Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d738f0c4-b45b-4ffe-a0ef-4be44cf7fee6.roa
File:                     d738f0c4-b45b-4ffe-a0ef-4be44cf7fee6.roa (raw, json)
Hash identifier:          lLEEiLWYGr2sIY5r24/KrT4X4qTss8y2GQnWJmARZSM=
Subject key identifier:   03:E9:6E:C9:AF:CD:29:1F:6F:14:E9:DD:FC:40:90:35:39:89:D0:71
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       11183D84D862C7B1E403F59E59A1E0E4DEF97614
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d738f0c4-b45b-4ffe-a0ef-4be44cf7fee6.roa
Signing time:             Sat 18 Oct 2025 02:31:06 +0000
ROA not before:           Sat 18 Oct 2025 02:31:06 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f29:4000::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:18:3d:84:d8:62:c7:b1:e4:03:f5:9e:59:a1:e0:e4:de:f9:76:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 02:31:06 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=ca68854f38da8cc1152ef2ee0b7b0f783a14ac1200558da492b7d1be8f43901f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7f:da:7f:4e:13:99:8c:cd:35:69:de:1d:ec:
                    e3:3a:b0:e4:72:f7:06:d9:7f:30:23:34:98:dc:92:
                    23:39:a7:3a:ce:dc:37:d3:40:fc:57:0d:a6:4e:52:
                    1b:c2:4f:e6:54:34:93:4a:2c:e3:e9:0e:4b:ed:f7:
                    7e:a5:ee:84:de:6e:de:94:6a:f0:6b:3b:1b:d9:3f:
                    03:d0:de:d1:da:5e:56:2f:14:02:6c:b9:8a:c7:aa:
                    0b:4e:78:11:5b:fb:bd:36:14:0e:fa:4e:65:f3:a7:
                    aa:f5:5d:a5:de:de:04:b0:8d:07:fa:d5:e4:59:f5:
                    6c:43:fa:21:1e:c2:a3:c2:80:cf:35:ad:33:90:05:
                    f6:1f:62:a9:96:d1:65:db:c5:c2:56:59:13:e3:0c:
                    55:cb:0f:1b:d9:9d:fd:25:9e:d5:f0:6f:06:c1:18:
                    59:8e:e5:d6:c2:e3:f9:d3:bc:24:0a:ba:94:56:d3:
                    8d:f7:6a:10:af:4e:41:e8:35:6c:e9:66:11:43:00:
                    ed:83:e9:c3:ca:aa:95:0d:51:dd:ab:5e:27:43:a2:
                    fc:3a:bd:7a:04:33:21:4f:9b:ca:32:6e:3f:97:0a:
                    7f:20:b2:3f:42:2f:be:2f:90:8c:61:3b:cd:9a:7a:
                    db:b8:8a:c1:60:0e:57:6d:b7:31:1f:04:37:89:8b:
                    07:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E9:6E:C9:AF:CD:29:1F:6F:14:E9:DD:FC:40:90:35:39:89:D0:71
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d738f0c4-b45b-4ffe-a0ef-4be44cf7fee6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f29:4000::/37

    Signature Algorithm: sha256WithRSAEncryption
         3c:f4:a9:69:c9:f1:57:61:bf:a9:32:3a:17:8b:d7:f9:98:95:
         6d:1b:b9:be:ca:64:92:9e:eb:05:33:14:3f:4f:61:4a:57:06:
         e0:be:2d:02:a1:ee:0d:f4:91:0f:18:62:4d:ad:65:7a:2f:72:
         b6:0a:53:ca:69:65:de:8c:29:6e:eb:1e:1b:5f:e5:43:c4:24:
         8c:9b:0f:af:24:01:82:32:bc:aa:56:c7:4a:09:36:a5:e5:e0:
         30:a9:f8:cc:9a:87:e2:c8:e5:f8:e2:91:2d:08:f2:5b:ac:4c:
         68:c5:db:80:03:5f:f1:54:2e:e2:b4:6e:bf:20:1e:85:87:d3:
         77:d1:0e:70:8d:11:f8:2c:1d:1f:db:ec:08:30:99:c0:7c:54:
         0b:4f:12:3b:03:05:e6:c6:1d:a2:1f:eb:73:79:2b:f6:6a:11:
         94:0d:f7:2e:e6:77:b1:90:05:4e:86:5e:13:72:53:ad:3a:ad:
         bc:7f:e1:03:f8:45:ba:76:9e:81:f8:ea:7f:af:aa:48:e2:97:
         14:5f:50:5d:a5:3b:2c:d2:29:22:9b:2c:9c:ac:6a:33:73:50:
         d4:40:7a:7b:af:f5:7d:c8:f6:f6:0b:e8:ed:9f:55:f8:bc:d8:
         40:56:16:21:4e:5f:94:77:f4:0d:a1:b4:fc:4b:38:d8:6f:21:
         a1:5f:45:55
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----