Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31263499-132a-4222-9382-b584a30ccae1.roa
File:                     31263499-132a-4222-9382-b584a30ccae1.roa (raw, json)
Hash identifier:          cUAii5CielK1UmmoLz4TpEWrRcDWh1/hG78tpBi3usg=
Subject key identifier:   03:EB:6F:A0:30:02:E0:97:35:A3:CD:B3:4D:9E:63:4E:3F:07:7E:41
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       07C540D88510E853539864EC79FBAB08C8229F22
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31263499-132a-4222-9382-b584a30ccae1.roa
Signing time:             Wed 12 Nov 2025 00:20:07 +0000
ROA not before:           Wed 12 Nov 2025 00:20:07 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f28::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c5:40:d8:85:10:e8:53:53:98:64:ec:79:fb:ab:08:c8:22:9f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 00:20:07 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=6e02348342e7e563061b4c4f005c863bb5f9007923dffd07b6b5d673dc543153, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f1:78:b2:d7:2a:5f:d3:14:87:25:f5:b7:1a:
                    05:8a:49:8e:1a:e9:09:cc:d6:35:15:03:ab:51:85:
                    43:2d:23:a1:f5:17:bc:a8:f3:c6:5e:ce:14:63:03:
                    25:14:f8:d3:f6:69:39:4b:c0:bb:d1:61:71:19:c8:
                    8b:3c:f6:e6:05:98:c5:bf:ff:40:f6:4e:b6:42:7d:
                    04:1b:51:ad:c0:8c:8f:71:05:ce:7f:6a:04:e9:5b:
                    3f:c0:85:f3:72:ed:a5:60:0b:b9:48:a0:52:ba:ee:
                    69:5d:77:e2:1a:31:8b:6d:b8:26:4f:6a:aa:18:af:
                    17:20:c6:9c:e2:ab:23:53:ca:c2:e8:96:32:da:50:
                    b6:c2:40:fc:f8:1f:60:69:ec:20:c5:a3:47:59:3b:
                    9a:24:78:33:a6:8e:3d:5c:ca:d1:ec:40:c9:70:22:
                    eb:41:64:74:11:f5:94:d6:49:e6:ed:e9:0c:2f:c7:
                    0a:56:4b:97:30:c9:a9:8c:67:b6:62:ab:c6:f1:c8:
                    b5:f7:1f:87:dc:15:c4:b3:e9:98:6c:6e:6e:02:d1:
                    25:02:83:ff:dc:1e:a3:f7:b4:f1:1a:cb:26:3f:09:
                    c1:3b:98:41:1a:0d:28:1a:cc:b5:1d:cf:d0:1e:72:
                    11:24:46:fa:b2:2e:e3:e1:de:cf:7d:7f:ec:85:07:
                    f1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:EB:6F:A0:30:02:E0:97:35:A3:CD:B3:4D:9E:63:4E:3F:07:7E:41
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31263499-132a-4222-9382-b584a30ccae1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f28::/36

    Signature Algorithm: sha256WithRSAEncryption
         9d:80:05:81:c9:0b:77:6f:31:b4:34:81:a0:cc:0e:94:e5:e0:
         b1:32:e6:fd:ed:fe:77:1f:60:8f:f1:73:29:9c:30:2e:d0:87:
         38:bc:4f:ef:a0:88:43:ca:2a:54:9a:03:e7:c7:16:0c:f0:48:
         13:7f:64:c2:5f:9a:f1:ca:50:45:9a:ae:6f:2f:e0:ec:c4:92:
         e5:b4:8f:12:78:17:4a:70:e0:39:85:00:a4:d2:42:60:0d:e3:
         6a:27:9a:4d:c8:df:8a:e7:0c:7d:f1:02:91:7c:0c:85:81:32:
         f0:48:51:e4:67:b6:b3:c2:82:1a:f8:4c:74:cd:a0:ff:14:12:
         f6:61:4d:d8:8d:ed:ab:7b:0c:97:7c:a1:55:76:a1:3f:9a:47:
         10:d2:5e:2c:c8:75:d0:f5:0c:26:5e:2f:59:ba:0e:19:0d:7e:
         95:09:5b:65:b5:62:21:05:42:d9:23:35:ab:a3:bf:2b:f4:8c:
         e0:48:39:a9:04:a1:51:cb:f2:2d:39:b8:ee:79:ca:d0:46:7c:
         08:dd:cf:e2:d1:7c:9c:4f:a1:66:45:59:ab:84:8c:7e:2b:05:
         a3:a0:97:c1:61:39:30:93:9a:7f:71:ea:e0:5c:7f:a8:6a:ed:
         99:87:94:91:cb:a8:eb:3b:14:74:6d:07:19:d4:ca:09:97:8f:
         d3:44:26:2c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----