Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d08cfca-510f-4253-bd56-4705cca3455a.roa
File:                     2d08cfca-510f-4253-bd56-4705cca3455a.roa (raw, json)
Hash identifier:          eH//Flt2lNjOGIjlwye4p4cnYymZNIaRuXoQb1DAcKg=
Subject key identifier:   15:6E:E7:95:36:13:21:E6:1B:8A:8D:02:92:13:32:B0:55:08:A4:76
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4DDBF4F0D8132A949B8A04DC28EBB5E3B1A3B972
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d08cfca-510f-4253-bd56-4705cca3455a.roa
Signing time:             Mon 22 Sep 2025 17:01:04 +0000
ROA not before:           Mon 22 Sep 2025 17:01:04 +0000
ROA not after:            Mon 27 Oct 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fff:80b0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:db:f4:f0:d8:13:2a:94:9b:8a:04:dc:28:eb:b5:e3:b1:a3:b9:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 22 17:01:04 2025 GMT
            Not After : Oct 27 23:59:59 2025 GMT
        Subject: serialNumber=d3524170dbd332564e26b2d8be2cd9bd786ef01f5d2ba354417823ff2e8c3b11, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:a1:41:f9:0a:11:44:3d:dd:91:c0:66:0a:22:
                    f2:3a:d2:21:60:b4:69:63:9c:75:5e:b5:ee:0e:7f:
                    1d:e5:14:7d:2b:6e:9c:20:52:aa:60:72:93:2c:c9:
                    cc:71:bb:e4:d5:21:80:b6:98:1c:b1:07:22:19:fb:
                    c2:66:b3:4e:76:96:9c:de:36:c7:d4:3a:6e:1a:9a:
                    c0:89:0a:88:4a:08:ec:35:0e:d4:07:ec:9c:3e:ab:
                    68:46:43:65:bf:b9:5d:57:b4:a2:7e:e9:5b:ce:b6:
                    70:fd:00:40:1d:ae:79:88:ee:2a:21:de:46:06:1d:
                    a4:40:c4:bd:ff:ec:d4:2f:0e:30:01:14:13:22:fa:
                    0c:52:7f:df:e3:aa:46:38:65:a1:54:48:00:b8:0c:
                    a2:17:19:ab:d3:a7:cf:0a:02:fe:9c:f4:52:a8:ca:
                    33:66:87:5d:b9:33:67:59:ee:36:9e:83:a3:4c:a0:
                    48:87:86:75:23:69:c6:b0:51:29:47:3c:48:c5:4b:
                    69:12:b5:1a:28:9b:d1:7b:b5:0f:4b:d4:72:c9:5f:
                    87:b0:47:98:9d:dc:65:72:21:0e:c9:51:56:6b:d4:
                    3b:2a:fa:00:59:c5:9c:77:c1:60:a2:fa:59:8d:a3:
                    e7:cb:23:bd:32:84:3f:95:ed:86:fd:91:38:94:f5:
                    e2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6E:E7:95:36:13:21:E6:1B:8A:8D:02:92:13:32:B0:55:08:A4:76
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d08cfca-510f-4253-bd56-4705cca3455a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:80b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:85:3c:6d:b1:4e:f3:46:82:38:06:0d:1e:77:47:df:55:b2:
         36:b0:ab:d3:49:a5:0b:76:e6:20:74:a3:01:c0:74:52:26:1c:
         51:fb:3f:97:e6:d3:4a:03:7b:49:5e:d6:45:44:dd:fb:1f:e5:
         ed:fc:bb:9c:b4:ec:e4:bd:5b:02:f8:3e:97:db:02:8e:41:bb:
         24:ac:63:10:ae:13:1d:ab:48:d5:1e:f8:61:3f:3c:cf:37:de:
         52:1e:28:3b:1d:18:f8:22:bb:97:97:32:f1:2c:cb:e6:bb:9c:
         e5:1d:ff:f3:c4:2f:31:94:d3:a3:65:c9:e3:45:4a:a9:12:c3:
         13:e2:29:d5:19:99:e3:d2:29:8d:a6:9e:f6:35:1c:76:78:e9:
         90:24:da:96:c3:d1:94:f9:c5:c0:e0:22:b4:7a:45:59:24:d0:
         2d:d7:2e:eb:8f:90:26:00:c4:7f:a9:ec:80:25:05:b6:35:5c:
         4b:be:8e:4f:a7:6b:48:2e:8d:90:a1:a6:ed:3e:f7:bd:be:e8:
         cb:62:f5:59:81:dc:4b:d7:35:30:07:2e:6f:6c:8a:a3:09:fa:
         1c:1a:43:7a:97:d8:d3:f1:ea:8d:50:d9:8b:7c:37:5f:fe:1d:
         25:10:97:c6:16:38:00:fb:7e:6f:11:5e:b2:f2:55:2f:39:a7:
         be:98:7e:55
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----