Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/017914bc-f93f-4439-904c-fb383c270999.roa
File:                     017914bc-f93f-4439-904c-fb383c270999.roa (raw, json)
Hash identifier:          qrKxJ2zvcnKGCegkCH0nTCAA302m7ha+aojGBJ7KFR4=
Subject key identifier:   03:8B:6D:24:00:87:F5:90:93:DF:C1:2D:D8:94:E2:47:7F:24:6E:CE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       339FF6990ABC845C9F8B24AC30881041A1764755
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/017914bc-f93f-4439-904c-fb383c270999.roa
Signing time:             Tue 23 Sep 2025 15:33:51 +0000
ROA not before:           Tue 23 Sep 2025 15:33:51 +0000
ROA not after:            Tue 28 Oct 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f36:8000::/39 maxlen: 39
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:9f:f6:99:0a:bc:84:5c:9f:8b:24:ac:30:88:10:41:a1:76:47:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 23 15:33:51 2025 GMT
            Not After : Oct 28 23:59:59 2025 GMT
        Subject: serialNumber=f73ea8e7c3ec89e9ed32910a233ae09477a374e4b079e82459b8089bc836a7d5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:29:0f:bf:f9:5b:bd:3a:4b:14:17:bb:52:3e:
                    89:9d:50:cc:cc:5b:c2:cc:cc:df:f9:6c:a8:94:94:
                    fe:e5:df:b2:09:b4:c2:e6:7e:65:03:ca:f8:94:8a:
                    6d:c4:d2:50:b1:03:c5:60:54:11:a9:26:2a:d7:6d:
                    32:31:66:5c:e9:bf:2b:55:07:bd:19:fa:f2:59:fd:
                    9f:80:fe:55:db:c7:95:a6:12:c3:5f:41:43:cb:e8:
                    0f:00:1b:c4:eb:04:83:21:a9:30:fa:85:ca:46:fb:
                    75:e8:db:15:4c:ee:d6:68:d5:cc:a6:2d:39:46:60:
                    a6:0d:f1:d7:9f:a3:8d:52:44:c3:b8:b3:bc:96:4f:
                    fc:d2:46:ba:b6:57:db:e4:e6:66:15:3f:5c:f5:ce:
                    4e:c3:23:8d:c8:13:5a:10:04:65:dc:69:ac:ee:a8:
                    f0:dc:9f:dd:a1:e7:44:3f:13:1e:ad:c2:60:6d:32:
                    16:2e:a8:ac:53:4d:35:f0:9c:1a:78:6f:00:bf:5f:
                    93:93:e8:99:29:6d:e3:52:2e:41:c2:0a:7d:65:55:
                    61:45:a0:4b:e0:5d:a5:a9:e6:d9:5b:87:bd:cf:de:
                    a9:a4:5a:be:e9:61:2c:c5:74:c2:75:4e:84:32:3b:
                    58:cf:6d:1b:18:69:fe:20:3a:e4:ce:30:12:5a:1e:
                    d6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8B:6D:24:00:87:F5:90:93:DF:C1:2D:D8:94:E2:47:7F:24:6E:CE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/017914bc-f93f-4439-904c-fb383c270999.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f36:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         5d:06:8a:14:1d:88:3e:e9:69:8d:b2:b0:80:9d:59:fa:32:ac:
         e5:8f:2d:fc:fd:b5:1c:c6:0f:28:f0:33:46:33:71:90:20:c4:
         ab:86:60:7f:29:62:cb:45:41:99:16:25:84:72:60:5b:d6:db:
         f0:86:ce:66:74:52:90:b5:11:e5:4e:f7:5a:a8:f3:47:e8:ef:
         ea:4b:0f:ab:3f:36:f6:c6:8e:e1:03:a6:8e:bf:4f:9d:2c:bb:
         15:70:98:40:2d:29:56:f8:70:b2:c3:85:0f:61:35:7e:94:6b:
         f0:5b:f7:9a:d9:ad:a4:25:68:19:30:10:a4:44:f9:cd:95:cf:
         87:ed:78:5c:56:62:d0:52:95:64:64:01:54:46:b1:e9:32:52:
         7d:d6:f4:e7:51:f9:02:93:94:53:2b:ab:7d:15:80:ea:c1:08:
         80:da:55:1b:1a:7f:56:6a:94:5b:85:26:b5:9b:09:0a:e9:f0:
         5f:05:d0:35:76:07:74:44:0d:e6:45:32:b4:a7:55:5d:da:70:
         12:d7:06:2b:18:e5:76:f7:cf:02:bb:0d:e9:42:1e:01:14:f3:
         dd:06:9b:42:e9:80:d0:93:04:2b:38:d1:ed:ea:50:72:d4:4e:
         9c:22:14:83:ac:5a:5a:ee:b6:27:88:95:a1:46:3a:dd:98:58:
         e7:7c:a3:73
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----