Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc686c30-860e-433a-9714-25f4fb36d587.roa
File:                     cc686c30-860e-433a-9714-25f4fb36d587.roa (raw, json)
Hash identifier:          oKrDXr1KLINc+cb8AP13q6llrNU4pQM+f7d7xlSR4AU=
Subject key identifier:   26:C3:22:F1:E5:E1:DC:F2:00:73:56:8C:3B:45:D9:9C:E4:86:CB:25
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5C183142CC854C6B8F12970CB0D14A065431A7D1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc686c30-860e-433a-9714-25f4fb36d587.roa
Signing time:             Fri 26 Sep 2025 00:39:35 +0000
ROA not before:           Fri 26 Sep 2025 00:39:35 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f2a:c000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:18:31:42:cc:85:4c:6b:8f:12:97:0c:b0:d1:4a:06:54:31:a7:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 26 00:39:35 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=f1371c092183aadc912197bc26385357e65aa89b8ab6ec37aadac15ef0606eae, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e8:1c:dd:a6:36:18:e7:e0:fe:8c:05:a3:58:
                    8b:83:c3:37:cf:29:5d:5e:ec:51:70:45:81:72:2d:
                    2d:d3:84:80:6b:29:2f:5f:f5:46:d9:08:bc:25:e5:
                    f5:5a:75:bb:74:46:a6:0b:4d:0e:17:7b:a6:db:bd:
                    59:d1:71:d0:94:1e:49:81:28:d5:14:7c:67:01:18:
                    9c:48:7c:e1:00:e7:87:b0:68:07:c9:53:cc:bf:3e:
                    c3:c3:7d:43:61:b2:7e:22:8a:cf:14:c8:3c:0d:e3:
                    11:66:8c:0e:35:8b:57:3a:6a:0a:1d:06:e6:da:6d:
                    97:f0:62:fb:84:37:df:63:c7:24:58:55:15:bc:cd:
                    16:34:99:6b:5f:e6:3e:63:31:13:a3:75:f4:32:39:
                    39:4f:c6:1a:73:a2:14:b6:bc:a9:e3:86:a1:2a:16:
                    54:c2:7a:f2:5e:bc:38:ca:f2:52:e6:2a:60:31:53:
                    01:15:b1:77:9c:a9:8c:84:93:fb:a9:7c:9a:6b:cb:
                    fc:2a:2b:f9:d8:11:60:a4:13:5f:a9:f0:1a:37:86:
                    2e:bc:40:3f:db:23:de:b7:05:d6:37:3a:b4:36:b7:
                    53:d8:bc:37:83:c9:09:43:30:ad:50:8e:9d:e6:5e:
                    32:8a:d6:b6:17:83:43:aa:b7:94:db:6c:14:36:e5:
                    29:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C3:22:F1:E5:E1:DC:F2:00:73:56:8C:3B:45:D9:9C:E4:86:CB:25
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc686c30-860e-433a-9714-25f4fb36d587.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f2a:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         87:d9:7e:4f:0d:fd:4d:d4:c3:ed:1c:54:b3:a9:38:da:5a:c1:
         4c:0d:86:8e:d5:23:6c:1b:52:18:71:91:d5:07:ca:8b:e7:90:
         13:7a:3b:67:19:e9:0e:90:65:e1:e7:4c:91:44:88:45:f6:dc:
         23:e5:55:21:a5:bc:33:68:46:34:4d:84:cf:6d:a3:35:de:87:
         6c:8a:54:24:5d:01:df:bc:40:d2:5e:b4:11:e6:d8:4c:e2:cf:
         71:21:e4:b5:4a:e8:ae:47:08:0f:ea:a1:aa:7e:e6:b8:16:87:
         94:b3:38:a4:67:d1:03:fc:1a:17:68:33:1d:e5:c7:6f:62:9b:
         38:80:ae:bd:c4:80:da:0c:2e:b3:3b:77:d6:8a:94:c5:25:55:
         b2:b3:82:32:e9:29:ed:4a:b0:75:05:d6:26:f5:6e:fa:ed:d5:
         bc:6f:42:90:8e:2c:47:b4:5c:70:39:2f:90:61:10:0f:7f:32:
         4b:53:b0:04:f4:17:a1:9a:36:d2:67:8a:22:45:46:7a:7f:e9:
         95:8f:0f:3c:02:c6:d4:15:ba:4f:f3:95:14:d7:65:2e:1a:c4:
         18:92:79:67:08:96:60:dc:34:10:71:8c:b0:2b:82:17:a2:d3:
         19:36:bd:78:de:03:03:0d:72:ae:94:dd:0e:a5:02:68:d3:6f:
         5e:d4:b4:a2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----