Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf5e7b2b-aedf-447a-98b0-85c775c5698d.roa
File:                     cf5e7b2b-aedf-447a-98b0-85c775c5698d.roa (raw, json)
Hash identifier:          626lfcYvKV3gp3VMSWOh57Mop8pua0EeI5s1PFveUlI=
Subject key identifier:   96:AA:A8:6F:D8:C2:4A:69:7B:F3:DC:CF:74:A7:2E:7C:97:76:73:EC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       79DE9C7D026645DAE84E5ED6792B45A4959FC6C8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf5e7b2b-aedf-447a-98b0-85c775c5698d.roa
Signing time:             Tue 14 Oct 2025 15:52:01 +0000
ROA not before:           Tue 14 Oct 2025 15:52:01 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff8:2c00::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:de:9c:7d:02:66:45:da:e8:4e:5e:d6:79:2b:45:a4:95:9f:c6:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 15:52:01 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=04ee83a5f8a1b2fc398b7a0261167368f163922c79c0c317d96fdaf68efbf30a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:be:16:d2:72:62:2b:de:a7:0e:a6:e6:57:6c:
                    58:19:9b:a9:be:d8:6d:d7:53:5e:ac:27:24:cc:0a:
                    9c:ee:9f:70:a3:53:85:f4:d9:aa:74:fb:8e:64:87:
                    d6:ed:94:bd:0b:d4:c0:2a:99:83:d0:e7:a4:23:4e:
                    6b:db:4e:9d:a6:b2:3e:0e:4a:3a:7f:1b:29:27:71:
                    48:a3:70:f8:45:0c:b0:ac:44:ec:92:5d:c3:34:0c:
                    a0:71:c2:e6:4f:fd:93:03:c7:59:8b:52:66:83:bc:
                    03:8f:02:10:6e:02:cf:2b:17:39:37:c0:d9:bc:34:
                    09:ea:01:5a:df:b5:20:d0:51:88:44:f0:b7:c5:71:
                    4f:92:79:c7:d1:60:45:74:f9:f3:d5:98:9a:a2:30:
                    04:59:ed:ac:25:7a:3c:c5:ad:0e:2c:0f:a6:17:d0:
                    bd:89:08:6d:fa:f9:8b:35:05:81:bd:e3:3e:98:81:
                    e1:1f:6f:bb:70:ba:1e:c7:64:7b:a6:28:2c:8c:16:
                    bf:98:bd:6b:4e:d1:5b:f6:33:db:42:15:ce:b7:16:
                    28:13:fd:22:e5:f2:0f:7d:79:23:12:7e:20:1e:cb:
                    20:5e:34:7f:4a:b0:52:c6:55:28:32:cb:ad:9b:6f:
                    cd:2b:ab:98:d2:ef:fd:56:f8:ae:c5:1e:cb:03:a7:
                    e3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AA:A8:6F:D8:C2:4A:69:7B:F3:DC:CF:74:A7:2E:7C:97:76:73:EC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf5e7b2b-aedf-447a-98b0-85c775c5698d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff8:2c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         ab:2d:58:26:10:48:e6:fa:f5:2f:3a:3e:a2:f5:9d:9e:93:b0:
         bc:2a:eb:7b:e6:5c:e7:9a:86:e0:a5:57:85:07:e5:39:72:db:
         c9:52:9a:4c:d5:30:e1:f4:9f:bb:99:38:f5:0d:de:49:6c:58:
         2d:cf:8b:f6:ab:c4:e2:a7:dd:aa:a0:e0:0f:20:3f:e9:4c:cd:
         e6:48:b4:e5:2f:aa:c8:fc:f4:d9:1f:9b:47:53:8f:0e:97:f5:
         57:d2:21:a4:07:77:a8:c0:f4:10:79:d3:10:64:89:f5:a3:15:
         3d:72:72:72:8b:51:f0:9a:1a:20:32:4e:aa:29:25:3b:02:5e:
         91:a6:29:10:25:59:49:b5:10:78:58:78:f3:c0:03:ad:9b:32:
         bb:7a:e6:46:7f:cf:ca:e4:67:d7:13:04:09:17:b0:27:1a:83:
         76:f2:66:3f:0c:3a:50:7c:a4:d8:2d:8e:04:b2:10:7e:61:d7:
         fb:32:b8:14:3c:19:31:ac:66:5e:8c:42:74:93:ff:9e:e0:08:
         d4:d5:1f:2f:42:5b:df:d2:08:54:bd:24:46:93:4b:de:b1:58:
         b6:b5:a5:37:f7:44:96:68:98:e4:51:59:69:30:bc:c4:ea:44:
         76:f7:91:bc:51:62:24:95:f0:ba:27:fa:3a:a6:32:e2:4e:fb:
         78:2e:d3:f5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----