Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e9ea69d-4b33-4a85-894c-5620e610e709.roa
File:                     6e9ea69d-4b33-4a85-894c-5620e610e709.roa (raw, json)
Hash identifier:          wRxDDmN19Cp/G/mM8pSvrOUuPujUToGsQ7fylvhC41s=
Subject key identifier:   49:E4:95:1E:21:7E:B9:46:99:30:AD:9F:D2:D3:5B:89:11:BF:0D:FF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       11B635C6148B1A3B3C4A8BA2B7A65DEE9BCD233D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e9ea69d-4b33-4a85-894c-5620e610e709.roa
Signing time:             Sun 16 Nov 2025 00:01:39 +0000
ROA not before:           Sun 16 Nov 2025 00:01:39 +0000
ROA not after:            Sun 21 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffd:85e8::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b6:35:c6:14:8b:1a:3b:3c:4a:8b:a2:b7:a6:5d:ee:9b:cd:23:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 16 00:01:39 2025 GMT
            Not After : Dec 21 23:59:59 2025 GMT
        Subject: serialNumber=648db2181d52a8192bf123d3bdfdb9403f292fd8b0b51ca734c261d3497a7152, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2f:1c:33:91:a8:cb:db:9c:6b:35:41:fb:ca:
                    83:82:22:06:8d:80:ac:05:72:87:99:99:01:9d:a2:
                    a8:20:b1:d1:26:14:74:3f:33:a8:76:52:fc:1f:6c:
                    88:59:de:ee:9f:a7:bc:d6:23:8c:d3:f6:40:c7:54:
                    56:eb:8d:23:6e:b6:60:d4:46:e8:7f:b5:3c:6a:a0:
                    ef:cd:55:5d:d1:6d:53:2d:1a:5b:a5:af:c5:62:a9:
                    94:23:40:03:c1:7f:4b:9e:2f:17:45:86:98:e4:5f:
                    1d:fc:09:b0:3e:84:55:ae:74:7a:ee:44:a5:d5:47:
                    fb:5a:3d:4a:75:57:db:19:6b:89:cf:5d:e4:b0:9b:
                    49:84:bd:52:47:e3:76:88:08:f5:d5:63:09:64:49:
                    b1:22:71:9d:af:d0:30:0e:e3:d3:8c:9a:ed:e4:d2:
                    23:8c:2e:dc:ee:e3:55:38:e4:32:d3:ea:8b:68:2e:
                    a1:a0:19:6d:d8:e4:af:ed:0d:06:5a:12:f1:b2:0a:
                    19:7e:e1:aa:21:33:3a:35:0d:e6:63:90:bf:42:65:
                    55:61:03:88:80:be:8a:e3:85:bd:33:81:3b:1a:7b:
                    81:c1:58:b3:81:e1:64:47:79:ce:72:29:a6:91:3d:
                    b4:c7:a0:1a:2c:cd:9d:a3:07:95:5b:c5:4a:cb:5c:
                    98:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E4:95:1E:21:7E:B9:46:99:30:AD:9F:D2:D3:5B:89:11:BF:0D:FF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e9ea69d-4b33-4a85-894c-5620e610e709.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffd:85e8::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:41:8c:c4:ed:10:00:fb:52:95:cb:14:43:86:c0:4f:21:85:
         cc:f6:0e:77:a5:99:87:01:5f:64:75:9d:50:82:5a:41:7b:af:
         dd:29:28:26:3e:c3:8d:47:60:93:cc:11:f8:b7:63:af:91:22:
         e6:ce:6c:50:0c:5d:78:55:ea:38:f5:7f:f3:a1:0f:29:15:2d:
         e5:a2:f9:aa:ba:7a:74:6d:a2:b0:ed:0c:e1:86:14:da:7b:cc:
         8f:cd:53:7b:a5:ed:04:e2:b4:89:e6:f5:f3:f8:f2:91:b8:09:
         2c:5f:63:f6:0b:94:72:fe:b8:96:26:b2:07:ee:f8:6a:04:e9:
         55:cd:b1:76:9b:a5:b1:96:91:d7:73:2a:8c:f1:70:d9:cf:35:
         2f:2e:df:20:6a:65:6d:1d:37:a7:42:fd:49:b4:c5:df:4f:c6:
         8d:07:f5:a1:87:79:bd:9a:20:9c:df:27:41:85:2e:9a:14:8d:
         66:23:b2:1e:6f:81:f2:52:e5:b1:06:79:ac:b9:c1:7a:95:63:
         e3:a3:6d:35:4e:c6:b7:b5:63:72:5d:4b:18:b2:c7:2a:c4:2b:
         e1:e4:64:bd:60:a7:c1:22:b7:5f:7c:f2:81:e8:6f:a2:57:ca:
         4e:01:da:34:16:11:52:56:2b:79:f3:fd:50:17:3a:b4:df:6d:
         46:bc:22:ea
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----