Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc739be7-5c57-4f3f-bc0f-4b965b7bd6ba.roa
File:                     fc739be7-5c57-4f3f-bc0f-4b965b7bd6ba.roa (raw, json)
Hash identifier:          v87rkGcG/gth4xljj97Y2V0q83znnsvP3f+ivvuRAHs=
Subject key identifier:   98:B8:2C:03:9D:1A:27:E2:D9:3F:37:8E:1C:6C:B0:C4:87:B8:C0:A9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       56D0955F2A40C4424788D6F43AFAD9D181925DB3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc739be7-5c57-4f3f-bc0f-4b965b7bd6ba.roa
Signing time:             Fri 17 Oct 2025 21:50:47 +0000
ROA not before:           Fri 17 Oct 2025 21:50:47 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f00:8000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:d0:95:5f:2a:40:c4:42:47:88:d6:f4:3a:fa:d9:d1:81:92:5d:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 21:50:47 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=439e39958a180db0452221323f804fa823605d2b08c46d578f5705e78feda443, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:18:08:2a:a6:38:c5:09:92:70:d1:73:fe:e8:
                    23:a1:ce:88:5e:df:2c:84:0f:06:fa:3f:cc:bc:5a:
                    1f:bf:55:8c:b6:22:dc:3a:c2:f7:ab:5f:62:ef:52:
                    0c:2a:a4:ea:bb:52:21:20:8f:c0:1c:e8:54:2e:ae:
                    8d:0e:13:08:d1:18:50:66:7f:86:c8:70:13:ea:99:
                    de:f5:fe:c6:f3:15:1e:37:75:04:dd:99:ae:eb:63:
                    32:16:97:95:d1:3b:b5:9b:b8:32:4c:6a:ac:b4:f4:
                    6f:d1:1b:c8:de:75:98:8c:d4:2a:9b:7c:e0:b9:2e:
                    9b:71:de:1f:9c:ff:6b:e6:c2:39:5c:8a:5e:3b:74:
                    d3:e6:ea:d7:5b:c4:c3:12:21:e0:a8:8c:03:93:84:
                    21:19:51:38:d9:33:9b:50:3b:63:97:8e:b9:25:5b:
                    f8:77:be:37:70:13:8a:5d:47:b1:bc:41:67:e0:c8:
                    1c:91:5d:b0:b7:80:42:26:ad:96:6d:10:c1:76:da:
                    2a:1f:9c:3d:90:53:b0:4a:b6:ff:17:f5:db:28:fb:
                    6c:58:bd:8b:e7:25:e1:2e:d7:a1:0a:38:f6:15:54:
                    94:79:a1:b3:cf:b1:86:ce:ef:76:c3:52:de:c1:c2:
                    58:aa:a3:66:e4:f1:8f:4c:98:cd:d0:80:59:8e:9e:
                    a2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B8:2C:03:9D:1A:27:E2:D9:3F:37:8E:1C:6C:B0:C4:87:B8:C0:A9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc739be7-5c57-4f3f-bc0f-4b965b7bd6ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         3f:3e:e6:8f:ff:d0:dc:db:c6:9a:30:0c:15:7a:0a:11:42:9f:
         fe:87:89:b7:f3:43:bd:7b:8e:cf:1d:13:eb:ba:ec:17:09:13:
         de:6b:59:19:a7:d4:a2:93:1c:73:c4:72:f4:03:f9:c9:21:6b:
         51:73:c3:63:9f:2d:20:eb:fa:c8:15:4b:0a:f1:56:c3:72:de:
         37:1d:98:26:9e:0c:8d:45:03:da:e2:a9:5c:68:28:4b:dc:98:
         85:fb:3f:87:b2:8a:e8:f4:c7:77:d3:5a:c9:6a:ac:7f:60:75:
         21:19:69:60:16:75:52:c7:e5:47:1e:bc:03:30:0d:5d:7c:8a:
         89:79:2f:86:a8:09:21:46:4a:a1:c6:70:71:6f:8e:e4:91:8c:
         63:50:78:1e:a6:90:af:f1:a8:b9:72:91:a2:92:2e:1a:c0:b8:
         f4:54:b0:70:6b:33:19:2c:d4:89:27:ca:e9:f0:87:06:b7:7b:
         46:3c:28:97:27:03:34:6b:8c:cf:26:7c:f8:a2:c4:6b:2c:f4:
         e4:96:13:65:fc:44:f0:19:79:a7:fd:a8:d1:43:e2:26:3b:cb:
         7f:c6:86:df:eb:ac:2f:50:6c:7e:09:8a:de:1f:e8:c4:6c:11:
         42:d6:7e:4b:3d:83:08:1b:ac:36:ee:bb:c7:f3:a0:fe:6f:d3:
         67:4a:89:29
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----