Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36ca84d3-e109-44f3-9b04-1b7cebf35595.roa
File:                     36ca84d3-e109-44f3-9b04-1b7cebf35595.roa (raw, json)
Hash identifier:          OgwJCCa0ucwBL7arAFp+Kh1HsCK1WqfFVy6DCvr5oXA=
Subject key identifier:   51:BA:12:B0:1A:92:C7:D5:1D:46:90:E7:5E:2E:38:40:C4:51:51:5E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       626EC67711B63C61F592D182753CA788E44C576F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36ca84d3-e109-44f3-9b04-1b7cebf35595.roa
Signing time:             Wed 12 Nov 2025 00:31:41 +0000
ROA not before:           Wed 12 Nov 2025 00:31:41 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f2e:4800::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:6e:c6:77:11:b6:3c:61:f5:92:d1:82:75:3c:a7:88:e4:4c:57:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 00:31:41 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=df2d0a306298aad14613ee7d629e79a90a9b3d85cc98692d23083ed796de7f87, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b4:20:31:7c:88:72:78:c3:c2:68:34:98:cc:
                    af:be:9f:ca:39:7e:2e:de:3a:ef:3c:a7:d0:07:a3:
                    a8:36:72:0a:09:6b:6e:a2:f7:27:0d:e7:37:36:65:
                    64:18:aa:52:97:1a:af:8a:34:79:54:31:ed:8f:fa:
                    e5:99:05:44:51:c9:6e:f2:b9:fb:93:e2:67:fd:b6:
                    c5:32:13:ef:43:15:35:b2:93:1b:0a:a2:5d:7a:bf:
                    6a:8e:de:d7:4a:31:7c:83:55:8c:5f:61:f5:7c:5f:
                    94:e0:ae:cf:a9:ef:c4:94:ed:a7:65:7d:8f:ff:5e:
                    f6:3d:26:ef:08:b4:ce:99:ac:50:e7:5a:73:1b:ce:
                    42:af:68:ab:17:1a:03:a6:e8:4f:46:62:9f:d5:65:
                    60:9f:42:74:16:61:e1:57:69:45:a2:cf:92:de:21:
                    a4:13:66:bf:2d:05:2e:59:7c:16:ff:cf:10:9e:d2:
                    6f:31:13:9e:8d:a2:07:6f:09:29:2a:05:da:ae:02:
                    f1:c2:ab:14:70:46:6f:7f:04:3a:68:2e:cf:92:a6:
                    6c:c2:2d:bc:c2:f9:85:43:7f:41:91:4f:f3:d4:e1:
                    fc:77:de:cc:87:24:7d:db:74:87:93:96:30:49:6d:
                    a2:c4:52:f6:c4:eb:0b:c5:01:28:e3:df:95:d8:9f:
                    df:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BA:12:B0:1A:92:C7:D5:1D:46:90:E7:5E:2E:38:40:C4:51:51:5E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36ca84d3-e109-44f3-9b04-1b7cebf35595.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f2e:4800::/37

    Signature Algorithm: sha256WithRSAEncryption
         c5:d1:40:15:fa:ca:eb:e0:91:1f:da:e9:2c:25:96:f1:20:c9:
         df:97:51:09:0b:19:55:a7:32:08:52:ba:f8:80:3f:fa:32:c5:
         15:66:a0:72:66:26:2f:df:a3:fb:08:78:6d:7f:80:22:e6:e3:
         4d:9f:77:3d:ed:73:55:93:31:69:2b:bf:37:e1:62:86:08:6c:
         70:66:d7:5e:96:66:98:a3:d1:06:d5:5f:f6:a9:e3:a9:6d:c6:
         c5:21:a7:83:0b:57:37:9c:7d:32:3a:9a:88:f6:6f:47:33:30:
         04:36:6b:5f:b9:9c:d0:0d:2d:ea:f7:42:5c:63:45:c3:6c:46:
         2c:98:a7:76:26:1c:28:6f:eb:bf:88:55:70:d1:20:b2:43:a4:
         17:50:28:79:13:5b:05:95:70:2a:86:d2:fb:61:fd:c1:13:24:
         33:b0:8f:8a:e7:df:e5:aa:ea:a8:fa:9a:6f:2a:93:10:79:58:
         8e:6d:9c:95:a3:bc:08:cf:42:19:ef:62:f9:4b:3b:3e:ec:3e:
         bc:ec:cf:87:8c:ee:83:9b:5c:68:30:6d:62:ee:25:f4:f8:79:
         ff:21:d1:2e:82:13:d7:da:b1:bb:5f:26:2c:09:c6:0b:b6:90:
         3e:57:6b:94:e4:8d:eb:11:c1:21:59:35:e4:d8:53:4c:5b:b3:
         2d:26:c5:ee
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----