Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc94bcbc-07dc-4caa-9236-bc8dce55f324.roa
File:                     dc94bcbc-07dc-4caa-9236-bc8dce55f324.roa (raw, json)
Hash identifier:          5SRQoCRrd4+ICQZlNINeayY+ni0lh/vXwR74fmgfVto=
Subject key identifier:   A6:9E:A1:42:07:4B:79:3F:AB:56:D6:59:27:2A:0A:20:64:AA:AC:D5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       294BA61463A9EDC3EEF764319419013D62DC2388
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc94bcbc-07dc-4caa-9236-bc8dce55f324.roa
Signing time:             Mon 06 Oct 2025 15:41:15 +0000
ROA not before:           Mon 06 Oct 2025 15:41:15 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffd:8050::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:4b:a6:14:63:a9:ed:c3:ee:f7:64:31:94:19:01:3d:62:dc:23:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 15:41:15 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=3f7c6713f28b32f21b2cfc17c3a23e51a897e33ede2da8c9e0d43cae26e79582, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d6:de:84:e7:45:82:db:97:e6:f5:69:ca:90:
                    7f:c9:f9:23:bb:2a:8f:f3:03:52:a5:ad:69:0d:b4:
                    d3:e6:2e:a3:91:fe:7d:7e:dd:a1:91:78:55:24:ad:
                    23:3d:34:ad:e6:bd:c7:b7:74:b7:91:be:29:ce:75:
                    08:75:61:37:af:7d:37:48:96:ab:5b:91:7a:fd:5b:
                    3d:8e:23:ee:88:0f:ff:16:d6:0e:e6:45:3b:2a:2f:
                    ef:da:31:ab:9e:f1:1b:1c:34:4c:4e:7a:57:fe:2a:
                    67:4d:9a:7e:fa:d2:4d:0e:bd:27:96:31:c3:af:7e:
                    94:42:76:14:11:fe:03:e4:04:ed:56:04:68:ab:10:
                    5f:9b:18:75:1f:ca:a3:9b:70:3f:8b:55:9e:29:40:
                    2c:a6:fd:ff:18:6d:75:e9:1f:8b:74:40:6a:44:3d:
                    d1:1b:42:1a:14:01:da:ec:be:6a:a9:9f:5c:d4:37:
                    42:66:98:f8:b1:b9:7b:69:e1:01:34:05:e2:b5:0b:
                    ec:33:54:96:af:65:ac:74:28:3b:57:3c:d1:4c:57:
                    4f:ff:b7:71:0c:33:86:78:1b:8e:23:92:74:ee:bf:
                    13:8f:e2:07:b9:60:b9:f1:00:d8:0c:bd:f8:08:34:
                    62:99:ee:ca:e8:0c:72:c4:0b:dc:50:e7:35:32:ef:
                    8d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9E:A1:42:07:4B:79:3F:AB:56:D6:59:27:2A:0A:20:64:AA:AC:D5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc94bcbc-07dc-4caa-9236-bc8dce55f324.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffd:8050::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:39:f8:2d:89:db:9e:47:67:28:fd:18:e1:d4:be:34:ff:c4:
         e2:b1:06:65:eb:71:16:06:84:90:b5:1c:a7:ae:69:e1:b2:07:
         fb:47:be:54:fe:0a:35:f9:73:4e:21:1e:65:96:c7:e5:f0:86:
         d7:69:11:86:3e:07:47:a9:24:7b:e3:b3:95:05:3a:91:9a:bb:
         05:ce:0b:96:17:82:51:bc:e9:38:14:7f:4f:a4:ae:81:ab:fb:
         e6:16:e4:00:9d:56:07:2c:41:90:0a:4c:2b:12:50:c9:3a:a6:
         58:8e:b2:53:82:e0:fb:58:02:96:a3:e1:d8:17:43:ed:06:44:
         ef:a7:3f:ba:a0:bb:f2:c8:36:af:de:ce:6a:4f:60:51:16:8f:
         a5:cc:7e:3e:0d:22:7f:f5:8d:01:1c:3c:0b:02:3f:c5:b5:42:
         83:ed:24:6d:8b:7d:aa:8c:32:0b:ae:0a:12:b1:f3:74:2c:47:
         df:50:a9:e1:7a:79:8f:f5:8e:a0:95:b0:e5:b7:1a:2f:49:e5:
         85:57:e3:99:0d:8e:3e:eb:71:df:55:07:b6:d3:7a:6d:98:36:
         7f:2e:b4:2f:ad:26:82:71:93:1a:88:ae:13:79:7f:15:56:1e:
         be:46:ba:79:8b:8f:c9:0c:53:b0:51:11:b2:00:e3:e7:bc:6c:
         8a:b3:a6:6d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----