Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/095ad87d-f7bf-4ab4-90e0-92ade8be9c9b.roa
File:                     095ad87d-f7bf-4ab4-90e0-92ade8be9c9b.roa (raw, json)
Hash identifier:          aIH5w8uaIkq43sSanIDXTfSspoem/vaqtQhn+8Zsgjg=
Subject key identifier:   EF:2C:F4:EE:59:A0:25:DE:B9:07:41:6B:D1:06:99:0C:64:ED:B5:23
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       558C293E513BECA2723EF516EF436025EA90D218
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/095ad87d-f7bf-4ab4-90e0-92ade8be9c9b.roa
Signing time:             Sat 08 Nov 2025 00:50:12 +0000
ROA not before:           Sat 08 Nov 2025 00:50:12 +0000
ROA not after:            Sat 13 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fec:1800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:8c:29:3e:51:3b:ec:a2:72:3e:f5:16:ef:43:60:25:ea:90:d2:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:50:12 2025 GMT
            Not After : Dec 13 23:59:59 2025 GMT
        Subject: serialNumber=cb623303d5f9a2f0f129fc27dbaec079851ade791b87a98dc524b870034689a3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:45:a4:d5:57:dc:11:ae:1a:48:11:49:c0:05:
                    c2:e2:c6:37:86:7f:26:e7:c1:6f:78:83:04:17:c1:
                    ea:ef:fd:4a:52:85:b2:d7:a4:79:21:97:ce:86:a6:
                    4d:1e:3c:21:c0:d4:63:ab:78:4c:12:4d:fe:c6:98:
                    94:90:a0:ca:d0:18:8a:30:78:e0:1b:16:fc:d7:4e:
                    29:98:10:ea:02:01:51:49:0f:58:cb:32:30:54:4e:
                    50:3a:1c:1e:4b:14:3c:47:4c:b8:d0:1b:57:8c:42:
                    c6:d0:e0:c8:33:51:76:19:00:3e:66:d0:e4:8f:b1:
                    04:75:11:4f:2e:c4:b2:0e:21:9f:ff:79:d0:0d:90:
                    19:8f:d5:c9:25:b2:cb:57:1b:26:55:6d:1e:e3:35:
                    2c:22:20:28:14:aa:5e:30:20:03:90:5b:97:ca:eb:
                    3d:2b:8d:64:1c:4a:f2:6d:56:d2:5c:9e:e2:3d:eb:
                    7e:1f:3d:54:3c:75:50:57:bd:03:7d:13:d3:34:90:
                    3b:2b:2c:78:bd:5a:5d:31:cf:62:83:12:5a:94:ba:
                    0c:82:bf:06:d2:ce:26:80:51:eb:77:a1:de:04:e8:
                    93:82:dc:ab:09:29:aa:64:88:29:f4:6a:5e:b2:db:
                    11:a4:d9:60:60:57:67:5f:29:a3:29:a0:99:33:84:
                    61:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:2C:F4:EE:59:A0:25:DE:B9:07:41:6B:D1:06:99:0C:64:ED:B5:23
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/095ad87d-f7bf-4ab4-90e0-92ade8be9c9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fec:1800::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:d2:ab:49:b9:fe:d0:34:7b:a2:76:02:2b:9d:fb:ad:9f:e2:
         65:d9:1a:5d:e2:ad:c8:52:1e:6a:d4:e0:5a:63:d0:1d:33:f7:
         ef:0c:6d:8b:87:79:44:6b:b9:fa:ca:b4:64:53:36:a7:75:cb:
         f6:01:57:d8:fd:bb:81:35:4d:54:d3:80:a4:c3:92:96:e0:02:
         fe:93:ec:4e:0e:94:f5:b4:8b:08:f4:8c:31:47:fe:f9:d1:08:
         c7:80:0e:04:8c:13:52:d5:45:90:b5:89:22:6c:ba:26:58:ad:
         a6:ea:74:3f:0d:5c:27:29:1b:e8:bd:8e:71:16:dc:0a:bb:90:
         61:08:fd:fe:63:53:77:29:9f:4b:5d:4c:52:12:d4:0d:4c:dd:
         9c:a0:4d:5f:a3:44:f3:a1:99:1f:60:24:b8:1c:98:4a:fe:7b:
         e5:ca:1c:3f:d7:d8:f1:ce:5b:5d:f7:b0:8d:9a:3e:93:6a:0b:
         5b:ea:7b:a8:57:27:62:e5:92:78:40:4a:01:b8:65:e0:af:d0:
         40:ac:e8:95:d7:13:9a:ad:13:69:03:db:74:ac:d7:af:74:df:
         00:a4:84:84:cb:7e:06:21:2f:e9:74:b3:47:42:b6:a3:fe:08:
         cf:7e:64:04:52:04:7e:9b:ef:4f:51:af:a1:c8:76:56:cb:f6:
         7c:ea:c8:30
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----