Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca9ad3d4-3537-4777-a23a-9af62a268421.roa
File:                     ca9ad3d4-3537-4777-a23a-9af62a268421.roa (raw, json)
Hash identifier:          zCL6Kur/zexQDr/MMcedOaCyVQ2o5Xm/YAC4VwJB7Rk=
Subject key identifier:   61:93:ED:A6:A3:F7:98:BB:47:F7:FF:79:61:C8:CA:FB:9C:47:35:9B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7796B02FD16E41E70ECE61390AC7B9C2663DDCBF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca9ad3d4-3537-4777-a23a-9af62a268421.roa
Signing time:             Mon 06 Oct 2025 16:02:43 +0000
ROA not before:           Mon 06 Oct 2025 16:02:43 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffd:6000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:96:b0:2f:d1:6e:41:e7:0e:ce:61:39:0a:c7:b9:c2:66:3d:dc:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 16:02:43 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=fe90fdca6cd937f6345a6fc15e374c9c48f7215aedc0e6c4343dc003a1bca9d1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:91:f5:58:d3:4f:5e:59:a6:db:c8:68:cf:25:
                    fa:86:1f:5f:86:8a:02:35:a0:b7:64:b3:a3:a8:05:
                    4b:6b:49:69:dd:5a:88:70:44:e6:01:90:17:a6:82:
                    ce:f9:17:61:d2:54:73:5f:42:10:39:91:96:9f:41:
                    a0:b8:34:c4:e5:08:7b:3c:01:8e:1a:0a:f1:e7:0b:
                    0c:4c:42:f6:91:9f:9c:08:9d:1b:e9:ff:7a:2a:32:
                    0c:e4:ca:0c:2f:20:d6:da:d7:18:80:e7:4e:5e:09:
                    fe:cb:f6:ff:da:cb:45:cd:04:4a:7d:ae:bb:1a:ff:
                    fe:97:60:29:23:b0:6e:32:a5:15:7b:de:8f:a2:90:
                    ba:7b:6a:4c:75:ae:35:82:fd:39:0a:55:ba:d1:12:
                    2a:f9:de:d1:77:3c:cf:19:a9:c1:e1:83:58:0a:4c:
                    38:1c:de:60:8e:9a:38:ad:ca:83:07:8a:23:70:e3:
                    66:37:54:33:9b:86:fd:3d:6c:09:a2:4b:84:29:f5:
                    1f:d8:34:8d:45:23:c2:82:3b:73:c4:f2:2b:4f:7d:
                    ef:1c:3f:92:cc:9e:a6:82:76:5d:5a:11:77:ca:d6:
                    f0:22:80:f3:26:fe:f7:49:f3:b3:3b:a3:de:e9:d7:
                    05:59:1d:ff:6f:33:69:ca:e4:e9:ee:a2:6c:4a:50:
                    0f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:93:ED:A6:A3:F7:98:BB:47:F7:FF:79:61:C8:CA:FB:9C:47:35:9B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca9ad3d4-3537-4777-a23a-9af62a268421.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffd:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         c6:dc:bb:b5:f4:59:6b:83:33:34:78:73:40:6d:dd:ad:34:5e:
         c2:34:5b:a0:71:ba:2e:d5:11:79:a9:14:4c:29:8d:87:4d:0d:
         9c:b5:9e:8e:bf:6d:df:9f:6c:35:68:23:1b:ae:de:e7:a0:b1:
         12:93:dd:7b:79:7d:35:cf:2e:71:44:cc:d1:47:67:c7:f9:38:
         98:6f:42:ed:07:2a:8b:6e:7d:64:78:c9:3f:b5:d4:01:94:fb:
         b2:dd:9d:2c:8e:ed:4f:db:5b:5b:73:c2:0e:13:f0:11:5b:75:
         15:01:13:10:c0:22:24:51:2c:07:ac:cd:74:c3:a9:25:db:78:
         38:18:04:ae:93:43:38:57:7b:66:9a:7b:b1:98:76:db:5f:23:
         e5:91:b7:0e:19:26:43:4f:3c:15:63:4b:18:69:32:e7:3b:4f:
         3b:ce:2e:47:6f:4f:98:b2:30:14:63:8e:09:29:4c:74:14:84:
         a6:75:81:48:d3:a5:db:66:e7:eb:70:ca:5a:c1:f2:ed:68:69:
         61:a6:32:f2:83:fc:e3:a4:04:01:c7:a4:5b:ad:d1:25:13:58:
         d9:65:5e:fc:ff:bc:60:cd:08:21:c4:1f:52:05:bb:60:b2:57:
         d1:c4:ee:04:91:56:b2:46:4f:11:78:09:c7:38:7b:e0:08:45:
         2f:bd:cf:9a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----