Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12c1c868-480c-4816-9868-a84168a3a8e0.roa
File:                     12c1c868-480c-4816-9868-a84168a3a8e0.roa (raw, json)
Hash identifier:          /jRMrNOMTA8rdKYAbaEsTTuhc7IdKyVIla3u7eq+kV0=
Subject key identifier:   7B:0F:1C:E9:09:C8:98:3D:F4:64:59:C9:6F:FA:4F:EE:79:D6:9C:01
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7E82DA62401E8B3AEE1207F577563C6F00047B2D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12c1c868-480c-4816-9868-a84168a3a8e0.roa
Signing time:             Tue 11 Nov 2025 02:00:54 +0000
ROA not before:           Tue 11 Nov 2025 02:00:54 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:8050::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:82:da:62:40:1e:8b:3a:ee:12:07:f5:77:56:3c:6f:00:04:7b:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 02:00:54 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=1c11f77234fb1ac93a3622db1b85853d7e84ee20ccd8bc4f6094647bf8219583, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:45:ef:b8:f4:57:17:8b:4d:15:09:db:09:f6:
                    86:d3:bc:3d:1f:31:6a:c2:f7:11:63:a0:a3:df:4b:
                    4f:e7:a3:61:fd:0a:70:bf:a6:fe:50:82:22:9f:ae:
                    43:8f:1c:b9:1f:05:d5:ab:3b:db:8e:65:b5:e9:bb:
                    c9:a0:eb:ca:61:42:a9:81:15:15:ee:9d:ba:56:eb:
                    73:d1:fc:2a:29:67:7e:d9:b2:80:2c:f6:f9:13:38:
                    b3:c3:96:b8:69:87:5a:1b:f1:6d:b0:8e:13:3d:62:
                    24:0e:06:f7:b5:55:91:38:a2:b5:27:2d:0c:38:85:
                    05:08:7e:eb:51:7a:c5:b4:53:d4:3a:fe:25:69:9c:
                    63:f7:2f:fb:92:fd:1f:2e:fd:b1:f4:84:5a:47:5b:
                    15:ac:dc:a9:02:c5:4e:cd:6f:42:94:b7:2b:00:3d:
                    2e:a3:8e:62:68:d4:e0:d9:09:7e:24:cd:05:fa:9a:
                    28:df:d8:29:62:e8:a3:01:5e:84:91:bf:65:6e:ba:
                    af:c9:28:47:91:53:55:39:1c:fb:b0:6f:3a:2e:f4:
                    69:65:f0:17:5e:e8:e6:a9:2d:e1:21:4a:c7:51:6c:
                    90:6f:42:94:fd:88:a2:d9:a3:40:46:dd:45:3c:70:
                    a3:2d:68:5e:45:2e:71:ee:f3:eb:56:b0:d7:82:35:
                    e8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:0F:1C:E9:09:C8:98:3D:F4:64:59:C9:6F:FA:4F:EE:79:D6:9C:01
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12c1c868-480c-4816-9868-a84168a3a8e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:8050::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:96:9a:af:62:33:ea:c7:a0:ce:bb:53:1c:65:4f:df:a6:a5:
         77:fe:84:8c:6f:1b:d4:4c:41:1f:a9:c4:2b:51:4c:d4:49:06:
         24:bf:ab:c5:71:c1:ae:7b:75:31:95:cc:04:aa:ce:d3:ac:00:
         ae:e2:0c:a1:15:1c:c8:c4:94:49:92:73:22:99:e8:bb:30:d0:
         36:3d:db:bc:91:f9:d8:3b:29:d0:d2:dc:62:37:76:ac:e8:d1:
         fc:e4:f2:48:01:79:9c:98:af:8e:fb:a6:4e:e3:cd:b4:17:73:
         06:67:83:8e:38:05:5a:d0:3b:c7:4c:53:da:2b:ef:fe:c6:b7:
         c1:6e:5f:c4:0c:3a:0f:7f:c5:b0:7e:11:bc:06:87:b2:5c:07:
         d1:0f:89:7e:65:61:75:bb:97:5e:69:1b:1d:18:58:58:5f:4a:
         f8:df:27:4b:b1:f3:8b:09:0e:86:62:30:9f:9a:70:f7:2d:29:
         73:6c:5f:da:14:41:1e:57:23:cf:70:f3:8d:95:30:1b:4d:cf:
         0f:f6:2d:65:52:18:69:b8:8e:9a:4c:80:01:96:88:b4:6e:1f:
         57:65:6e:24:00:4b:e7:a0:9e:64:aa:9e:b6:97:8c:ca:a2:0a:
         8a:b2:0e:b9:a3:9e:70:db:26:80:8b:77:50:9e:d0:8f:de:11:
         ab:96:6b:ba
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----