Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d36c105f-a6e4-4f3a-abcb-daaff54b5e73.roa
File:                     d36c105f-a6e4-4f3a-abcb-daaff54b5e73.roa (raw, json)
Hash identifier:          1VaCVFUF9/BmTs1cZwzj9NvO5gNlBt57vk66PEOQTNs=
Subject key identifier:   7E:E4:4A:87:E5:11:E0:4A:E1:11:EC:86:7C:2C:3D:49:D0:C5:F5:D2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       056F2754EA2ED5C6A90550E597092C8A41218BD3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d36c105f-a6e4-4f3a-abcb-daaff54b5e73.roa
Signing time:             Sat 18 Oct 2025 01:11:38 +0000
ROA not before:           Sat 18 Oct 2025 01:11:38 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f1c:c800::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:6f:27:54:ea:2e:d5:c6:a9:05:50:e5:97:09:2c:8a:41:21:8b:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 01:11:38 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=857ace2e68289db24f62cbcd4ca4d21210da42bb48abfec0021fdba54d4f7587, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:05:ea:73:6c:bf:f4:73:6d:d5:c9:54:5b:76:
                    b7:59:e2:07:12:b0:49:2b:5d:d9:28:37:c1:4e:ec:
                    fa:d0:f9:f9:57:37:39:13:d7:e7:14:08:86:8b:7f:
                    2d:93:4c:c7:02:27:e3:e6:15:81:49:74:37:c2:d8:
                    81:31:a6:09:94:b7:f8:e3:7f:ef:45:73:3b:33:58:
                    f4:14:5a:e6:af:47:e9:d5:89:7a:a0:a7:6f:de:99:
                    67:17:22:e1:89:ed:b4:f8:95:22:48:41:32:a0:43:
                    a8:44:14:25:21:8b:22:97:cf:fc:bd:a2:63:e1:72:
                    6e:64:bb:f2:21:94:14:32:3d:65:fe:8f:b9:42:eb:
                    e7:6c:66:09:14:1c:8e:b7:d7:64:9e:38:af:a0:40:
                    60:19:ce:d7:24:bd:23:91:e6:4e:92:bc:0f:64:9c:
                    c0:25:d4:79:47:53:ab:08:0f:25:e9:bb:fc:f7:23:
                    a6:c8:95:83:62:5e:3d:df:55:7c:59:1f:20:74:d5:
                    6d:76:4b:b6:ef:77:cc:76:b6:3c:c1:a4:af:e4:ef:
                    31:36:46:7c:1a:62:6b:df:52:f4:61:33:ac:68:73:
                    82:7b:30:eb:52:a9:29:65:ad:bd:93:64:42:cf:3d:
                    e8:78:50:fb:ce:98:8e:55:e5:fb:19:2d:51:70:17:
                    34:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E4:4A:87:E5:11:E0:4A:E1:11:EC:86:7C:2C:3D:49:D0:C5:F5:D2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d36c105f-a6e4-4f3a-abcb-daaff54b5e73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1c:c800::/37

    Signature Algorithm: sha256WithRSAEncryption
         38:cb:54:28:53:aa:c8:ed:44:a6:4f:fd:c0:a8:a8:2d:12:2a:
         b9:e8:9c:f0:db:44:af:67:74:ba:dd:71:d3:a5:f7:4b:b5:1c:
         24:9a:ec:97:ac:ba:b5:37:bd:a1:b7:1e:13:18:ec:0a:85:3c:
         ea:b8:6c:f5:e3:2d:d4:d3:33:54:04:2c:82:0d:f2:6b:a3:50:
         ab:39:a1:b1:17:26:c1:40:20:c0:ac:b9:b5:91:5b:ca:e8:2e:
         b6:1a:f6:fe:8e:70:41:12:32:e4:c8:1e:02:be:c0:4b:12:e3:
         48:fc:b4:1e:fc:e6:e3:c1:49:e3:e6:73:8b:5a:64:f2:18:98:
         3f:50:25:0f:7c:93:08:43:2d:15:91:37:e6:43:38:ed:79:11:
         49:43:ef:b4:fd:9a:ce:8b:01:09:49:6c:7a:17:cd:2f:ef:01:
         02:3c:8e:08:c7:9f:59:66:61:34:b9:5c:f9:c2:33:05:12:e9:
         9d:56:af:11:24:1c:83:0d:7f:fd:e4:5c:2b:5c:81:d2:01:b8:
         87:19:c2:ba:a5:27:1b:28:4d:24:dd:71:74:66:ba:d0:f2:16:
         02:54:36:64:09:39:ae:8d:4f:10:cd:e7:d7:b2:42:94:7a:da:
         34:d0:0d:17:32:cc:78:2c:19:b2:ee:ec:0e:a0:79:a1:82:bb:
         2c:a2:c5:7b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----