Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34b35839-e995-446c-9ecf-36b3c098ff36.roa
File:                     34b35839-e995-446c-9ecf-36b3c098ff36.roa (raw, json)
Hash identifier:          n0YP4aaqMptB04ljcIFy8z/jTbxsknPK1HSJujW23bU=
Subject key identifier:   68:26:D3:AC:25:18:EB:95:CD:19:0E:F0:27:25:84:D0:68:A9:96:A1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6FACE9D2AEB598794260820A5D11DBB5F8F6B177
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34b35839-e995-446c-9ecf-36b3c098ff36.roa
Signing time:             Sat 08 Nov 2025 00:30:16 +0000
ROA not before:           Sat 08 Nov 2025 00:30:16 +0000
ROA not after:            Sat 13 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fec:a800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ac:e9:d2:ae:b5:98:79:42:60:82:0a:5d:11:db:b5:f8:f6:b1:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:30:16 2025 GMT
            Not After : Dec 13 23:59:59 2025 GMT
        Subject: serialNumber=e24bd4e51f835de8dad42da43a4c25fed95b98156166dfcf6ac088bb0c8b193a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:93:5e:91:36:19:e1:4a:b5:1c:c0:57:4b:0f:
                    99:97:4c:2c:a7:a9:82:b1:ff:70:db:18:64:e9:e1:
                    37:2a:1f:ac:a1:23:a8:0c:a2:61:6a:dd:fb:0a:6d:
                    a8:be:4e:3e:48:82:36:ee:03:e1:79:01:4e:2e:08:
                    8b:71:00:5b:56:1b:f7:08:75:ef:98:b1:f3:cd:2d:
                    0e:37:a0:c6:40:9b:e0:e3:2e:99:7e:a6:39:a2:01:
                    2e:72:cd:cc:45:13:a4:fc:91:d1:35:a9:3d:9d:90:
                    3f:b7:f1:05:72:37:f8:ba:2a:b6:19:5e:79:9f:32:
                    2a:e9:8e:ac:7b:2a:7d:63:26:01:79:59:b9:19:ca:
                    31:1a:36:ea:d7:d2:3c:59:b6:09:2a:a9:7a:72:70:
                    07:0c:7a:86:42:0d:f4:21:06:9b:ee:93:5a:58:8b:
                    bb:ae:b6:61:8a:1a:d0:ad:ef:13:08:dc:04:18:04:
                    13:60:6a:58:a9:e7:2b:ec:cc:12:e6:d3:73:27:3f:
                    4f:5c:9e:76:ea:15:75:6b:ff:1b:d1:bf:24:1e:8f:
                    3a:89:94:8a:1d:3b:1d:e1:aa:94:19:83:ac:4c:41:
                    8c:22:fa:2e:0d:ca:32:08:f9:63:9d:47:5a:b4:2e:
                    42:51:81:32:90:8f:92:f0:a2:ea:c4:94:d2:9a:ab:
                    48:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:26:D3:AC:25:18:EB:95:CD:19:0E:F0:27:25:84:D0:68:A9:96:A1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34b35839-e995-446c-9ecf-36b3c098ff36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fec:a800::/48

    Signature Algorithm: sha256WithRSAEncryption
         c8:9d:9c:f7:ed:c8:11:86:cb:0f:60:c2:49:cb:ec:b4:1f:4a:
         f2:d6:9e:61:b7:38:29:2c:47:45:d0:4d:2b:44:61:30:ca:ec:
         d8:31:70:5d:0b:c3:b4:ff:16:30:6d:bf:1b:d2:69:a3:3b:75:
         ed:d3:89:1f:ef:39:70:1a:45:aa:7c:e6:fd:d4:f5:e8:b0:18:
         55:d4:82:1f:67:51:8d:a0:86:80:e0:ac:37:b4:8d:1d:42:2b:
         04:42:70:6c:36:c5:22:2e:9c:a0:4d:fd:b1:6d:a9:50:53:20:
         18:c7:48:3c:7c:5a:80:99:33:10:f5:f9:1b:44:37:1b:1f:94:
         19:c0:bb:5b:95:0d:2d:a7:cf:58:79:d6:d6:64:04:d0:ea:68:
         d5:b2:01:60:2a:bf:a0:e6:cd:a6:98:fd:41:8b:af:66:6e:39:
         67:07:70:24:21:a7:8c:24:8d:f8:82:9d:2f:47:bf:9b:72:bb:
         4a:a6:4e:37:d7:d0:8d:d0:bc:e5:e5:b3:4b:0b:cb:3d:48:a8:
         cd:f9:50:a0:a5:b4:a7:de:55:b9:6d:b5:2a:c0:ae:24:ff:10:
         2a:73:7d:87:6b:49:b7:25:bd:44:20:0c:90:d1:98:af:4d:9e:
         26:ea:e7:21:91:8d:74:38:a1:a4:8d:c0:db:7f:70:35:c4:ba:
         fc:1b:31:81
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----