Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec768f57-5cc4-44b7-b7f3-8da4ac4ef3c3.roa
File:                     ec768f57-5cc4-44b7-b7f3-8da4ac4ef3c3.roa (raw, json)
Hash identifier:          cx+ZlLqz/T1As85emmtkmlyw5fK9GzNg1aM8ZY5yAow=
Subject key identifier:   B7:86:90:10:21:CC:B1:1A:FB:83:EC:40:FE:DF:2D:9C:C6:A7:0C:E5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       62F62E2100DF9E49002F4CF87A84E4B6C38AE127
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec768f57-5cc4-44b7-b7f3-8da4ac4ef3c3.roa
Signing time:             Fri 17 Oct 2025 21:10:11 +0000
ROA not before:           Fri 17 Oct 2025 21:10:11 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1ff2:5000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:f6:2e:21:00:df:9e:49:00:2f:4c:f8:7a:84:e4:b6:c3:8a:e1:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 21:10:11 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=31d7e26276ac78183951133d76e6e4ad217ae70d91596c8b326b7a2337562edd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fb:e9:c1:07:93:b9:aa:5a:fa:f2:d9:9d:58:
                    9e:e3:14:e8:5e:57:a4:81:02:58:db:81:f6:0c:c8:
                    41:fe:1b:fb:72:6d:3e:91:3c:21:5b:5f:ae:77:a0:
                    ad:87:20:17:35:48:b4:ea:1d:1a:92:e7:ad:3c:d6:
                    5d:5b:1d:b5:65:3a:eb:10:23:fc:2f:7b:23:dd:36:
                    5b:cb:bf:6d:a6:d0:cf:1c:5c:8d:17:0e:0f:72:61:
                    d7:50:a8:d5:1d:1e:a0:02:a4:1a:30:25:0a:46:3a:
                    0a:7b:c1:f5:87:0a:dc:f9:e8:29:46:ca:27:02:cb:
                    c9:e2:5f:3e:16:65:cb:50:b3:15:30:46:8c:e3:73:
                    17:b4:a9:14:2a:55:66:aa:52:e6:cc:e7:2b:14:96:
                    97:22:ae:53:e9:80:0b:6f:ec:62:6e:74:31:fe:6f:
                    23:4d:06:d0:b2:9d:16:6a:a2:aa:ac:7a:9c:ce:22:
                    92:29:05:ff:a3:3e:8f:13:23:93:27:5f:19:1d:a4:
                    24:5c:e7:19:83:12:43:96:83:80:26:3b:1a:37:9d:
                    c2:da:52:bc:02:cf:e2:50:1a:88:0f:1d:0f:17:fe:
                    8d:79:50:48:56:fb:2b:2b:fa:61:d1:92:09:df:98:
                    44:f5:01:07:d6:31:1f:11:52:5e:a1:76:49:59:0f:
                    81:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:86:90:10:21:CC:B1:1A:FB:83:EC:40:FE:DF:2D:9C:C6:A7:0C:E5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec768f57-5cc4-44b7-b7f3-8da4ac4ef3c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         06:6c:bd:f4:1c:db:a0:0e:79:3a:31:90:fc:6b:4a:b6:47:c8:
         a8:1f:7f:9e:4c:06:4e:ae:8e:bc:a2:3c:c6:74:3a:95:a1:19:
         5f:5f:b0:8e:1f:e6:6e:aa:83:e8:68:e9:58:d6:db:a3:39:3a:
         4a:b7:52:9b:ae:aa:31:70:95:64:2d:85:b6:96:f4:52:02:cc:
         63:e0:34:e9:d5:6a:32:21:bc:e1:8e:a3:f5:14:ee:88:01:8d:
         59:89:14:3a:2d:f4:3c:30:12:0d:b0:61:9a:8b:f8:16:53:a2:
         50:4f:dd:84:ff:39:03:90:0e:e2:65:ad:06:fa:14:0c:ca:5b:
         8c:cb:74:ce:28:5b:ac:bc:4b:47:1e:77:75:40:34:a7:88:62:
         e0:e5:b7:55:90:a0:0e:2f:ba:62:cb:45:b3:ef:9f:a6:61:d3:
         1a:32:f8:56:3f:fd:54:a3:28:0a:c9:05:b1:48:71:49:b1:8b:
         5b:12:d3:5f:83:e2:e9:93:46:71:87:cc:a8:25:67:4b:e8:6c:
         34:16:7f:43:69:49:32:88:d1:9b:f5:63:f9:b4:79:e3:47:5f:
         b6:c0:5e:38:99:7e:b0:13:ef:49:b7:3e:19:b3:a7:75:0e:3c:
         82:0a:0a:45:f8:4a:cb:e1:5b:fe:35:23:dd:60:96:ac:7d:12:
         26:85:29:7f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----