Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1196d6f1-4b41-4e2c-847d-6180cdda5e42.roa
File:                     1196d6f1-4b41-4e2c-847d-6180cdda5e42.roa (raw, json)
Hash identifier:          sRXGx9xJR32mDd9Wy1aNC4Xt7nQxtX2RoCqE3u2CZZk=
Subject key identifier:   AE:B0:5B:EF:8E:36:39:F4:DA:1B:6E:F0:7F:F7:68:4F:53:BD:47:A7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7AA40907F7E488677B168BE4006B336091E62239
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1196d6f1-4b41-4e2c-847d-6180cdda5e42.roa
Signing time:             Tue 11 Nov 2025 01:00:06 +0000
ROA not before:           Tue 11 Nov 2025 01:00:06 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:4060::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a4:09:07:f7:e4:88:67:7b:16:8b:e4:00:6b:33:60:91:e6:22:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 01:00:06 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=c36e85f7915f185c5a06d344d3c4960cd0882a50b9f4afd40689741c2a3f830a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9f:09:2e:f0:69:bf:0a:97:24:2a:5f:72:52:
                    e7:e1:57:9a:02:89:b2:21:5c:9c:a3:0f:7c:8e:30:
                    c4:b3:62:69:93:8d:9b:a8:87:cd:59:cc:64:84:83:
                    0d:31:55:c6:d4:4e:15:52:d7:80:a1:5f:7b:94:37:
                    94:48:bb:46:b7:d0:be:e5:d9:04:c2:eb:d4:21:2d:
                    61:25:0f:df:1e:58:8b:44:19:6d:fa:f5:8e:ec:04:
                    a3:89:2e:3a:65:f6:b1:04:5b:ec:16:c2:b7:00:bd:
                    1a:52:d1:6f:03:76:7c:80:a7:e9:d0:32:51:65:df:
                    5c:ad:26:81:04:fd:22:25:b0:ed:b5:dc:86:83:1a:
                    38:79:fe:c2:a1:8a:95:f2:79:e7:97:21:39:a4:97:
                    ef:b9:71:93:13:8b:cc:45:5d:c0:9a:38:8f:5f:fc:
                    ce:55:11:26:3c:4c:12:cb:85:f4:e2:d5:e0:02:01:
                    3b:2c:86:28:a2:2b:2d:e9:dd:da:67:4e:f9:41:01:
                    61:85:df:75:c3:21:f8:5e:ee:09:bf:f5:e2:96:9f:
                    e1:e2:52:71:2f:a2:d8:e5:6f:15:7d:b7:ef:4b:5d:
                    c9:61:36:c7:7e:45:b0:32:12:1d:6a:b8:16:99:e4:
                    bc:98:8a:a2:a0:3b:19:96:2c:f4:50:f2:d8:1f:97:
                    b8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B0:5B:EF:8E:36:39:F4:DA:1B:6E:F0:7F:F7:68:4F:53:BD:47:A7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1196d6f1-4b41-4e2c-847d-6180cdda5e42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:4060::/48

    Signature Algorithm: sha256WithRSAEncryption
         c1:2f:a4:a4:7c:e9:a1:55:7d:f7:8b:fe:b1:80:e2:85:80:be:
         00:df:7e:0c:ea:2f:96:b7:2e:9c:7e:74:d8:86:fe:c5:de:df:
         4c:9b:81:de:26:c7:ce:34:0b:ac:14:6b:f5:e7:6d:3e:80:9e:
         c8:11:00:cb:12:c3:00:67:ee:27:89:9e:b3:67:98:0d:85:dc:
         f0:9c:8a:26:c3:5d:e7:80:f6:af:f9:fc:4c:96:10:0e:9f:11:
         3a:15:00:ae:79:4b:9a:04:85:56:cc:1b:16:a8:4d:54:68:05:
         2c:a0:67:82:e5:e2:c7:39:62:e8:a5:8c:b0:86:68:45:a9:66:
         15:2e:b2:20:34:c5:51:66:42:20:61:d9:cf:23:1c:70:57:7f:
         32:eb:0c:d0:99:9d:68:dc:8a:5e:17:84:4a:e9:ae:6b:dd:38:
         ef:b6:a2:d1:d7:48:c3:6d:3f:b6:a8:ed:fe:7d:2d:67:70:00:
         c5:44:31:27:d3:fd:20:86:fe:81:d6:eb:a9:62:c9:2c:36:1b:
         db:25:78:8f:a2:c4:f7:6a:2d:67:43:c2:96:f8:35:f2:b2:41:
         dc:52:82:bd:5d:76:a1:65:f4:6f:17:07:02:48:02:5e:6e:8f:
         d3:cc:a5:36:9f:77:27:24:84:eb:72:8c:c8:0a:3a:7f:6c:f3:
         93:a8:b2:77
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----