Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7261c78-24d2-4272-9024-ccb20bd7c040.roa
File:                     d7261c78-24d2-4272-9024-ccb20bd7c040.roa (raw, json)
Hash identifier:          GOGqoZfWRPUwGpEHJ7Q9M9r79NrOjANpkXB6FnIols0=
Subject key identifier:   6F:1C:45:D0:98:E4:95:52:98:FF:30:EA:DC:39:8C:10:DE:6B:90:F9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6EB37D840CD2119E12828239C1484C9611B04C03
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7261c78-24d2-4272-9024-ccb20bd7c040.roa
Signing time:             Mon 06 Oct 2025 15:51:18 +0000
ROA not before:           Mon 06 Oct 2025 15:51:18 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffd:8060::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b3:7d:84:0c:d2:11:9e:12:82:82:39:c1:48:4c:96:11:b0:4c:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 15:51:18 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=fee83c6cb09f53ac9d00328e9ebad1933a49e21b9a9bb82e5b7bbd91fcf60518, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:61:b3:df:eb:f8:6c:b0:b8:40:0e:cd:27:13:
                    0d:e7:59:56:4f:19:da:47:df:36:e4:68:0b:87:93:
                    d7:da:c4:3e:63:7d:d5:1d:ce:e6:d6:78:22:88:d9:
                    74:b9:ec:95:d5:d7:20:47:a3:73:40:be:f7:89:05:
                    18:ed:d0:39:5f:1b:25:27:7a:10:0e:28:a3:2f:f3:
                    eb:5f:9d:5e:ee:a9:4f:49:ef:36:31:55:c4:f6:d6:
                    1e:f1:1b:9f:11:74:b2:54:dc:1a:2d:eb:35:de:61:
                    58:27:da:82:2d:e3:4c:11:41:d5:87:d6:21:a0:3b:
                    8b:70:42:d4:cb:cd:05:d8:90:95:6e:64:06:84:ed:
                    86:ad:88:e9:26:7f:4b:e6:c1:f5:68:9c:cd:d1:f7:
                    c0:0c:d6:6d:99:89:64:4c:8e:8a:28:df:03:c0:42:
                    f6:bd:b3:08:65:49:ea:bb:9b:48:22:ad:33:79:c6:
                    6a:fa:f4:36:cd:da:7b:8e:5a:4f:60:44:01:d1:24:
                    22:33:4d:83:f7:f8:99:8d:08:8c:e5:50:a9:11:cc:
                    93:99:c0:7f:d0:a4:1f:09:ad:78:0e:0a:ea:b9:61:
                    31:9c:9b:58:84:56:ed:6b:6a:a5:f8:8f:4c:6a:0a:
                    9e:cf:88:45:ac:c9:cd:03:00:74:b4:5e:d6:27:15:
                    1b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:1C:45:D0:98:E4:95:52:98:FF:30:EA:DC:39:8C:10:DE:6B:90:F9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7261c78-24d2-4272-9024-ccb20bd7c040.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffd:8060::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:24:61:06:8e:9e:55:29:d9:f8:75:6d:a9:51:77:a6:b5:45:
         a8:e3:8b:a3:9c:f2:93:6a:7a:5a:3d:74:ff:85:a0:7e:ce:b9:
         89:93:b0:1f:8b:c5:18:e4:e1:77:5d:4c:dd:28:90:ba:90:8f:
         da:00:73:0c:13:7b:34:c7:95:86:9e:24:e5:03:d5:6e:1f:6a:
         63:35:c0:d6:e9:8b:cc:87:45:15:f6:bb:80:c3:e3:f4:0b:fa:
         de:3e:30:f1:ef:75:69:62:0b:d9:1c:89:d8:2f:97:ae:df:fa:
         38:03:60:04:03:82:0f:13:de:70:3a:c4:0b:f9:f6:31:66:56:
         a4:60:ed:4e:31:d5:26:68:c8:03:a6:43:df:83:95:03:1d:dd:
         1d:5b:f5:18:df:2c:4e:9f:6a:a9:a7:0d:50:23:00:6d:98:26:
         2e:af:58:c1:8c:34:af:c2:93:9f:8a:2b:e3:8a:78:e0:89:a8:
         47:1e:f7:cb:d3:d0:81:15:82:5a:3b:e7:47:b6:c9:b2:9c:21:
         c9:1b:59:03:bc:d0:5c:f5:aa:a6:38:c5:b6:cb:ce:00:ff:3d:
         fb:c6:6d:6b:fa:ee:9c:97:d2:2c:ad:77:f6:8f:d6:0c:fd:13:
         ef:c0:7b:51:21:ed:3a:73:58:4d:22:b9:ba:ec:b6:ae:42:3e:
         a8:1e:79:1e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----