Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6d178aa-6c0c-4bfd-b6cc-99aa8d2804df.roa
File:                     d6d178aa-6c0c-4bfd-b6cc-99aa8d2804df.roa (raw, json)
Hash identifier:          /2ElApFG/dWXD1cgIbomqXtHTI3j/flEp9TbYdA+ihU=
Subject key identifier:   5E:E5:3A:CA:06:1D:BC:44:DD:8C:F1:EF:2D:9A:33:F2:63:CB:BE:E2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       016768F029C27A7C6E23EE599F321BD79A19F2BC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6d178aa-6c0c-4bfd-b6cc-99aa8d2804df.roa
Signing time:             Fri 17 Oct 2025 21:50:50 +0000
ROA not before:           Fri 17 Oct 2025 21:50:50 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f61:c000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:67:68:f0:29:c2:7a:7c:6e:23:ee:59:9f:32:1b:d7:9a:19:f2:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 21:50:50 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=055f273a189744bed0eb41346cd1d3aefe9930b5333c0a40deb63b72b085d8a9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d8:2f:5b:80:dc:e0:12:7d:f9:33:d2:e8:fa:
                    21:75:e4:07:e3:a2:a9:f5:67:9e:5c:d9:b2:4c:aa:
                    8f:f5:77:55:02:fc:d6:dc:9c:28:6b:d2:cd:b1:cf:
                    01:fb:ca:02:ac:ea:69:4b:42:16:a3:90:b9:f7:d1:
                    ad:5b:4d:d1:54:a8:ff:b9:0c:b4:f4:9a:73:d8:08:
                    4d:ef:91:9b:5a:bf:82:60:79:7d:88:ac:38:e9:17:
                    84:bd:0d:dc:21:5a:4d:4a:9e:9b:ce:54:2e:a8:58:
                    9f:97:11:84:a4:06:21:4f:8f:76:8a:87:6b:20:d1:
                    9e:b5:a1:b0:5e:4e:a8:3c:75:b9:53:75:b9:84:56:
                    87:df:7e:60:8c:1a:85:62:89:98:7a:59:46:3a:b9:
                    5e:23:16:4a:be:57:55:8f:04:93:47:ac:17:6e:da:
                    2e:bd:5b:70:07:8a:a1:b2:e1:7a:4e:e0:22:3c:a1:
                    c4:20:50:05:18:c6:d9:f3:00:b4:95:98:bc:59:fb:
                    82:1a:ec:4d:70:b5:5a:0f:74:b4:04:42:d9:a2:d8:
                    a5:65:a7:00:da:c7:97:28:18:d2:dd:c6:b2:c3:ae:
                    98:55:b2:68:8b:86:9e:a3:4d:fb:32:1b:ca:f2:51:
                    a8:45:46:b1:4b:02:dd:ef:d9:bb:fa:f6:82:f1:55:
                    9a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E5:3A:CA:06:1D:BC:44:DD:8C:F1:EF:2D:9A:33:F2:63:CB:BE:E2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6d178aa-6c0c-4bfd-b6cc-99aa8d2804df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         28:a7:0c:13:a6:6c:49:c4:25:d3:2f:e1:f2:2f:11:b3:c3:e5:
         56:72:ec:31:67:79:63:70:39:4a:3e:36:3a:54:de:4c:99:98:
         d1:b1:a1:ce:36:c6:7a:97:e0:1d:25:17:ac:bc:ae:1b:4f:bb:
         2a:6c:79:1c:9a:ff:06:82:c6:59:35:75:43:ab:30:a5:ea:d9:
         a2:22:4b:aa:15:fd:5e:b3:62:09:73:7f:eb:70:a9:b5:55:66:
         93:22:a4:82:af:20:50:c5:06:58:cb:8a:29:8d:6a:ec:73:ac:
         8e:a5:cd:e7:47:b7:b7:a7:12:3a:ab:a0:e9:e0:cd:29:fb:70:
         ab:9d:1a:f5:2c:4f:38:9e:8e:0c:37:c3:7f:79:81:8c:b5:22:
         c4:14:a1:53:bc:fe:c0:ce:52:6b:84:0a:0e:d4:ad:56:1f:ef:
         b9:67:85:4b:81:46:95:47:da:2b:f2:26:e4:1d:6f:54:45:20:
         39:73:a5:25:c6:c2:02:9a:1c:13:36:6a:75:b9:b3:f6:df:30:
         86:d4:38:99:ca:a9:e3:0c:47:a5:c3:87:58:31:91:59:9a:4c:
         3c:8e:c0:40:77:50:f3:a4:7b:2d:45:41:c5:93:b2:3a:ba:4a:
         55:34:67:cd:0b:57:6a:22:c3:df:d7:7a:44:6b:c8:90:cc:b6:
         72:13:a2:bb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----