Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d46d8f8-c719-4c02-b405-b081542fed77.roa
File:                     1d46d8f8-c719-4c02-b405-b081542fed77.roa (raw, json)
Hash identifier:          slOZFgHskVqfFCqXbiBxT5ODUwEk1TNr/koW2ZWUqeA=
Subject key identifier:   40:83:E5:BD:6E:2B:B9:ED:84:13:44:A8:FC:2C:DB:5E:08:4B:33:12
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       77E876E99EDAD53E44A0889214B962301B1FDD3D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d46d8f8-c719-4c02-b405-b081542fed77.roa
Signing time:             Mon 22 Sep 2025 17:31:37 +0000
ROA not before:           Mon 22 Sep 2025 17:31:37 +0000
ROA not after:            Mon 27 Oct 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fff:8090::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e8:76:e9:9e:da:d5:3e:44:a0:88:92:14:b9:62:30:1b:1f:dd:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 22 17:31:37 2025 GMT
            Not After : Oct 27 23:59:59 2025 GMT
        Subject: serialNumber=fc5c67097d4da1807e0086e47c51fae9251701d88f5b954970ebe932aef4ed88, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b4:d3:d7:e8:5d:40:3d:82:b0:d6:41:98:3a:
                    e0:26:ab:1c:b6:e0:0d:9a:ee:d2:c9:b3:f5:40:7f:
                    c7:eb:37:f0:fb:59:70:06:ab:e7:e9:e4:ac:5e:15:
                    0f:ab:fa:72:2a:26:17:9e:7a:43:08:c8:ca:8f:09:
                    1c:b1:1a:3a:7e:f3:d1:c6:ae:5e:73:8a:50:fa:f8:
                    b4:1d:92:85:e6:71:61:13:4f:32:cc:ac:35:b6:3e:
                    40:8b:c1:a4:3e:f4:19:59:f7:96:5a:7b:33:91:d2:
                    d4:a4:fa:c8:92:40:af:66:3b:86:e1:dd:de:4b:dd:
                    c1:5c:c9:2c:6b:6a:c1:d1:bc:6d:50:d7:2b:b1:5e:
                    1b:4d:7f:ec:02:dc:24:12:23:b9:6d:91:66:52:11:
                    90:7b:4f:c2:2f:61:b2:89:d1:36:f8:54:b9:8d:4f:
                    79:04:94:42:bc:48:41:bc:d8:75:4e:50:32:9f:0a:
                    87:c7:cc:51:d0:1a:36:12:d0:d9:76:cd:1d:8b:9a:
                    61:ab:37:2b:0c:e2:bc:8a:8d:1c:6a:67:53:19:69:
                    a4:f4:53:98:91:72:f2:b2:b4:d8:11:11:69:88:65:
                    15:c8:40:b8:94:4c:7f:8b:e7:9c:3e:c2:6e:79:6c:
                    bd:c2:00:36:5a:9a:a0:e5:1f:ef:22:c6:04:34:54:
                    61:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:83:E5:BD:6E:2B:B9:ED:84:13:44:A8:FC:2C:DB:5E:08:4B:33:12
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d46d8f8-c719-4c02-b405-b081542fed77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:8090::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:3c:65:a0:d3:4f:da:b0:10:30:3e:cd:a1:46:da:b9:07:69:
         0a:f2:e0:c2:03:a9:c5:b7:fe:3c:80:97:28:f1:e9:a4:ee:3b:
         31:45:87:7c:a1:c4:31:d1:70:10:0b:99:e0:4b:4d:dc:de:bb:
         12:0e:00:68:03:e7:95:ed:87:98:cd:d8:86:3b:c1:c2:c9:b4:
         9d:d8:e5:a4:b4:4b:c4:4e:9b:43:c0:35:97:f6:a4:52:c4:ef:
         d9:fc:d7:8e:e4:bd:b5:4f:55:d4:eb:61:47:b4:6c:4e:96:bb:
         03:24:f7:5f:52:f6:97:c4:4b:8c:22:be:35:1b:90:2a:55:c7:
         31:96:90:89:f7:97:e4:a5:79:6a:d6:bb:fa:2b:56:4d:27:f5:
         98:6d:cd:6d:a7:7c:87:f2:c0:8a:2b:74:b9:11:8d:91:d4:bb:
         34:0d:35:d6:a0:83:29:6b:83:dc:97:30:1b:b2:b4:9e:c4:86:
         28:be:c2:63:0a:44:d9:d1:14:6e:64:02:fe:ed:1e:6b:72:30:
         26:10:c7:c2:0f:78:91:57:a7:e9:b5:a2:64:90:17:90:a0:77:
         60:ce:fc:ff:00:1c:0b:42:c6:31:ba:4c:3d:59:e4:2b:68:d3:
         09:df:34:87:e2:86:19:95:5b:57:62:e4:f4:95:25:74:50:2b:
         d3:82:ff:a0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----