Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00b5a095-fe4a-4a96-b512-d808a94a2ea2.roa
File:                     00b5a095-fe4a-4a96-b512-d808a94a2ea2.roa (raw, json)
Hash identifier:          iRFRpese6QVE2+NAYsNInhT78+5y1JgR+UMET9RSWoY=
Subject key identifier:   B7:15:65:CC:45:25:57:68:DA:D7:E8:2E:16:29:DE:20:22:95:3B:55
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       194EF234DE47C3DA5821A32BD12821AE007309F7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00b5a095-fe4a-4a96-b512-d808a94a2ea2.roa
Signing time:             Tue 11 Nov 2025 02:20:53 +0000
ROA not before:           Tue 11 Nov 2025 02:20:53 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f21:c000::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:4e:f2:34:de:47:c3:da:58:21:a3:2b:d1:28:21:ae:00:73:09:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 02:20:53 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=77139583f2e30cd6aeae366d0ecb6b44b245bdada0460dd97a3a338de2a5a560, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:34:90:db:41:48:b1:14:ba:af:9e:b0:9d:37:
                    30:79:43:7c:14:ec:b6:a1:2e:97:69:58:3a:ad:04:
                    0f:36:50:f9:b2:f6:14:20:13:20:3a:a2:0e:c3:35:
                    aa:97:bb:38:eb:29:45:8d:6c:9a:28:81:1f:3a:0a:
                    6d:af:99:06:48:58:d6:6d:a1:a3:83:09:05:9f:85:
                    17:62:46:69:4c:1b:bd:b4:7a:03:d8:27:50:28:6b:
                    95:f7:6c:44:c6:30:d6:af:74:7c:09:8e:90:e4:0a:
                    c4:d7:9e:29:26:03:44:9a:ae:c4:17:51:43:1a:89:
                    a1:03:f0:7d:00:fb:7f:74:20:95:aa:bc:c5:70:e7:
                    7c:09:f2:70:04:ce:1e:ee:ed:7f:77:18:f6:e6:c7:
                    4c:94:79:2c:32:6c:2d:85:7e:5a:8c:13:46:39:bd:
                    23:8b:3f:44:fd:a4:c6:c2:ad:35:66:d8:d0:d0:01:
                    49:92:6b:90:a3:95:c1:49:d0:15:57:74:fb:ab:f0:
                    11:0b:39:ba:b8:2d:e9:7b:b9:58:6a:b4:89:4a:be:
                    3f:5c:d5:c0:6b:b6:ef:f7:be:b8:e8:7a:5e:b6:e2:
                    57:4f:ad:e0:b1:f5:bf:ba:02:f6:9f:19:54:b1:21:
                    c1:ce:33:c2:75:c8:a0:bf:34:40:2d:b4:ae:ae:21:
                    e6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:15:65:CC:45:25:57:68:DA:D7:E8:2E:16:29:DE:20:22:95:3B:55
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00b5a095-fe4a-4a96-b512-d808a94a2ea2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f21:c000::/37

    Signature Algorithm: sha256WithRSAEncryption
         47:38:0e:49:12:68:16:da:6f:d5:8c:a7:49:34:c8:bf:ee:94:
         bb:61:bd:a5:b6:ee:cf:f4:da:99:c2:5e:de:f2:38:02:80:d6:
         ca:8b:db:8f:f1:7e:be:d1:fa:29:6b:f3:44:70:50:6b:33:10:
         c6:5d:6c:be:03:d3:a4:c4:e4:d1:37:8a:5a:45:7e:8a:59:ec:
         fc:8d:40:e7:47:62:ef:92:9b:35:58:ea:96:75:c3:17:6b:96:
         9a:36:ec:85:80:47:35:33:22:77:18:f5:2d:59:15:3e:b9:30:
         e7:88:39:2f:f9:44:3d:c4:e6:db:c1:b7:fd:63:57:fd:d6:f7:
         2e:c7:36:ee:60:e5:be:f1:b6:7c:3b:b6:e8:41:cf:56:ff:71:
         fa:e6:b2:75:7a:5d:e9:76:ca:a5:59:e4:83:90:bd:8a:48:b8:
         7c:61:bb:05:43:16:9f:5b:04:f5:fc:26:68:87:ff:03:4d:6d:
         6a:df:0f:b0:6e:88:45:7c:33:cb:15:3d:38:4a:01:ea:f8:a4:
         68:7d:b2:13:88:ad:a7:a6:47:6c:ba:ee:6b:a8:99:37:a1:ec:
         25:af:b8:88:df:37:ee:c4:d5:e0:e8:ef:56:55:a5:70:3f:0c:
         d2:78:51:b0:4f:1a:fd:6b:cf:b2:12:5e:92:d3:90:f3:04:1e:
         d5:a9:c4:d1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----