Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0382bd56-5e93-4f09-8ae9-d92f7aa72058.roa
File:                     0382bd56-5e93-4f09-8ae9-d92f7aa72058.roa (raw, json)
Hash identifier:          GIYlFI6kXDkOHo+OSPPCSgmQi/XVDJ2fnb7eXN7IY/E=
Subject key identifier:   02:F5:7E:24:74:D9:93:2F:E5:CF:85:E9:76:8A:99:56:F1:E9:AE:B4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       494C49DA95B08FB65E5ABDC794F3B4B0771CB483
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0382bd56-5e93-4f09-8ae9-d92f7aa72058.roa
Signing time:             Wed 12 Nov 2025 01:01:18 +0000
ROA not before:           Wed 12 Nov 2025 01:01:18 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f14:c000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:4c:49:da:95:b0:8f:b6:5e:5a:bd:c7:94:f3:b4:b0:77:1c:b4:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 01:01:18 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=0ea12ec29a6a28353d89b45a05126ee08fbe6d16bbab8a298e979715db089022, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:85:19:1b:cd:e1:8c:25:2f:cf:ed:5c:5d:0a:
                    11:21:cb:a3:d6:55:f9:1c:ca:d0:97:d9:e0:a9:ae:
                    f4:89:f9:75:dc:92:db:b2:bb:0f:aa:90:68:cc:5b:
                    07:d3:e8:ed:2e:fa:47:92:af:4e:96:00:e7:cd:79:
                    3d:02:50:ff:1c:4b:be:d4:c3:93:39:ed:c7:b9:d4:
                    91:26:33:7d:44:e7:11:bd:da:0e:a6:89:5f:ff:4a:
                    f9:eb:35:b2:3d:f5:6b:1c:22:0c:9a:76:47:a7:4c:
                    ef:34:76:e5:e6:cc:9e:7d:61:6f:59:24:2d:c7:87:
                    e2:3b:ef:09:67:c5:47:03:30:df:04:81:e4:dc:61:
                    31:f8:d1:b1:b4:1b:b6:87:08:12:13:6b:f2:0a:14:
                    72:33:77:b3:a6:8e:41:b4:5b:af:64:bc:ed:ed:cc:
                    80:50:83:b2:f7:d7:d5:81:1c:bf:de:34:d9:e2:7f:
                    0f:d9:e1:a3:dd:4c:3f:3d:0a:9b:f9:bc:91:7f:bc:
                    9e:c6:4c:ba:65:7c:06:fb:1a:4f:6d:05:9e:ff:80:
                    73:e5:10:58:9e:be:f1:21:37:8e:80:b1:55:e0:bd:
                    a6:67:19:c2:77:27:60:6a:31:7c:ba:1e:52:3d:c7:
                    b8:59:3f:96:1e:a3:de:42:94:25:09:22:3b:a4:0b:
                    07:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F5:7E:24:74:D9:93:2F:E5:CF:85:E9:76:8A:99:56:F1:E9:AE:B4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0382bd56-5e93-4f09-8ae9-d92f7aa72058.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f14:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         17:77:a2:b4:a2:cf:8c:8e:e1:46:b9:d8:2e:e1:71:7f:dc:e8:
         00:b1:6d:9e:1b:bf:37:d3:77:79:b3:e0:5c:85:04:98:f0:45:
         7d:83:54:12:eb:67:90:43:de:ae:64:2e:e0:a3:d1:84:9b:f1:
         f7:4f:b2:96:4b:61:80:c5:29:55:ac:e4:31:d2:17:a6:5b:2c:
         0f:a6:c2:3f:6f:e4:d3:2d:f9:78:ea:29:bf:63:49:a3:b6:8d:
         8d:52:83:fd:66:f4:ea:2b:d9:09:f3:a2:5c:37:fb:e2:3c:8b:
         d6:c4:3d:6e:18:21:af:15:17:31:d9:05:23:c8:25:d9:e3:e9:
         e7:42:30:f1:5c:49:e6:94:54:3f:f7:05:ac:d4:d5:8d:93:3f:
         ed:05:32:fc:54:e6:e2:d3:5a:26:dc:56:da:6c:81:15:77:b7:
         54:8a:26:c3:ef:7f:26:8f:64:54:4b:6c:df:26:6e:bf:a3:03:
         29:0b:7a:56:8a:2d:d4:47:4d:e0:b7:11:74:af:0f:ee:52:7d:
         a2:ac:13:66:04:e5:01:f4:31:a8:81:da:ef:a6:2b:d5:f6:1c:
         1b:0a:54:10:96:54:87:0d:c2:49:82:6c:a5:0a:f4:9a:0a:d6:
         0c:86:0f:c0:40:b1:8e:96:b8:90:46:6d:18:6d:50:30:0d:28:
         f9:f9:04:db
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----