Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30083b55-0236-4f8d-8387-e3015b3d58d8.roa
File:                     30083b55-0236-4f8d-8387-e3015b3d58d8.roa (raw, json)
Hash identifier:          7fLSjWdY/9VhVBf6pdnZdVNrs/uDEiRXJsVoKAJJ0J0=
Subject key identifier:   DC:29:45:AA:9F:F6:93:2F:E5:23:3F:BF:0C:F1:BD:64:9D:66:34:9E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       18C87D0B0BE69E601AE7B0A93636FECA0324CE32
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30083b55-0236-4f8d-8387-e3015b3d58d8.roa
Signing time:             Sat 08 Nov 2025 00:30:15 +0000
ROA not before:           Sat 08 Nov 2025 00:30:15 +0000
ROA not after:            Sat 13 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffc::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c8:7d:0b:0b:e6:9e:60:1a:e7:b0:a9:36:36:fe:ca:03:24:ce:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:30:15 2025 GMT
            Not After : Dec 13 23:59:59 2025 GMT
        Subject: serialNumber=f54fe2b29b1fb48039bab43ec6c5055dbc180bd2856ac32f15e1e2f7ffb953ee, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ca:6e:d5:31:56:f9:d4:36:31:c5:3a:e7:f5:
                    18:98:4d:dd:25:37:97:b6:a1:56:74:fd:92:78:40:
                    63:79:44:9d:7a:95:18:c3:28:fa:aa:79:24:51:42:
                    59:f9:d3:97:0e:5d:45:55:c6:ee:34:0a:56:46:bc:
                    a9:11:12:1f:00:46:b5:ec:ff:a2:f2:0f:92:15:f6:
                    cd:a4:84:a0:18:03:77:3c:d6:31:4c:e0:29:67:b0:
                    69:94:03:91:61:ab:3e:24:af:37:49:9b:54:f1:e8:
                    8a:53:d6:e2:77:c3:e1:a7:43:4f:03:91:75:31:a2:
                    57:22:68:c7:ee:f1:d0:7e:3c:ea:af:ee:51:54:06:
                    55:a3:1e:ff:70:43:ab:e6:fb:1b:41:29:11:22:ed:
                    c1:5e:bf:41:54:19:41:08:45:6b:21:8f:77:8b:dc:
                    8a:f7:fe:58:2c:dd:54:8e:91:70:e3:c5:e9:03:f6:
                    00:51:9b:23:ed:4d:55:3c:6e:f9:8b:e7:2c:7e:76:
                    ed:d2:c6:62:fa:75:f6:50:5a:16:ee:34:86:57:d3:
                    0c:f2:8c:75:7e:54:0a:6c:a3:c0:c7:00:54:e7:cc:
                    f3:6f:63:36:37:a0:36:a3:2a:f6:fc:a1:f7:96:1f:
                    78:10:f2:0e:59:a7:10:7c:b8:e4:75:ee:17:f6:ec:
                    0e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:29:45:AA:9F:F6:93:2F:E5:23:3F:BF:0C:F1:BD:64:9D:66:34:9E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30083b55-0236-4f8d-8387-e3015b3d58d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffc::/32

    Signature Algorithm: sha256WithRSAEncryption
         c4:1a:6b:ec:bb:a2:7a:ab:5e:17:58:a8:97:f3:e5:ef:3d:08:
         4f:f5:55:27:e4:ce:1e:cd:7c:a7:5a:3a:cc:41:b8:14:e1:96:
         4f:d8:4f:cb:fa:b2:24:f8:82:8e:47:eb:5b:d0:55:7c:31:7a:
         c6:e3:fb:ad:2c:da:ad:ef:20:49:82:85:96:cf:61:c2:68:b2:
         1d:03:68:ff:a9:f9:43:04:1d:ef:6c:38:de:90:6c:05:a4:37:
         39:fe:cf:c9:27:3d:d3:54:94:d3:c7:c8:fa:23:99:1c:f5:7b:
         e5:24:a2:cd:1b:45:1a:10:88:f0:3d:42:a8:69:9b:83:1d:c0:
         4a:65:9f:9f:57:1b:dc:3c:1b:7a:1a:69:32:53:af:c3:0a:30:
         71:98:01:a8:fd:0e:7d:01:23:b4:40:bb:ab:aa:30:28:4a:92:
         2a:fe:81:e0:16:33:4b:15:73:5c:7d:bc:fa:68:e0:02:00:d3:
         69:ae:cf:f2:8f:d2:e7:b8:3c:a2:7b:f7:38:a0:b7:13:8f:3e:
         0f:b0:11:fb:ad:c6:eb:40:57:cd:11:95:04:82:be:79:03:ea:
         81:d9:a2:1c:0f:8a:7f:bf:ca:fb:64:a2:14:58:43:ca:06:88:
         f5:95:7b:70:9a:bc:18:87:25:99:65:5a:5f:a3:36:38:fa:98:
         7c:ea:6f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----