Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a0a8979-b3b0-44b3-8908-2d54f7cf4311.roa
File:                     4a0a8979-b3b0-44b3-8908-2d54f7cf4311.roa (raw, json)
Hash identifier:          n09wNmEYzLfz8aqKAA/f2UQ4CeI9WZHrELhr7cLuo6w=
Subject key identifier:   00:9A:EF:7B:4F:DF:81:69:87:8D:8C:88:53:38:01:61:28:96:DE:95
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6680B6950E34F993D83A062A22CE7F7619EA34BE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a0a8979-b3b0-44b3-8908-2d54f7cf4311.roa
Signing time:             Wed 12 Nov 2025 00:20:12 +0000
ROA not before:           Wed 12 Nov 2025 00:20:12 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f15:4000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:80:b6:95:0e:34:f9:93:d8:3a:06:2a:22:ce:7f:76:19:ea:34:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 00:20:12 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=a9ba2d83c448586184e90e80ceb2fc3fc1ccad203b8237a2da05a40e235c473c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ae:d9:7e:ad:b0:93:08:48:a7:75:58:2c:11:
                    0a:4a:6f:93:e6:3c:46:0d:07:ba:8f:cf:dd:9d:c1:
                    74:62:43:e1:59:28:38:32:ba:0d:2a:34:dc:28:4f:
                    e6:50:1a:01:de:65:76:f3:27:ac:cb:99:a6:1c:57:
                    37:c9:31:ba:2a:b7:f4:f1:8b:75:16:f7:4f:f5:63:
                    4e:0c:90:56:3a:0c:0b:95:f9:d6:07:58:a6:7c:bb:
                    3b:0c:8c:27:21:fe:8c:c0:5f:89:51:a0:59:a1:e6:
                    a2:c3:87:99:43:e0:1e:d8:79:6c:f5:e3:1d:56:3c:
                    3e:3d:e7:b8:f9:5a:23:cd:eb:48:6a:ea:10:a1:d6:
                    d0:fa:1f:e6:cf:f3:35:e5:fe:0c:b7:4f:43:9d:48:
                    5d:70:72:f1:d3:f3:a0:26:ff:6d:e1:8b:df:f1:df:
                    2e:2c:9e:ab:0e:63:68:bb:9f:fe:8d:da:26:e2:72:
                    f8:b1:1c:41:94:0e:c0:eb:77:1d:74:a3:f5:43:46:
                    57:a7:d1:0b:7d:d9:18:f2:2a:94:69:fa:7e:02:63:
                    25:03:df:10:6b:2c:6a:4e:42:79:da:0e:64:a2:93:
                    22:4a:0a:4c:56:31:20:6c:c5:de:89:01:e8:40:17:
                    75:14:de:db:ab:a7:7b:c6:4e:4d:da:33:6a:a4:24:
                    9e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9A:EF:7B:4F:DF:81:69:87:8D:8C:88:53:38:01:61:28:96:DE:95
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a0a8979-b3b0-44b3-8908-2d54f7cf4311.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f15:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         18:87:8c:8a:89:ad:32:c6:10:cc:25:f2:02:c3:ca:34:af:39:
         b6:ce:90:35:aa:e0:9f:1e:de:43:7a:30:6a:48:0f:e7:13:6c:
         f4:99:1f:75:0c:95:a0:66:23:f6:56:45:24:f8:d6:6e:94:22:
         cb:cd:fb:63:dd:57:f4:18:47:be:9a:8c:ee:41:bf:c9:13:09:
         0d:9a:97:23:ac:d6:7c:f5:cb:bc:41:26:74:ce:ba:26:32:8f:
         52:43:41:a4:e2:b2:c8:c4:d7:0c:74:3c:43:d3:b9:b1:d2:e4:
         69:2f:ff:1d:48:d6:d3:fe:22:5c:61:f2:25:4b:1e:e9:3f:3e:
         3c:8c:ab:34:d7:80:90:25:04:c3:d3:45:de:09:43:87:a5:ec:
         6b:93:8f:ee:fb:f7:9b:a7:71:db:20:fc:27:4f:0f:d7:8f:52:
         ff:57:1e:00:ad:c4:3e:18:45:d6:f9:08:b3:95:3f:3a:8d:bb:
         36:aa:78:09:98:a1:a5:7c:b0:ee:84:3e:4c:d8:fe:0c:21:81:
         36:73:3c:dc:69:77:c0:da:33:6e:33:1a:d4:30:76:37:c3:de:
         2e:72:cf:79:31:16:33:cd:5c:f3:87:7d:73:b0:9e:5b:48:79:
         96:3e:07:6c:2e:85:ce:70:ed:5b:e7:6d:d3:a7:c8:b6:de:48:
         57:7e:cf:8d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----