Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f7e4cea8-7e24-45c8-82ac-640cf41e127c.roa
File:                     f7e4cea8-7e24-45c8-82ac-640cf41e127c.roa (raw, json)
Hash identifier:          7EBZIu1tyMhG6Kns/ITOnxfjEJ/yjl2VWc6pOD9bT40=
Subject key identifier:   B9:03:75:3A:0C:81:5A:94:46:69:BA:D1:1D:A4:89:78:ED:8F:85:B9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       681EBEF3F234C4306294BCC6D319C17F4BBBC69B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f7e4cea8-7e24-45c8-82ac-640cf41e127c.roa
Signing time:             Tue 07 Oct 2025 00:43:26 +0000
ROA not before:           Tue 07 Oct 2025 00:43:26 +0000
ROA not after:            Tue 11 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:2c80::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:1e:be:f3:f2:34:c4:30:62:94:bc:c6:d3:19:c1:7f:4b:bb:c6:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  7 00:43:26 2025 GMT
            Not After : Nov 11 23:59:59 2025 GMT
        Subject: serialNumber=095d52d3c6d37af83e8806b8889c0baa16bcf6bf9a91b2ce4ac7b54b808a8b5f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:81:81:e2:0e:1c:b7:88:b0:08:2e:82:b1:cf:
                    03:3a:da:1d:37:8a:e9:38:aa:40:56:8a:33:d4:f5:
                    42:29:1a:01:2a:ce:28:12:11:06:f9:f6:7f:c1:3f:
                    fa:2e:54:05:3d:29:45:55:4e:50:49:09:66:11:f9:
                    38:2b:10:71:da:c4:de:65:79:f8:97:0d:06:7d:dc:
                    65:4d:9d:fd:b8:88:ab:56:e2:63:46:e6:76:08:40:
                    e0:9c:3f:55:f7:9c:5c:91:a9:e5:1c:11:4a:2a:2e:
                    16:00:bf:d7:37:2e:e4:ce:c0:47:14:5e:c6:a9:e9:
                    6d:7d:f3:6e:f9:86:a1:c1:03:e2:82:1a:5a:44:20:
                    89:ec:61:eb:44:4c:1e:ab:ed:1d:b9:08:96:fd:ea:
                    9d:e8:ba:5c:7a:c8:ce:9e:6d:87:b4:43:f8:b2:64:
                    58:0c:3f:f8:17:94:7b:d0:d7:7a:de:9e:e2:63:e0:
                    59:d7:a3:44:30:4d:39:c1:e4:da:a8:0c:e9:30:1a:
                    b8:a6:53:e4:50:14:c3:6a:8e:27:39:ce:3e:aa:48:
                    4c:17:21:75:07:6d:fd:42:b4:08:97:7d:6f:69:54:
                    cb:a2:5b:86:2e:c0:c1:02:d9:34:d6:02:88:21:f9:
                    26:fb:04:18:98:8a:82:7c:97:d0:56:eb:e5:e7:a3:
                    b3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:03:75:3A:0C:81:5A:94:46:69:BA:D1:1D:A4:89:78:ED:8F:85:B9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f7e4cea8-7e24-45c8-82ac-640cf41e127c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:2c80::/48

    Signature Algorithm: sha256WithRSAEncryption
         d5:01:5d:b1:23:66:e1:59:e5:62:6f:84:b3:43:ad:6b:3f:dc:
         eb:8e:26:0f:39:56:91:23:76:e6:7a:99:6e:f6:8b:cb:f6:5b:
         83:23:ff:e8:dc:4e:6a:a6:9a:d7:76:3a:bd:41:7f:96:b4:84:
         04:ce:4c:d0:d0:5d:91:05:40:65:8d:34:33:20:57:fd:64:88:
         dc:f5:72:3d:41:df:8c:04:b8:a8:9e:6d:0b:d7:c6:6d:9f:30:
         2d:63:0d:ff:c8:70:57:70:be:4d:55:a4:35:47:7f:15:b1:08:
         2f:c9:37:69:7d:62:e4:43:12:00:ae:27:3e:b8:bf:59:99:38:
         58:b8:53:bf:70:fa:4b:ec:eb:2f:69:c2:71:93:c7:78:cc:fa:
         ae:bf:f8:b1:b2:55:4e:e3:b8:f9:a5:75:34:96:a2:85:40:ce:
         e4:86:14:41:2b:80:01:33:c3:03:39:51:47:c1:20:4c:c8:ea:
         e0:fd:ae:2e:2d:a1:ee:b9:6b:24:56:cf:7e:51:c5:4d:6f:b6:
         41:f7:1b:5c:f4:42:43:20:96:e8:cb:c0:d9:40:9a:35:31:a6:
         23:d3:f1:cd:9c:99:57:78:a8:88:aa:df:43:da:ab:51:26:00:
         45:ec:e0:8d:2e:8e:72:92:8d:c2:52:8d:5d:ca:f7:06:d1:81:
         87:fd:fc:a2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----