Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b39f42e-3903-4926-ae1f-f90681592c51.roa
File:                     3b39f42e-3903-4926-ae1f-f90681592c51.roa (raw, json)
Hash identifier:          A82vnA5YFRFKQI4EVqcEIFPJP68ZvhZF1LJhbul5j8E=
Subject key identifier:   57:84:67:D7:5C:AD:FA:75:42:46:1F:91:79:03:DF:70:CC:22:02:E7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7AE779D9D94125FFFDAB92E2449A67BDDBE5C166
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b39f42e-3903-4926-ae1f-f90681592c51.roa
Signing time:             Wed 12 Nov 2025 02:31:23 +0000
ROA not before:           Wed 12 Nov 2025 02:31:23 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f61:7440::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e7:79:d9:d9:41:25:ff:fd:ab:92:e2:44:9a:67:bd:db:e5:c1:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 02:31:23 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=1945a743daf0ad99e363a6dddf7b64313e77df076544d3366e12267cc95e2013, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d7:b9:30:f9:55:88:21:46:f0:df:f8:b8:1e:
                    72:e2:78:c6:0d:d9:58:65:c0:7c:6a:48:e6:9f:fe:
                    88:e1:dd:22:04:82:d6:ca:87:78:76:f7:d0:b0:41:
                    e5:9d:01:b8:09:54:a5:c5:7e:b2:f9:e6:82:34:89:
                    8e:99:48:23:ab:70:24:c4:52:90:6c:50:50:a5:0c:
                    ff:a9:fc:08:78:bf:97:95:ac:0a:af:8a:8c:41:83:
                    1e:d2:0b:d9:19:4b:16:85:44:dd:06:d8:da:4f:99:
                    26:23:c2:fd:1c:f5:8b:83:fc:a5:69:96:52:10:f7:
                    52:53:53:12:75:98:ea:d5:1d:2b:e4:0e:14:b8:e5:
                    e3:30:f2:76:59:0d:98:05:23:f8:b6:cd:98:cf:a0:
                    94:5f:01:44:1e:19:4d:ef:f6:a3:0f:be:89:cc:42:
                    bd:9f:4b:f7:ba:3a:89:f0:53:e8:ff:e7:60:8c:01:
                    d5:2f:36:47:31:d7:e3:17:b1:f7:8d:09:33:2a:62:
                    6c:e3:4f:97:29:3d:af:41:1a:a2:24:92:70:d8:c0:
                    60:09:ff:f8:85:b8:3e:f9:3f:17:41:7e:5a:b9:cd:
                    27:ec:af:25:66:41:f3:02:fe:de:e1:c7:ad:51:fe:
                    15:13:67:38:df:eb:42:a6:0e:5d:5a:3d:89:39:7f:
                    fb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:84:67:D7:5C:AD:FA:75:42:46:1F:91:79:03:DF:70:CC:22:02:E7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b39f42e-3903-4926-ae1f-f90681592c51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:7440::/48

    Signature Algorithm: sha256WithRSAEncryption
         d6:0a:e1:56:5c:0c:50:f9:1c:01:47:eb:ab:ec:0e:ea:a5:dc:
         e2:7b:f8:78:79:10:53:0b:53:76:80:96:bc:3e:45:0b:02:9c:
         3f:aa:f4:22:45:21:0f:39:a0:8e:a4:34:52:73:7a:c8:0f:96:
         e9:b1:74:ac:f0:0f:41:88:bc:bc:50:68:d6:07:ab:5d:2f:0b:
         b2:f6:40:93:d9:b3:e1:cb:ae:98:95:f3:80:10:6d:d8:d9:a2:
         35:6e:4a:0e:36:7a:b9:12:3c:f7:a0:d9:b4:71:bc:35:74:6f:
         44:d6:7a:f4:5b:d7:f0:0c:b2:40:0e:bc:94:e7:7c:85:9c:0f:
         39:49:ab:ae:7b:59:10:6a:4f:c4:ae:de:1b:f1:13:9f:21:10:
         99:d4:91:ce:1b:cb:80:17:8e:89:d6:03:a3:23:0a:fd:c5:e3:
         52:ac:71:89:88:b5:ab:96:a8:37:03:10:90:26:6b:95:e9:e8:
         43:56:1c:74:59:fc:51:bf:02:90:d1:80:46:dd:4e:36:0c:8b:
         dc:93:38:b0:0e:ff:1f:98:e7:f8:3e:32:39:2e:a5:47:72:17:
         aa:41:ff:7b:ba:a1:ba:6e:c2:b8:b2:7f:28:c9:01:a9:75:2c:
         04:15:63:73:83:05:9c:41:28:d6:c1:f3:cc:68:e6:92:3c:0b:
         d0:c3:50:dd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----