Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f54affd9-b3ba-4e9d-8e7a-48d2787e25c9.roa
File:                     f54affd9-b3ba-4e9d-8e7a-48d2787e25c9.roa (raw, json)
Hash identifier:          uWv4keC65NZ3R2e8f8ptJuqa7sXDjGVU/dyANXCJl4Y=
Subject key identifier:   2C:94:41:32:DD:D6:6E:4E:10:06:7E:6C:5A:91:21:C1:3B:C9:00:4F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       131933293FF337EB126AB27E7F91DAE3DCF86344
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f54affd9-b3ba-4e9d-8e7a-48d2787e25c9.roa
Signing time:             Sat 18 Oct 2025 04:01:46 +0000
ROA not before:           Sat 18 Oct 2025 04:01:46 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:e020::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:19:33:29:3f:f3:37:eb:12:6a:b2:7e:7f:91:da:e3:dc:f8:63:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 04:01:46 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=54f612ce52536efd22e4484a5f9cb6ee8a9577e00031d0599fb468675c23955f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:de:5c:11:34:fb:75:f5:d0:d2:f0:1f:5e:8c:
                    e3:a1:0b:59:3a:29:cb:22:1a:ad:5e:b5:cd:eb:8b:
                    65:72:5e:ea:c8:12:56:bc:df:20:24:15:35:8f:51:
                    c6:6e:4e:01:5e:e3:94:68:e4:d6:be:c8:67:f2:c7:
                    ff:a2:a1:b8:b0:12:dc:3e:4d:49:a4:15:12:f0:65:
                    72:fc:9e:89:67:cd:95:fa:ac:eb:db:5a:97:73:dd:
                    d1:ea:ef:1c:8e:fc:da:d6:71:37:18:4d:19:eb:6f:
                    53:1f:d5:16:91:41:a3:20:4a:ef:9d:09:97:0f:22:
                    1e:1d:bc:d5:7f:f8:a9:d1:4f:f3:9b:ff:b8:34:8b:
                    6c:a1:6c:1c:01:af:46:a8:7f:7b:a5:67:e6:5c:dc:
                    b7:9e:61:ba:35:ee:14:d0:98:47:48:b8:94:e3:a6:
                    9d:70:ef:fc:2c:a3:ae:51:9a:28:82:6d:e0:ae:eb:
                    0c:fd:9c:6e:2d:ff:43:a3:87:3e:2a:47:7e:0d:87:
                    57:43:d2:bb:c9:16:2d:b5:05:e5:a6:6d:c7:61:84:
                    9d:1e:71:3d:c2:58:cf:a8:5d:2e:06:1c:2a:31:fb:
                    fa:79:c4:e9:1f:ac:6e:59:a4:ac:51:9b:31:ce:a1:
                    cb:65:07:78:e0:ed:df:c9:60:e5:fe:81:91:b0:ac:
                    79:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:94:41:32:DD:D6:6E:4E:10:06:7E:6C:5A:91:21:C1:3B:C9:00:4F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f54affd9-b3ba-4e9d-8e7a-48d2787e25c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:e020::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:e8:6e:9f:d9:61:59:ce:41:d3:56:d9:24:e3:9e:1b:28:3f:
         2c:59:4d:67:ea:25:0c:b9:bf:fb:1c:6c:1d:b5:73:28:07:59:
         62:b5:2c:25:eb:d0:9c:0e:1e:12:0d:10:c3:f9:87:4c:73:f0:
         b9:dc:70:da:81:62:ac:b3:1e:f5:6b:7a:77:31:b3:10:f7:fb:
         a7:6f:71:a0:0e:aa:d1:ed:97:6b:f0:fb:1e:b2:ce:38:52:5b:
         3b:5b:ba:9a:a3:94:b2:f0:0c:82:4a:23:cf:e8:51:15:98:6f:
         5b:9b:48:5e:b8:e2:68:22:cd:2c:d2:23:80:b1:7c:90:01:aa:
         86:ac:68:14:41:19:62:e2:d7:fc:a9:26:6f:42:20:ef:29:3b:
         a5:c8:b3:5b:83:29:83:92:3e:d9:ce:4b:ea:40:c2:30:19:6a:
         43:dc:dc:56:4e:84:0a:59:0f:ac:3a:72:27:50:9b:29:03:43:
         ad:13:4a:b3:c3:2a:da:cd:35:95:8c:a6:a7:6c:0e:b6:80:84:
         5f:d1:b9:54:29:cc:38:87:1d:ce:08:5c:84:8c:10:ea:f9:9c:
         e3:2a:ec:50:c7:89:ee:8c:9a:23:22:d9:1e:82:7c:c4:e1:c2:
         bb:95:bc:f9:22:24:05:1d:4c:de:67:e7:e8:94:15:9c:fd:ac:
         fe:5e:ff:90
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----