Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/449a3cb0-095f-4360-86c2-46dba2beaf65.roa
File:                     449a3cb0-095f-4360-86c2-46dba2beaf65.roa (raw, json)
Hash identifier:          t1EO73DRdIEYKcF4i9wMMX+ZJ7RlgE0e6P/SQNMAWPk=
Subject key identifier:   16:77:F7:59:C9:1E:E7:AE:DC:B7:DE:9C:EE:BE:79:C4:85:DC:6D:E9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2238C29467648BBD7279002CCD1815A91D156DB8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/449a3cb0-095f-4360-86c2-46dba2beaf65.roa
Signing time:             Tue 11 Nov 2025 01:52:04 +0000
ROA not before:           Tue 11 Nov 2025 01:52:04 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:3440::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:38:c2:94:67:64:8b:bd:72:79:00:2c:cd:18:15:a9:1d:15:6d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 01:52:04 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=2e1975abd01990ea128fa1c87aef5b074097b8e10089542fc1fa6cea658481bc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6f:e2:89:9d:24:54:76:0e:01:e9:4d:a4:a0:
                    9d:36:24:37:a7:d0:14:df:42:5d:6d:96:0b:0c:1e:
                    ea:7b:12:92:d4:07:33:e6:d0:22:8e:15:cb:a8:38:
                    02:bc:a7:b7:45:ba:8a:8c:ce:32:21:1a:5c:9f:f5:
                    56:ed:11:19:60:cc:b2:87:02:f1:e5:24:10:a9:e3:
                    91:8e:d9:02:ca:a1:bd:8b:05:de:79:4a:70:f8:d9:
                    c3:07:93:af:c3:8c:5f:df:32:09:be:54:64:62:ac:
                    91:2d:8a:78:08:90:8d:45:a5:8a:e4:3e:36:17:93:
                    3f:db:dc:46:0a:f3:3b:8b:aa:f1:9d:4b:95:35:3f:
                    8b:de:6a:1a:1b:82:12:6e:9a:91:ae:21:20:53:4b:
                    82:47:25:e7:e1:c4:aa:f6:06:20:35:60:95:95:c2:
                    92:27:c7:e9:1c:2d:ac:b3:58:fe:48:ad:4a:61:ab:
                    ea:f4:6d:e9:5d:b3:8d:1b:63:c9:2b:4e:8f:ef:5d:
                    e0:3a:dc:98:ba:20:6f:e5:94:74:5e:b2:83:5f:ee:
                    41:ff:b4:cf:8c:8c:60:4a:62:02:32:ef:b0:70:8a:
                    80:9d:1a:8e:b3:b6:ed:22:32:dd:08:c7:a1:cc:0c:
                    1f:79:53:44:07:f3:b5:3a:5b:c5:54:f7:36:27:0b:
                    05:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:77:F7:59:C9:1E:E7:AE:DC:B7:DE:9C:EE:BE:79:C4:85:DC:6D:E9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/449a3cb0-095f-4360-86c2-46dba2beaf65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:3440::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:44:df:7f:6f:98:b5:00:1a:21:f4:94:24:95:37:24:95:fd:
         2e:0d:aa:3e:90:64:bd:64:ed:39:cd:98:b6:47:a2:11:30:3c:
         53:03:3c:12:de:3b:b5:f9:2f:5a:6c:eb:bd:64:37:7a:6b:c3:
         3e:e8:d6:fe:78:4b:d7:f7:8f:b2:ff:2b:b2:7d:72:51:42:a4:
         ca:91:14:b3:db:24:62:63:ae:a0:d9:5c:b5:48:20:c2:2b:ab:
         ac:ff:b2:37:90:d4:c9:4e:18:8b:b7:94:cb:d7:02:57:f9:c1:
         dc:a0:94:35:fc:28:6a:60:b0:1b:0b:4f:5b:e4:bf:cf:a1:b8:
         00:9e:fa:37:c3:b4:21:32:30:5e:08:dd:3c:5f:ac:bf:7e:b2:
         e5:65:0c:3a:e5:87:5e:d0:4d:b3:0f:b0:5f:2b:bc:be:dc:01:
         ec:0d:ed:56:cc:38:a1:23:d9:7b:0c:42:a3:4c:42:95:3f:97:
         e7:7e:2c:3f:71:38:fa:be:3e:42:ce:a7:3b:5f:f4:98:19:d5:
         b1:d7:80:71:f3:6a:f6:09:bd:2f:91:dd:61:82:7a:c4:5a:cb:
         58:63:82:be:92:cb:cd:b0:12:5e:48:8b:48:14:bc:52:9a:03:
         1d:2b:02:07:ea:a6:08:8c:87:36:2d:dc:c7:84:67:9d:4a:0b:
         95:34:f9:85
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----