Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80d26464-05c9-4f2b-ba80-8facd3bbef1f.roa
File:                     80d26464-05c9-4f2b-ba80-8facd3bbef1f.roa (raw, json)
Hash identifier:          jTaLY0bZ/l6XWedoyDyXUzR1A1Tz958MxOblUp3FK1Y=
Subject key identifier:   55:C8:E8:5A:04:DB:5E:96:5E:37:45:64:29:B4:FF:4A:C4:D1:09:6F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       13C0AAC0EEB21E39E938210DF8CB28D4E2A6A5E1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80d26464-05c9-4f2b-ba80-8facd3bbef1f.roa
Signing time:             Wed 12 Nov 2025 01:20:53 +0000
ROA not before:           Wed 12 Nov 2025 01:20:53 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f38:1000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c0:aa:c0:ee:b2:1e:39:e9:38:21:0d:f8:cb:28:d4:e2:a6:a5:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 01:20:53 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=41f1d1ca0e86874456c28bd12f7f5008f0f298a20db124dc2ec6d47cc00c4f99, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a4:36:e9:40:c6:bf:de:48:8e:e7:cc:1c:13:
                    3c:e3:80:15:fe:1b:49:9d:7e:a7:0f:8a:80:9a:02:
                    00:af:57:70:f4:92:38:66:92:03:d7:16:42:74:1f:
                    5b:07:e9:89:71:8b:af:62:3a:2f:dd:6a:f1:da:52:
                    e4:7e:5f:09:bb:c6:bb:10:74:37:82:42:02:a6:ae:
                    ba:34:9c:7f:d1:bd:82:ac:de:44:de:a5:cf:e1:90:
                    15:23:a8:2b:06:1d:6e:a8:f6:7e:fb:45:83:60:df:
                    88:d9:2b:7f:cd:5c:ae:26:ba:c6:63:2c:d8:f4:7b:
                    ed:40:bd:6f:e5:3d:69:f4:1b:ea:4e:46:ee:ab:e9:
                    2d:7e:dd:09:36:d9:0d:66:8a:31:3a:f7:9c:59:a6:
                    69:22:c3:3c:cb:41:5c:26:1f:7f:b7:d9:7c:c0:93:
                    4f:c3:f1:84:b4:65:0a:5c:93:62:d3:4c:ea:e4:84:
                    87:90:64:e5:78:9f:a3:77:42:08:6c:64:28:71:6f:
                    59:a3:da:f9:7f:cb:a8:be:5c:0a:b3:d8:f3:cc:3d:
                    02:95:93:fb:45:e2:3e:8c:2c:84:72:f5:7a:d6:88:
                    3e:7c:a7:e3:81:b4:0c:eb:75:23:6d:d9:85:4e:df:
                    04:aa:d8:b4:21:48:5c:6a:1b:2b:0e:3a:55:5f:be:
                    e2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C8:E8:5A:04:DB:5E:96:5E:37:45:64:29:B4:FF:4A:C4:D1:09:6F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80d26464-05c9-4f2b-ba80-8facd3bbef1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f38:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         68:6e:12:e2:d4:01:80:f1:a3:5b:61:00:63:09:c1:e6:39:28:
         73:f7:b2:e5:d8:b7:0e:0b:cc:c7:e0:51:dc:95:7e:09:b9:4a:
         b5:3a:40:70:77:0c:2d:07:5d:57:90:ee:18:ac:6b:f5:40:c5:
         b9:79:5f:0f:75:5d:e7:a0:82:0f:84:bc:9d:9c:99:98:11:3b:
         ad:df:04:43:16:f1:79:ad:25:0b:9c:cc:05:74:b6:23:2f:3a:
         3f:80:14:8f:49:4c:2b:c8:57:01:b3:29:71:f5:a7:b2:28:f8:
         ed:a6:63:59:c2:b7:ea:4b:4f:44:c0:96:1c:82:3e:1b:02:a5:
         33:97:fd:a1:b2:7e:88:09:ab:b1:23:fc:b9:12:d9:4e:66:9c:
         17:42:cb:25:58:5b:65:01:49:df:52:67:3e:30:9b:4b:99:73:
         58:02:a2:1c:22:a7:2c:38:45:ff:d1:4a:49:98:3d:16:be:99:
         c0:10:f4:c3:fe:c3:0e:95:b3:5c:60:1e:2d:fe:3f:96:8b:80:
         e3:c8:77:47:3d:8a:b3:76:9a:72:63:27:47:aa:a9:3f:ce:41:
         19:60:45:84:9d:37:08:bd:7f:1e:e4:7b:93:fc:4f:ce:c6:6e:
         2b:b0:4e:dc:d2:68:da:0c:97:9d:39:fb:e9:88:b7:0e:4e:3d:
         ae:d5:06:e9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----