Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da3255d0-76cf-4389-be4a-976954ce70ed.roa
File:                     da3255d0-76cf-4389-be4a-976954ce70ed.roa (raw, json)
Hash identifier:          LyNGjnDl0SMs+xLa8pgaSDUNq0TtvZaWazQKEZhsbkc=
Subject key identifier:   18:89:28:05:D9:6C:33:FB:38:88:F7:30:12:A6:3A:DF:EE:86:90:BE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0663BC8A9B633737E5A85DBF9D68C8E55F4B5D5C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da3255d0-76cf-4389-be4a-976954ce70ed.roa
Signing time:             Sat 04 Oct 2025 00:41:48 +0000
ROA not before:           Sat 04 Oct 2025 00:41:48 +0000
ROA not after:            Sat 08 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f61:8050::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:63:bc:8a:9b:63:37:37:e5:a8:5d:bf:9d:68:c8:e5:5f:4b:5d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  4 00:41:48 2025 GMT
            Not After : Nov  8 23:59:59 2025 GMT
        Subject: serialNumber=14c3c4dea87623427c7061127f263c2b34962337a2e758f80f2afe396604e44e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0a:94:ba:ab:e4:a6:ff:da:63:be:b4:94:7a:
                    39:72:65:d4:99:7a:c5:b2:c3:d7:3d:98:89:e7:69:
                    36:28:62:21:45:dc:71:69:03:d0:10:93:89:b1:65:
                    ed:fa:e8:15:62:2b:11:b6:23:28:81:c1:3b:f6:90:
                    a8:dd:d7:dc:c9:59:b0:56:d5:53:37:b2:24:bc:c0:
                    5b:20:2d:e1:fc:58:1a:44:51:4d:3e:15:b2:88:b0:
                    cf:d5:c1:f7:87:06:ea:af:de:93:bf:08:f3:dc:a5:
                    44:c7:01:88:1d:a9:4f:43:9a:94:1e:8b:74:b0:1b:
                    40:e2:43:27:6b:ac:a1:4f:1f:78:a4:57:d5:c4:70:
                    6d:c4:e8:30:9d:95:7a:a3:58:62:0d:2c:fa:a3:d0:
                    a3:68:d4:29:1e:74:bb:0a:68:4e:76:10:92:06:56:
                    32:ab:f2:f4:2d:12:0c:73:36:84:2f:15:2d:d4:a9:
                    11:0a:d1:ef:a7:42:b4:2a:aa:e4:d1:69:ca:91:20:
                    68:12:80:cf:1b:a6:6e:db:2a:eb:19:fb:56:66:6b:
                    10:9d:2b:8f:c1:03:39:ac:b9:5f:c5:9c:32:de:e1:
                    6a:ff:f7:87:8f:e2:e6:77:60:4d:a0:a3:e1:cf:96:
                    e1:dd:d1:15:bf:22:2b:f5:ab:0c:fe:39:a8:00:35:
                    a2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:89:28:05:D9:6C:33:FB:38:88:F7:30:12:A6:3A:DF:EE:86:90:BE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da3255d0-76cf-4389-be4a-976954ce70ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:8050::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:8f:d5:8c:e3:e1:f3:a0:2a:7b:e7:73:65:e1:27:5f:93:f6:
         a6:e5:91:c3:e8:33:7f:3b:31:88:2e:f9:ba:f8:a2:9a:42:fb:
         6a:e6:dc:76:3f:6d:d3:83:4b:ae:61:65:1c:1c:cd:0e:e8:f7:
         af:05:b0:69:89:db:54:c0:d8:fe:f6:68:08:20:5f:67:92:ab:
         0b:d6:bd:06:97:b1:0f:8f:a8:27:41:23:81:93:4f:6b:47:f9:
         f2:33:21:2c:5c:0a:6f:11:71:5a:07:1e:52:e4:f7:cc:c2:52:
         a7:53:ea:d1:ce:af:25:7f:61:4e:f5:8e:b1:3c:d9:69:f5:8a:
         2c:2f:38:0c:42:3c:c1:c7:cf:a3:c5:43:29:9f:60:53:e8:88:
         04:92:eb:55:15:aa:15:d0:59:82:65:3b:98:71:ae:e6:37:78:
         06:46:ae:bc:a7:6b:f2:2d:47:14:46:85:80:a3:84:dc:0c:86:
         95:c8:df:76:8c:e3:c8:23:db:72:01:c8:61:7e:ff:88:15:55:
         e4:22:0f:45:2b:ed:31:cf:0c:7f:34:15:fb:7d:1e:d5:23:1d:
         bf:48:82:3d:a6:5f:50:70:ab:a6:88:68:8f:16:01:e1:5d:41:
         3c:70:f7:4c:83:d1:25:a3:2f:59:2d:ea:a7:a6:22:da:10:73:
         63:51:95:60
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----