Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0a96416-5af5-491b-9304-164e9269c69c.roa
File:                     c0a96416-5af5-491b-9304-164e9269c69c.roa (raw, json)
Hash identifier:          ypZIOCSxP8oHonQaK4VdhxEFx04s9lDDEbk7Tz7HlcY=
Subject key identifier:   D3:CC:6C:ED:A8:20:E0:57:6A:DE:49:88:5F:9F:F4:DB:65:5B:78:A0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6B9C5B240B0D9AD47078FE12E5AD571281E91B16
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0a96416-5af5-491b-9304-164e9269c69c.roa
Signing time:             Fri 17 Oct 2025 21:10:08 +0000
ROA not before:           Fri 17 Oct 2025 21:10:08 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f61:4080::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:9c:5b:24:0b:0d:9a:d4:70:78:fe:12:e5:ad:57:12:81:e9:1b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 21:10:08 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=fa0b52624dc576ee0be944e46f7c622f350011000ca70d81396da3b2391f8fd4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cc:14:bf:d4:53:ba:3b:ff:00:3c:f6:76:54:
                    d9:38:67:3e:89:ea:d1:74:c3:24:4c:f5:16:e5:2c:
                    26:6e:b8:23:8e:82:32:e0:54:3d:68:16:ac:8b:54:
                    05:e2:28:73:0b:15:1b:24:5a:c1:36:96:90:63:b5:
                    0e:d1:09:b7:7c:da:07:49:ab:62:9b:0b:b4:a8:d8:
                    b0:b9:92:1f:1d:3b:88:b8:9f:63:30:01:b3:cc:29:
                    f5:a6:fa:bd:43:ad:10:d7:8a:67:9a:11:ec:8f:21:
                    7f:1a:7f:8f:65:a7:d7:d9:8f:03:f8:ba:36:60:15:
                    a0:85:0e:d7:6a:4b:1d:de:3c:20:27:73:ff:b7:35:
                    d5:d1:87:9c:af:2c:42:9e:ab:61:a5:8d:c9:ab:1a:
                    c6:ff:a6:f3:7e:2e:c7:67:40:53:9b:04:72:78:67:
                    c2:45:b6:9c:68:ee:12:b2:a7:c4:f8:e0:c9:6c:7e:
                    f3:58:0e:3d:d7:85:7e:c2:9e:3f:04:d4:ea:14:3f:
                    18:17:83:59:00:3d:ae:89:fc:33:d9:19:4a:76:dc:
                    3f:6f:8b:5c:4b:c8:90:66:b9:63:65:0a:a0:58:b2:
                    66:c1:71:42:90:e3:f1:77:d1:c3:a3:79:68:5a:ea:
                    64:b0:4a:88:79:1e:e0:54:99:3a:d2:1d:9d:e5:c1:
                    e5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:CC:6C:ED:A8:20:E0:57:6A:DE:49:88:5F:9F:F4:DB:65:5B:78:A0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0a96416-5af5-491b-9304-164e9269c69c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:4080::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:af:93:e2:ad:e4:9c:64:74:5c:44:50:9f:72:01:40:c9:df:
         93:38:c7:d1:47:e5:c7:4c:c9:52:ff:c5:91:e8:76:89:3e:32:
         e6:ac:43:56:4d:a9:fa:fd:2d:be:d0:9f:12:ac:75:45:df:2f:
         86:c6:84:f5:e3:cb:78:69:b1:a3:b3:42:a8:37:4e:70:3f:c3:
         38:22:46:13:78:74:f2:d5:2b:0d:24:8f:3b:ac:da:91:9f:ec:
         14:b9:0f:e5:93:7a:94:c8:c6:00:3d:0b:b1:91:e7:52:bc:9d:
         e4:59:94:c0:4f:fb:3a:9a:db:94:0a:c8:15:b3:f2:b9:0f:5e:
         77:56:03:d3:4b:09:74:f3:17:fe:97:a1:2b:9e:e1:bf:2c:e9:
         12:54:d0:86:e9:15:ca:1a:66:46:55:9c:56:54:a7:64:2b:c2:
         13:ba:ed:8a:e2:98:cd:7f:ff:8b:6c:f8:f5:ad:de:0b:f9:b9:
         7f:f1:98:e6:1f:55:d8:19:84:91:5a:ed:53:97:10:89:f1:de:
         e2:1d:0a:8e:a9:3f:70:9a:02:fe:61:78:15:ea:07:4e:5d:a7:
         3f:72:ff:a7:d3:6a:92:86:86:c0:55:46:25:0a:9a:fe:60:e7:
         8f:63:66:a4:ef:cc:73:3c:b5:fc:3a:8e:19:1e:b3:c3:c9:db:
         f3:8c:7c:f9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----