Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d951e270-10cc-4d7e-8172-5e21dab06aa2.roa
File:                     d951e270-10cc-4d7e-8172-5e21dab06aa2.roa (raw, json)
Hash identifier:          DLCRdF423Jurmn8IKFs6uBf9XE+tE6vEgIeHj0rtRQY=
Subject key identifier:   81:C8:19:89:B1:8B:D3:0A:5F:DB:F6:63:0F:D1:A6:0F:5B:12:C7:B2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5CA3A322FBD85176659D8739174B0CE106386052
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d951e270-10cc-4d7e-8172-5e21dab06aa2.roa
Signing time:             Sat 18 Oct 2025 04:21:29 +0000
ROA not before:           Sat 18 Oct 2025 04:21:29 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:e080::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a3:a3:22:fb:d8:51:76:65:9d:87:39:17:4b:0c:e1:06:38:60:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 04:21:29 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=bdf13ecd1e4b0f942778edb39265f8ae5ec03d5dfe6182052ae50d935e406134, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:97:f0:48:79:e7:28:ed:e9:d8:3e:a2:c1:11:
                    36:4d:6b:71:e4:74:2d:e6:3b:50:6e:2d:af:89:2b:
                    0b:0c:72:5d:86:98:ce:e1:b8:ca:09:82:2a:fa:18:
                    52:25:1d:f4:1a:04:fe:56:cb:cd:a3:fc:4a:ed:ef:
                    ea:62:b9:ce:a0:69:bc:35:ac:66:f7:b2:62:4f:79:
                    03:33:9e:9c:76:86:e9:bd:cb:36:43:b5:15:03:d2:
                    28:2a:20:59:fd:5d:5d:76:2e:a4:66:56:43:fd:71:
                    f9:29:3b:a9:06:5d:4a:fb:04:1d:0c:a8:4d:23:77:
                    e2:fc:15:05:36:a9:8a:d9:6e:29:3a:43:0d:7b:cc:
                    ca:0e:10:1e:1a:e2:19:1a:84:f3:f7:5e:11:80:20:
                    b1:23:e9:4d:42:5c:a1:1c:05:ba:ab:0d:14:eb:c1:
                    73:14:63:63:b7:a2:2c:92:91:8b:fd:20:08:a9:9e:
                    25:d4:3b:28:0c:f2:6b:07:88:46:d9:60:80:3a:ed:
                    db:83:a6:4e:ea:4b:87:35:9b:58:c8:30:5e:55:df:
                    be:84:f5:00:34:07:54:9b:af:7c:3a:06:09:5a:45:
                    e8:3c:a1:a5:dc:15:42:37:a8:1a:b0:ec:8e:d4:31:
                    b1:ad:b1:f3:89:9b:71:48:43:b8:a1:3c:9c:f4:cc:
                    83:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C8:19:89:B1:8B:D3:0A:5F:DB:F6:63:0F:D1:A6:0F:5B:12:C7:B2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d951e270-10cc-4d7e-8172-5e21dab06aa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:e080::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:37:4a:69:26:9d:6d:e6:cf:bc:95:08:9d:85:22:b6:71:a2:
         af:14:d5:12:33:e8:dc:3c:6a:89:b4:6e:a0:71:9b:75:e0:2b:
         54:3b:8f:7c:f8:2a:b1:af:33:59:98:22:b3:a2:ee:e8:af:36:
         19:e6:52:c8:c4:98:ae:f6:46:e1:10:ca:8d:d8:22:39:a9:b2:
         4b:49:b2:07:46:91:c6:aa:a3:fa:8e:09:e7:0a:33:1e:4d:66:
         72:f8:a7:e5:62:e1:17:5f:12:25:72:0a:67:8a:ed:a9:29:a4:
         ce:86:8e:03:76:c0:98:47:d9:a4:aa:a0:54:f3:88:48:03:5a:
         af:1e:77:e9:9d:73:ab:81:8d:01:0d:04:49:73:79:52:b0:9b:
         e1:7d:7d:96:67:28:94:bb:5d:5b:44:eb:58:b3:5e:62:9c:d1:
         8b:01:1a:d1:56:33:a3:52:4c:bb:f8:5c:8a:b5:27:14:7f:9e:
         3d:62:83:fc:ca:61:61:05:6b:fb:e8:95:18:2d:b8:c8:53:eb:
         06:74:1f:f6:e3:20:57:91:95:ff:ec:15:fe:b0:96:2d:68:44:
         a7:9b:3e:e4:32:dc:9b:a6:ab:51:ab:7f:c6:6f:4e:78:6e:01:
         9d:ae:d6:8e:73:72:ed:8f:d7:0f:1c:4b:d4:bf:a3:98:f2:cf:
         1e:50:df:2b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----