f5:fe:2b:
                    7d:1b:04:ff:79:0b:ff:25:b2:e9:b4:b3:0a:ab:eb:
                    20:6e:1e:d7:0b:1d:c0:e3:02:54:33:34:59:55:9c:
                    50:1d:ae:ab:0d:5c:1a:16:69:2d:fd:f0:fd:91:7e:
                    e4:e4:29:56:8d:8b:bc:90:3e:56:68:34:27:a7:97:
                    f4:81:ab:43:a5:5e:b2:b9:93:7a:f3:57:11:bb:2a:
                    fa:f4:b0:5c:59:dc:42:ea:b1:fe:de:52:b0:a9:1d:
                    d8:1c:33:cd:80:ad:10:50:8d:4a:45:f5:ca:72:b4:
                    41:9f:2e:be:ec:6a:a6:8f:1e:20:25:4d:08:b1:4e:
                    7d:2c:50:b8:26:6a:9e:08:61:84:e2:d6:4f:0f:23:
                    d6:3f:e9:8c:8b:3d:c5:60:68:f5:96:ed:42:15:ec:
                    98:b9:11:c1:81:ee:db:85:8c:fc:dd:a8:52:3e:c0:
                    cf:34:4a:96:96:c5:ba:5a:f5:83:48:73:36:1a:f2:
                    d3:7f:3e:c5:05:30:b7:cc:5b:f8:03:2f:6b:c5:59:
                    5e:72:85:9b:5d:bc:2f:d5:a0:ce:26:f3:2c:d6:4b:
                    bf:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:95:FF:1F:9B:54:73:1E:70:AD:1B:91:B9:C8:D5:D3:18:56:93:71
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7fd3b9b-ce27-4690-920b-774b7d5ae223.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:8020::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:2e:2b:52:d7:67:c0:6f:c1:b2:61:77:bc:e8:6d:73:94:20:
         c3:fc:10:9c:d8:20:e9:f2:bb:6e:57:97:94:f9:a0:15:78:76:
         b2:38:d1:76:b4:66:9e:7d:59:75:ae:9a:3a:2d:8f:a7:29:f1:
         98:3a:0e:ac:5e:83:cf:0f:c0:34:f1:58:90:84:93:5c:de:39:
         84:bf:52:14:5b:b0:17:e3:08:7b:eb:8d:5a:35:74:17:7c:83:
         be:0a:77:e2:c8:8f:2e:a3:61:80:1b:af:3d:e9:6c:94:84:5e:
         85:4a:a3:2c:d6:1b:3a:7b:31:13:e3:75:b1:81:85:df:7f:a5:
         45:a2:6c:69:9e:96:df:d8:a2:62:07:b8:f0:0f:74:40:eb:e0:
         7d:be:3c:da:85:6b:22:88:a5:8b:36:de:ec:ea:31:c6:46:f0:
         1e:b8:20:44:3d:c9:1a:55:36:fc:eb:68:1c:54:3d:62:04:d7:
         4d:c1:10:f0:c5:39:dc:a3:00:2f:6c:1b:a7:8a:a3:b5:22:75:
         68:e6:89:64:ae:aa:74:96:f7:2d:29:28:9d:b5:fb:f5:3a:29:
         94:87:44:2e:28:5c:d6:ca:93:d8:e1:28:4d:0f:e6:69:91:14:
         1a:b8:fb:a8:10:38:3f:3d:4d:b8:b5:ae:4b:7e:f5:c1:8d:02:
         db:c2:ea:58
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----