Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67cccffa-6f12-42e5-86fc-9793e15b5a3f.roa
File:                     67cccffa-6f12-42e5-86fc-9793e15b5a3f.roa (raw, json)
Hash identifier:          6peDhbPFPo7HUsFKwneMl8f4enwY3wu0poGvi+62/fo=
Subject key identifier:   21:7F:9D:4D:40:0E:6A:52:CD:47:DB:79:66:48:7A:12:BB:89:A9:B5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1DCC8A0FC72583F6598F6B440A4395E81DCB4BFB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67cccffa-6f12-42e5-86fc-9793e15b5a3f.roa
Signing time:             Wed 12 Nov 2025 02:01:07 +0000
ROA not before:           Wed 12 Nov 2025 02:01:07 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:e0c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:cc:8a:0f:c7:25:83:f6:59:8f:6b:44:0a:43:95:e8:1d:cb:4b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 02:01:07 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=c64954650374c475c9fd94e522ab3bcd5c59b5634e62eeb1218c9ad85f698392, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:54:ec:86:bf:5b:3c:0c:55:4a:98:9b:b1:98:
                    fc:b5:a0:5d:7c:e7:64:c6:9c:2c:21:30:e0:d7:30:
                    f3:78:8d:10:a3:82:08:ab:39:0f:73:16:77:c3:64:
                    d4:b7:36:a9:56:36:b4:10:46:5f:00:e7:c5:2a:0b:
                    01:aa:e9:83:33:f4:89:f1:38:f4:72:4d:84:3c:15:
                    37:b2:47:88:de:63:99:5f:11:67:e7:0e:98:9d:1c:
                    d3:05:9c:09:c5:9e:34:11:a1:d7:c7:28:32:3e:bd:
                    0a:f6:58:49:85:c0:41:5c:4c:47:3e:14:18:04:12:
                    11:63:7c:d0:ad:a8:83:13:23:7f:d1:23:5c:f7:53:
                    d1:15:49:db:fe:5a:c5:4c:14:8a:71:8a:b9:87:d1:
                    36:37:f9:8c:3e:65:1b:59:38:b3:31:49:ac:f9:de:
                    f5:20:74:fd:f7:82:56:60:9f:8f:e8:62:6f:d4:49:
                    c4:0d:47:39:6d:cd:96:eb:0e:c7:59:ef:73:f1:ad:
                    58:91:2e:75:36:0a:c7:64:7c:40:49:90:74:7a:b9:
                    ce:0b:f9:84:bd:08:d3:c2:a8:34:16:a2:ac:2b:2e:
                    0e:94:31:97:a7:96:70:d1:7f:ab:f8:63:44:4c:2d:
                    9e:f0:5a:5c:bc:59:b7:dc:26:32:18:6c:4e:b3:f4:
                    5a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:7F:9D:4D:40:0E:6A:52:CD:47:DB:79:66:48:7A:12:BB:89:A9:B5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67cccffa-6f12-42e5-86fc-9793e15b5a3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:e0c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:5f:34:12:4d:a8:f1:99:cf:96:0c:5b:50:07:65:9e:cc:51:
         89:18:47:6f:6e:da:ab:70:f4:bd:ee:1c:ae:f9:7c:a5:06:7e:
         01:45:b5:99:1f:48:95:b4:d6:27:1f:f4:5b:f0:26:2d:50:52:
         49:22:a4:0d:a0:88:37:59:4a:01:f7:a1:9d:1d:da:fa:9f:fe:
         aa:e1:91:8f:24:ec:a4:c0:d0:8c:36:cb:6c:66:c2:26:c7:b8:
         a4:00:52:14:8c:58:3e:44:06:b9:eb:04:2b:70:ba:5f:39:17:
         66:b1:01:b5:ad:dd:7f:f5:9d:9d:75:c6:06:39:6e:51:21:dc:
         92:1b:bf:2e:aa:16:bd:41:4b:f0:0d:c3:c6:48:8a:5a:8f:ea:
         03:9c:02:c2:a4:29:1f:ec:fe:cf:5d:88:8d:f8:a8:cd:8a:b8:
         2a:20:f7:e3:19:61:30:f3:3c:c4:25:67:fc:34:2f:a5:b3:d6:
         c5:c4:15:bf:5b:fb:18:1f:53:1e:4e:6e:fc:32:5c:14:b2:6f:
         70:87:57:35:45:fc:2b:12:cc:54:d1:c0:fe:c1:2b:e5:31:4d:
         03:14:02:d3:15:81:9f:67:f9:9d:0b:57:d1:78:4a:eb:15:91:
         04:37:a5:00:83:c2:64:d8:9a:b1:94:71:53:0f:81:64:d1:6c:
         75:aa:36:5e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----