Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74979d15-5647-4efc-ac8a-013c581338cc.roa
File:                     74979d15-5647-4efc-ac8a-013c581338cc.roa (raw, json)
Hash identifier:          L10g0dh+owldseOQPB0dEXdT/GjYW0kVGK5a2CpRXss=
Subject key identifier:   0E:9B:D6:70:EC:99:98:6D:DF:3A:C9:36:1F:5D:26:3C:57:1C:A0:BA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7326D23FD631B053615C2F2FDF210C55CF62B0BC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74979d15-5647-4efc-ac8a-013c581338cc.roa
Signing time:             Tue 11 Nov 2025 00:30:53 +0000
ROA not before:           Tue 11 Nov 2025 00:30:53 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:5040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:26:d2:3f:d6:31:b0:53:61:5c:2f:2f:df:21:0c:55:cf:62:b0:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 00:30:53 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=2e682a6ba9e0b66c3b9820ca4aaba8d77e1fcccf5813d7295b14f10931a995f2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:1e:bf:95:96:0e:fc:1e:83:27:10:cb:6f:1c:
                    4a:13:2e:b7:f7:6d:bc:57:11:c9:45:62:4c:e9:21:
                    b0:41:5a:dc:33:c7:a0:3d:01:c8:12:48:87:ef:28:
                    74:a4:e2:95:69:6b:4e:cf:18:3c:50:20:9c:fd:db:
                    ff:6a:30:b1:60:2b:20:81:f6:8a:32:ae:e7:c5:9c:
                    06:20:6e:77:91:cb:21:4c:0f:6a:6f:50:a5:a2:7f:
                    8a:1d:92:1c:61:ca:cb:93:55:f7:ba:5a:f6:85:d7:
                    fa:6d:68:d0:2b:fc:71:a7:7d:f0:04:68:cf:62:ed:
                    e7:24:52:51:7e:f9:cc:25:3a:a9:b9:1e:d6:9e:79:
                    f7:46:62:93:b9:2d:d8:e6:a0:a0:a4:8a:a9:9a:f3:
                    3e:38:9e:5f:1e:42:ff:6e:a3:ad:c5:ed:b7:23:9f:
                    bc:c2:0d:d4:da:24:16:0f:06:c7:46:ff:c3:9f:2a:
                    09:e7:59:b7:30:e3:a2:42:d6:02:78:45:d5:0d:07:
                    a4:2f:5d:4e:a0:b2:44:f6:72:86:8d:cc:9b:93:b6:
                    76:1f:de:84:90:c3:10:33:3c:02:2e:f7:41:db:d4:
                    f2:ad:0a:7b:29:7d:37:38:93:0b:e3:4d:dc:f0:76:
                    99:b8:33:b2:4d:fa:23:a5:15:c0:89:f5:ae:47:a8:
                    8d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9B:D6:70:EC:99:98:6D:DF:3A:C9:36:1F:5D:26:3C:57:1C:A0:BA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74979d15-5647-4efc-ac8a-013c581338cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:5040::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:75:88:d5:05:a6:77:2c:8d:85:fa:a0:35:10:b4:f8:e3:7d:
         39:3f:9a:7f:0f:60:47:4b:64:88:29:b6:ef:36:38:33:47:df:
         ce:92:4d:9e:5a:e7:b2:cd:42:5a:dc:57:fa:46:a8:fc:2d:fb:
         96:6e:63:3b:a0:39:de:93:4b:ea:9e:c5:18:5c:02:4a:67:6f:
         1e:f9:65:26:2c:bd:a1:4d:84:38:dd:dd:b4:3c:3d:c3:d6:b3:
         f2:e0:b1:e0:39:75:96:84:c9:6f:02:ad:9c:28:9a:be:bc:0b:
         35:c0:1b:b7:42:38:b9:94:da:46:02:ec:ae:55:11:1e:61:ca:
         f6:0a:6e:85:60:28:e3:42:53:f1:a0:d7:8a:9f:7a:39:27:5b:
         7f:c2:99:e8:a3:25:8a:28:0e:09:09:0e:dc:00:79:23:35:fe:
         95:d4:4c:44:a2:35:48:e2:b1:cb:4e:f6:22:89:0f:b1:86:72:
         a2:b7:16:0a:93:0e:68:f5:a4:ef:ee:1e:99:dc:56:d9:94:af:
         ff:a1:7e:62:81:49:c4:29:78:4f:10:42:cd:07:27:5a:a2:f9:
         32:0d:cd:a2:f7:28:cc:2d:b3:5f:ee:cb:1b:d4:13:5e:a6:c3:
         46:78:2b:02:08:a6:96:e7:3a:30:19:7f:b0:66:67:c3:2e:59:
         40:e8:6b:de
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----