Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db7815cb-1080-4364-8968-f09bb1d6d0f7.roa
File:                     db7815cb-1080-4364-8968-f09bb1d6d0f7.roa (raw, json)
Hash identifier:          dDP9Ol9BkkodyGQKvFPmJYJ5iJzaD2iyUjlMniGKQRE=
Subject key identifier:   4A:60:F4:F8:8E:2D:BA:4D:1B:89:F5:CD:25:99:F0:06:01:2B:E8:61
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       604E76CCFE1706DD8002DC1B2825C63B1061C1EF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db7815cb-1080-4364-8968-f09bb1d6d0f7.roa
Signing time:             Sat 18 Oct 2025 01:21:24 +0000
ROA not before:           Sat 18 Oct 2025 01:21:24 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f2b:4000::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:4e:76:cc:fe:17:06:dd:80:02:dc:1b:28:25:c6:3b:10:61:c1:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 01:21:24 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=803293da0a5f356e0777036a110a2baf8bbd6c0070f5bd062603fbb9c3e39272, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:08:b6:28:ba:5b:83:54:55:cf:00:17:6c:d0:
                    87:8a:ff:31:38:f3:90:0d:d3:ee:f9:dd:54:43:c4:
                    6a:a5:eb:68:00:59:f3:6e:55:c0:ea:e0:05:65:62:
                    67:ac:81:e0:e9:a7:0a:fb:e3:69:c7:05:fe:ac:a8:
                    3d:ec:1d:ec:b7:2c:60:0a:39:a2:c5:59:6a:b3:a5:
                    37:e1:eb:a1:94:75:6c:b9:7f:4a:da:5c:8b:b3:96:
                    c9:27:3a:1d:ba:61:4c:1e:11:d1:31:14:24:43:e0:
                    8b:11:ac:58:4b:3a:99:cd:75:4e:34:6d:cb:d6:86:
                    c9:81:fc:d8:54:90:47:11:61:05:be:c5:e6:f2:08:
                    9f:bf:63:99:a2:43:56:ab:3c:a3:c4:49:6e:28:41:
                    16:6b:41:9c:87:b4:7e:a9:1d:15:65:96:b4:d4:77:
                    df:20:53:a4:b0:d0:e0:8a:dc:78:aa:53:8b:3d:67:
                    6f:bd:06:8f:29:8d:7e:9c:99:46:38:b1:50:48:f4:
                    cf:52:49:ec:63:fc:0a:00:cc:ab:84:c1:7f:01:86:
                    b1:65:86:33:cd:4d:7b:77:52:6e:3c:d6:9d:53:3a:
                    76:4a:da:8f:07:02:7d:60:2a:db:82:50:71:eb:64:
                    cb:cd:45:a6:6a:51:29:0d:6a:13:74:72:a3:fd:9c:
                    49:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:60:F4:F8:8E:2D:BA:4D:1B:89:F5:CD:25:99:F0:06:01:2B:E8:61
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db7815cb-1080-4364-8968-f09bb1d6d0f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f2b:4000::/37

    Signature Algorithm: sha256WithRSAEncryption
         57:09:af:dc:95:3c:26:5e:16:f6:d4:1b:ed:ab:9d:69:4b:1f:
         e0:46:fa:1c:3d:b5:00:c0:eb:be:c2:4e:87:be:12:b0:f7:3a:
         01:3e:f2:f5:c1:62:b6:76:73:9c:44:91:68:3f:a9:12:64:6b:
         2b:6c:0d:33:dc:a9:04:04:09:42:26:0f:25:6a:37:c8:34:aa:
         c5:85:ca:af:96:26:d4:d2:2c:f1:aa:f2:1f:86:0a:4f:2c:1b:
         43:95:40:18:7c:b3:bf:20:79:d0:1e:da:7b:5c:92:0f:3b:fb:
         cd:ee:92:a0:54:af:b8:b9:16:d9:d8:89:34:49:98:98:bd:35:
         24:8b:a9:a2:b2:98:15:24:02:75:3c:c3:24:a4:b5:f6:74:cf:
         d9:b0:55:ce:ac:c8:e5:b2:07:79:f3:bc:11:50:b6:83:1f:5c:
         13:49:b3:a3:2b:c2:0f:3b:bd:c9:87:92:08:87:21:f6:5d:d6:
         6f:84:04:87:29:c9:1b:00:92:40:1c:83:4f:ac:98:c6:02:ae:
         92:61:6c:3a:57:00:87:01:17:61:16:92:2d:a6:ed:4f:67:65:
         a8:0e:a3:eb:a6:bc:8d:62:4b:69:3c:87:f4:6d:58:8f:ee:3b:
         98:eb:d1:ef:e1:52:54:d5:db:44:cb:0c:46:be:ff:76:98:00:
         63:a1:0f:5f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----