Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a9d4c87-e208-4010-a5c6-e2c265094a0b.roa
File:                     0a9d4c87-e208-4010-a5c6-e2c265094a0b.roa (raw, json)
Hash identifier:          wvbpHVB/D3oP34PqHFS6cm3G+9Ksp7W2Ki7DouNjTj4=
Subject key identifier:   AB:DC:E0:9F:64:3B:75:FC:F7:CA:37:1A:C6:FC:5F:98:5F:67:8F:38
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4FDF836D4488F3A82C9A738EA773718EE9F7223E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a9d4c87-e208-4010-a5c6-e2c265094a0b.roa
Signing time:             Mon 15 Sep 2025 15:10:24 +0000
ROA not before:           Mon 15 Sep 2025 15:10:24 +0000
ROA not after:            Mon 20 Oct 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ff4:8000::/39 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:df:83:6d:44:88:f3:a8:2c:9a:73:8e:a7:73:71:8e:e9:f7:22:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 15 15:10:24 2025 GMT
            Not After : Oct 20 23:59:59 2025 GMT
        Subject: serialNumber=40aaea3e832976d94b002f73c0acb3e32437f0147d917cd41b978b773f256009, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:87:0e:e8:da:97:32:57:ed:2a:45:4f:74:18:
                    45:fe:0b:49:bf:09:5e:34:67:f3:1e:91:d2:5e:99:
                    d8:34:22:ee:c6:7c:b9:71:da:f6:06:97:c1:58:f8:
                    83:f3:29:98:6a:1c:64:24:9b:e5:b1:41:eb:6f:69:
                    1b:f3:12:f4:14:8e:ba:5e:a8:64:8a:48:02:0e:1b:
                    e0:61:2b:ca:45:fe:1b:98:0d:60:ab:ea:a3:44:aa:
                    cd:6f:8b:ad:e6:2c:62:db:2e:23:6d:f1:1d:23:69:
                    bc:d3:9c:e4:62:12:5e:4c:ae:a7:ac:7a:11:df:24:
                    cb:95:17:6c:42:f7:cf:b0:cc:53:53:d0:a4:6c:a3:
                    f7:64:3e:d6:15:23:38:69:9b:01:19:17:85:f1:f3:
                    67:74:ac:5a:47:3c:15:46:e9:f0:fd:9e:68:58:4a:
                    38:01:a3:a6:a9:de:bd:e2:dc:dc:00:ff:2b:15:4a:
                    1f:fe:83:e3:cf:d2:2b:80:bb:69:b9:c9:36:76:ec:
                    cd:e2:8c:9e:44:fb:68:7e:6d:d7:1a:dc:b2:d3:a4:
                    ed:3c:b4:9a:c3:d1:60:ec:ad:52:f2:84:f9:a2:20:
                    80:14:f4:9d:6e:58:9e:fe:28:2e:de:71:3b:4f:7c:
                    fd:e5:54:2f:01:40:50:87:50:3b:36:64:89:62:74:
                    5e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DC:E0:9F:64:3B:75:FC:F7:CA:37:1A:C6:FC:5F:98:5F:67:8F:38
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a9d4c87-e208-4010-a5c6-e2c265094a0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff4:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         6b:59:ab:cf:fd:d1:ba:5c:25:d1:b1:6d:d4:21:41:f5:b5:17:
         56:8a:2f:80:11:4a:f7:ef:8c:38:46:9a:0c:91:87:71:aa:07:
         b3:66:ef:ae:2e:13:f9:7f:0f:9a:e5:46:8e:9a:dc:6c:01:ff:
         67:6c:76:d1:6a:ad:0c:b2:90:7d:83:f7:eb:1c:5b:2a:e6:b2:
         e3:8e:3a:4b:85:47:79:28:f8:92:06:8c:8d:05:cf:20:46:73:
         cf:f0:e5:2b:8f:3a:87:2a:0e:18:eb:b0:7d:03:aa:ef:b1:35:
         9a:e7:fd:9b:c7:17:58:d1:32:e5:c2:bb:a9:ff:99:ac:41:b4:
         59:49:cc:6f:79:1e:50:b0:be:20:18:e2:b1:17:52:90:83:fd:
         88:32:b9:18:97:7e:63:b0:07:06:b4:09:15:08:e8:f8:76:a2:
         0d:1f:21:cf:b6:db:8d:f7:c4:cf:de:46:62:7a:e8:93:18:05:
         4a:b2:b3:c2:23:8b:49:09:cf:1e:86:55:3c:02:82:13:a6:87:
         bb:ec:b6:4e:88:38:26:a7:0e:d2:5b:f0:4c:bc:08:7a:57:0c:
         81:9d:22:3e:1f:43:31:9b:6f:e2:09:1e:83:f6:bf:d4:27:00:
         bb:11:15:40:dc:85:3e:c1:dd:75:0a:50:a7:43:e9:4f:93:f6:
         bf:2c:cb:d4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----