Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b296392-38dd-4491-8b2d-b792d2159f3d.roa
File:                     4b296392-38dd-4491-8b2d-b792d2159f3d.roa (raw, json)
Hash identifier:          AlaBsYzcuJ0Xj8vsgQDJdOWRNujDD5QIXii6Nj1AMr0=
Subject key identifier:   40:37:E3:59:9B:68:FE:72:E5:16:75:E0:D2:0B:D9:2E:F0:1E:96:EE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4D2A3DD7C34031D8ED51B3EB81B14384B07DACF1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b296392-38dd-4491-8b2d-b792d2159f3d.roa
Signing time:             Wed 12 Nov 2025 02:21:45 +0000
ROA not before:           Wed 12 Nov 2025 02:21:45 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:1000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:2a:3d:d7:c3:40:31:d8:ed:51:b3:eb:81:b1:43:84:b0:7d:ac:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 02:21:45 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=733645171ed34737fcf4d9f036d7eda72bfaed791cec217cba32fa821de7a6f7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8f:26:1a:ab:e2:19:7e:9c:01:a1:a4:af:d9:
                    7e:df:db:0b:53:16:38:10:68:19:a0:aa:77:72:8d:
                    27:69:f9:e2:98:d9:a8:d4:2f:c2:53:82:c5:44:8c:
                    62:ea:38:1e:f0:5a:97:0d:dc:8f:b7:ee:dd:c8:26:
                    d3:75:e2:cf:44:59:e6:74:3d:e6:aa:14:4b:47:25:
                    b2:f7:ae:0f:90:35:6b:20:ed:57:ec:81:eb:84:42:
                    d5:43:52:69:99:d3:55:53:33:77:fa:26:19:cd:d8:
                    7e:80:d4:8c:a0:e1:ab:4c:56:bc:76:4d:b7:29:b2:
                    cd:a9:3c:28:64:1b:07:5e:73:8e:ce:6d:2a:05:3d:
                    ba:f2:ba:40:5e:bf:5b:18:c2:84:be:b6:a0:57:8b:
                    e0:c1:ec:9a:f4:ef:7c:80:5b:7e:77:8b:36:19:fa:
                    ba:d1:e1:f3:bb:af:93:4d:93:4c:fb:1e:d2:4a:0e:
                    f4:23:28:91:38:25:29:52:de:5a:a8:b7:2f:01:5a:
                    00:e0:52:5f:25:ac:18:31:ad:8b:3d:ce:99:ac:99:
                    db:da:a0:f6:da:46:cc:b0:4e:ba:a5:18:7d:06:99:
                    81:00:b5:6a:04:e5:bd:6d:b5:13:60:37:b7:62:ed:
                    ea:57:55:e5:10:49:ba:c8:33:06:b5:9c:67:bc:cd:
                    19:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:37:E3:59:9B:68:FE:72:E5:16:75:E0:D2:0B:D9:2E:F0:1E:96:EE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b296392-38dd-4491-8b2d-b792d2159f3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         0e:29:cb:12:41:8a:3c:bb:6a:7e:31:0f:e4:b0:56:9a:69:7e:
         e9:91:34:8a:9b:30:3c:4f:0e:ba:90:03:44:8b:33:f0:ee:90:
         17:80:f7:cf:60:b8:db:9f:50:e6:d4:55:eb:63:49:b2:45:02:
         37:78:3f:0c:d5:a2:37:86:94:ce:77:28:be:64:3d:c8:34:19:
         7a:8c:97:34:b8:c7:a0:1f:81:79:5a:b9:54:f4:2a:68:5b:ca:
         44:65:2c:f9:22:f8:9e:c2:60:c1:9d:bb:7d:ed:28:6c:13:0a:
         c3:fe:b1:f4:93:56:0b:79:70:fa:77:42:9f:1a:42:e4:c5:bb:
         ca:1b:be:83:42:1b:2a:8e:c7:e9:26:98:a5:fd:44:d8:52:3c:
         44:cf:d2:00:a7:5a:11:7c:f3:b6:39:f0:a9:be:ea:04:d6:4b:
         d1:ff:48:37:ee:1d:ef:32:19:35:5e:ce:72:bd:19:1a:98:3f:
         99:b1:32:15:95:00:04:12:4c:f8:af:9d:49:ef:7e:f4:66:a7:
         65:f7:81:d5:a8:63:4d:88:8f:f3:26:f3:54:5d:32:d2:34:13:
         af:10:fc:3f:43:e6:64:97:a5:77:ac:31:1d:37:06:e9:fd:ac:
         e5:6f:f4:69:ad:d1:1a:2d:e9:46:5f:92:ad:d1:81:37:d5:58:
         d4:52:eb:1d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----