Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d875efc-9c2f-4d49-87e6-ad3ebee32018.roa
File:                     1d875efc-9c2f-4d49-87e6-ad3ebee32018.roa (raw, json)
Hash identifier:          ZhGBUEUxJ75ndnGG45mSYDss+3vh0gKPh+nYWpv8KRE=
Subject key identifier:   4C:2C:47:05:0B:2B:F3:F7:98:EA:96:C3:92:AB:89:7C:A0:06:C0:70
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3A752D9BCC9A7B1952CC8B839BFED69EF811D295
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d875efc-9c2f-4d49-87e6-ad3ebee32018.roa
Signing time:             Wed 12 Nov 2025 01:50:53 +0000
ROA not before:           Wed 12 Nov 2025 01:50:53 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fb9:6000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:75:2d:9b:cc:9a:7b:19:52:cc:8b:83:9b:fe:d6:9e:f8:11:d2:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 01:50:53 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=1d65e7561c8ce534c9a8c8df3b5f87ec3b0c40f60c6cb8d3b5e72d818f81321d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7e:f7:48:d7:3f:18:72:87:4f:6c:b8:31:20:
                    10:d0:20:b5:e1:fe:66:d5:6f:a8:3b:5a:df:16:47:
                    66:1f:67:af:37:49:04:ef:fd:76:f3:74:b7:a0:35:
                    74:b2:84:12:53:27:06:82:5d:f6:10:00:91:4d:52:
                    b2:aa:b9:26:9e:20:fb:f1:25:90:35:b1:ad:e3:56:
                    32:e1:04:cc:29:4a:ee:6b:16:a0:57:28:0b:15:57:
                    86:8b:ce:16:1a:a9:1a:cd:ca:47:9a:cb:b3:4a:94:
                    52:67:2f:e9:7d:83:b5:05:16:85:fa:60:cf:b5:5d:
                    8a:84:49:8a:46:45:35:cf:fd:35:2c:60:33:2f:d7:
                    83:64:5c:28:19:c3:18:a1:89:45:9f:ab:eb:86:f0:
                    ce:cd:df:fb:a1:e0:99:d5:2e:9b:d0:8e:33:dd:6e:
                    10:1a:64:23:b4:96:28:8c:f8:6c:b7:d2:64:1c:72:
                    ee:29:b7:17:0c:f6:b0:68:aa:be:b0:b6:ba:2a:ec:
                    cf:f3:21:7e:ec:01:96:da:e0:b2:69:3f:c2:0e:9d:
                    84:16:d8:0d:fd:c3:1b:f3:d8:d6:9b:c7:e2:35:41:
                    6b:b4:3b:6d:d6:f6:f8:be:46:08:cc:e6:59:29:f9:
                    d9:31:72:ba:b8:95:3f:6d:17:65:5a:ba:11:52:67:
                    81:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2C:47:05:0B:2B:F3:F7:98:EA:96:C3:92:AB:89:7C:A0:06:C0:70
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d875efc-9c2f-4d49-87e6-ad3ebee32018.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fb9:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         66:57:fb:3f:fd:f2:75:a9:c2:f1:f0:5a:ba:00:52:c1:48:9c:
         2d:c8:10:1c:6c:59:ed:e8:17:b6:c5:17:9c:8f:33:50:fa:08:
         6b:c5:d6:ee:34:01:b3:8a:ee:41:99:d8:75:1f:e7:7a:8b:65:
         5b:8a:41:34:37:66:34:9a:89:b9:19:75:23:c0:cc:5e:18:fd:
         49:22:f7:f2:1f:64:8e:94:e8:c2:d6:7b:17:66:25:fc:a2:85:
         08:21:3b:52:a3:d2:fe:e2:6c:1c:a0:55:23:bb:95:16:0a:1f:
         25:f0:5e:d7:73:54:8f:5e:f2:1a:60:93:1d:82:59:8e:22:31:
         06:8e:a8:d3:56:e2:8a:7d:3d:8f:d1:6b:c5:f0:e3:6d:64:80:
         74:3e:c2:65:c1:07:8c:a7:df:2f:45:de:2c:12:0d:33:e2:4c:
         e8:e6:2d:13:06:e7:c8:25:2d:41:08:07:39:62:a0:9a:f0:4b:
         e1:9c:3c:5c:50:e4:02:d7:f6:75:8d:31:e2:c5:a5:1c:ac:e1:
         96:12:9f:29:25:8d:b4:3b:2a:85:d7:d2:6a:a4:0e:41:11:dd:
         99:69:fb:5f:1b:8b:44:35:75:b3:1c:38:c6:d5:2e:44:d7:a8:
         66:82:92:a0:b3:d2:e2:29:12:74:ab:e2:be:39:dc:57:95:d5:
         eb:e2:24:a1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----