Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c24d76f-a988-4548-a654-37a30aa8d32c.roa
File:                     4c24d76f-a988-4548-a654-37a30aa8d32c.roa (raw, json)
Hash identifier:          ck/cTKdTCh2XC1gZGBi5T7z7AEs2QngiIJjs4nLXj3I=
Subject key identifier:   0B:0B:26:F9:9F:C1:F3:09:DE:E7:25:50:0D:CD:CA:53:BB:54:EE:CA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7B71068C2A38E8F4AC759CDB1BB38EE35C6E2CFD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c24d76f-a988-4548-a654-37a30aa8d32c.roa
Signing time:             Wed 12 Nov 2025 01:20:10 +0000
ROA not before:           Wed 12 Nov 2025 01:20:10 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1c:4000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:71:06:8c:2a:38:e8:f4:ac:75:9c:db:1b:b3:8e:e3:5c:6e:2c:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 01:20:10 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=c22e6cfdc7ce62053b0a0a676dcf565dc5e8610e09a3b8c975c1c70c596f0a61, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f6:20:dc:34:e3:3a:7b:6d:19:e4:f2:a2:69:
                    2f:0b:5a:84:9c:c1:d5:02:09:9e:f2:80:73:6a:9c:
                    ee:75:e7:45:65:6e:a9:dc:e6:f3:b0:2e:ab:ab:92:
                    e1:a8:b1:f2:45:f3:09:bc:79:e8:2d:66:7a:93:a7:
                    ae:73:ce:65:5c:84:c2:35:a6:8c:6e:56:1b:b4:8a:
                    8b:d4:f8:b4:71:9b:44:28:11:a4:d4:15:d3:ed:3e:
                    b8:a2:5b:1f:f2:f9:6c:56:29:7e:f8:67:1c:fa:1a:
                    4d:3d:5f:87:e5:2b:9f:91:e5:43:b7:71:ca:f3:53:
                    13:6c:fa:2d:06:e7:c6:62:95:8e:f2:19:5e:89:83:
                    56:75:08:4c:62:26:8c:4f:bd:7a:c5:fe:05:e1:b0:
                    5b:58:a8:e1:51:b0:37:fb:66:3c:e3:97:1d:a4:3c:
                    fd:16:c9:c4:a7:1d:b5:38:d8:2b:90:2f:54:ee:71:
                    98:44:b8:9c:11:77:27:be:5f:2c:b0:0c:fa:2a:35:
                    43:32:96:f5:da:17:f2:e3:29:15:98:71:47:0e:e7:
                    ed:24:7d:7f:42:92:8b:ad:bd:69:ff:ac:01:dc:a1:
                    74:e7:5f:30:40:07:c7:9d:48:85:84:4c:c9:16:b7:
                    4f:2e:bf:f2:80:75:cf:ca:fb:5c:9f:55:e4:00:fd:
                    76:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0B:26:F9:9F:C1:F3:09:DE:E7:25:50:0D:CD:CA:53:BB:54:EE:CA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c24d76f-a988-4548-a654-37a30aa8d32c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1c:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4e:e9:01:33:90:fd:b9:ed:88:87:5f:2d:b8:14:bc:17:de:2f:
         50:e4:41:0d:87:14:b0:0d:b6:10:22:a8:85:39:e7:58:9b:e9:
         3e:f4:75:d3:61:2c:64:86:a9:8e:63:03:4b:f7:7d:1f:1b:05:
         b7:b5:ab:68:97:51:5b:51:c5:7d:58:b3:53:60:bd:35:21:e7:
         00:da:80:09:a8:52:88:89:3c:8f:06:00:f2:d8:56:ff:83:3a:
         af:63:55:1f:c9:4b:37:ee:85:80:1d:0b:ff:63:62:02:11:dd:
         ae:c2:ea:4a:55:2d:53:63:27:d6:f6:6f:dd:bc:a2:99:9a:a5:
         c8:f8:87:80:a6:0d:e8:b1:51:a9:42:94:92:29:24:51:aa:7c:
         54:e0:dc:fa:13:94:f8:90:3b:f0:27:a4:5e:2b:b5:07:5e:81:
         44:01:2b:bf:25:ef:fc:ab:29:3f:e0:9c:fb:00:89:97:89:95:
         cb:f9:67:cb:dc:c9:55:08:c3:55:44:0b:e6:6c:e7:b9:ad:c4:
         9a:3d:88:81:0b:c8:c6:0e:1d:e3:fb:c1:8d:18:36:6d:30:ed:
         07:3f:7a:3f:63:56:c5:0f:bf:ff:a8:5e:4a:7f:c7:81:fc:20:
         f8:bb:1e:cf:9a:cf:8c:59:26:bf:0a:e1:00:4b:31:00:0d:ea:
         9c:ea:3d:39
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----