Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/deab733d-b1a3-4425-86ff-616d23712882.roa
File:                     deab733d-b1a3-4425-86ff-616d23712882.roa (raw, json)
Hash identifier:          x+94EOUMQt8S1bZdYsk1xGgIhcGAvsN04B7tctiykmw=
Subject key identifier:   CE:C6:A2:17:44:E4:C5:76:2F:C0:4D:B6:5A:6C:FD:CD:33:F6:E9:8E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0818E5DD4FEC45F2FD847A04634E41BA7280DDE5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/deab733d-b1a3-4425-86ff-616d23712882.roa
Signing time:             Sat 18 Oct 2025 04:01:47 +0000
ROA not before:           Sat 18 Oct 2025 04:01:47 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:40f0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:18:e5:dd:4f:ec:45:f2:fd:84:7a:04:63:4e:41:ba:72:80:dd:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 04:01:47 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=8b1219f17d3c740aed0af198000a694ed08626079864b446726d8da277653e8f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:74:4e:2a:c1:ba:fa:dd:78:3d:fb:58:7a:ed:
                    d1:98:47:88:10:bc:c8:57:0f:92:a7:8f:e3:e6:54:
                    ff:7a:34:e2:ce:6f:61:9e:75:19:1f:58:79:f5:4a:
                    6c:a2:43:27:85:6a:ec:65:3a:6d:bb:4a:5d:b3:d8:
                    28:7f:fd:85:7d:3f:52:b9:5d:dc:92:af:8a:13:67:
                    71:d3:0e:64:7a:73:8a:4d:ac:40:cc:d4:5d:7e:da:
                    ea:3e:f4:cf:44:09:aa:2f:89:48:ac:fb:db:d3:e5:
                    02:c0:5c:a9:83:3e:75:a8:85:1e:05:56:b6:19:39:
                    08:0e:cc:2d:f4:2d:ab:43:d9:70:46:3b:5c:c9:a8:
                    9f:7b:b0:f1:60:52:2f:f2:48:7e:97:2f:78:e3:15:
                    c2:35:da:96:fe:e1:da:e7:83:c3:0e:50:9f:5e:49:
                    52:cc:05:94:65:39:53:3c:b2:b4:2e:02:11:60:0b:
                    57:c0:31:be:4f:d9:c7:6d:05:f6:ae:0c:1f:eb:e4:
                    e2:91:e5:db:52:36:d2:01:cc:77:c4:05:3c:aa:dd:
                    f9:ec:54:27:0d:e0:76:c4:c1:5d:d7:86:23:57:03:
                    56:f9:e9:75:54:cf:ea:d8:67:1f:07:b7:93:41:8c:
                    2d:0f:10:99:62:5d:7b:48:8a:2e:b5:e6:91:e8:b9:
                    be:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C6:A2:17:44:E4:C5:76:2F:C0:4D:B6:5A:6C:FD:CD:33:F6:E9:8E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/deab733d-b1a3-4425-86ff-616d23712882.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:40f0::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:38:c8:10:e0:b3:50:b4:e8:60:50:82:9f:2c:53:b4:f4:c0:
         19:b9:f3:6e:6c:ba:ba:9c:48:d4:3a:2e:ec:cd:e2:e2:4f:2a:
         94:a0:3e:db:4c:5b:48:45:0b:0f:7d:8c:1c:62:54:5c:8d:9e:
         65:2c:4e:1d:48:ed:0c:db:5f:14:ce:10:92:6c:4a:a3:0d:a5:
         e1:0d:0c:86:e3:b9:38:dd:3e:58:92:fc:f7:22:7d:d4:57:ab:
         67:79:a8:a6:9a:0a:6e:01:ca:13:db:0b:19:dc:22:a4:3c:7d:
         95:43:21:59:1b:9d:08:76:94:80:52:81:36:1d:7f:d2:f5:a5:
         5c:7c:6e:cd:e9:0c:9f:e2:a2:f1:ba:7d:2f:6c:d4:85:5b:e0:
         69:42:37:ef:aa:a4:dc:ea:d7:76:30:f9:45:3b:f1:c6:5b:d3:
         7a:de:e3:8e:07:45:44:ed:73:82:16:0b:8d:ad:9f:99:c7:43:
         00:f9:06:df:0e:76:17:f4:3e:0a:2c:b3:70:f2:b5:e5:18:6c:
         7b:64:c0:9a:80:c2:77:fb:c9:d6:81:ff:ef:bc:b6:82:0e:14:
         f5:b1:70:4b:c0:04:31:ea:e3:5c:e8:b1:7e:ad:69:45:00:b9:
         72:72:86:04:5e:f9:1d:6c:e0:63:58:26:ee:0b:c7:e9:a8:11:
         cd:5a:cb:87
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----