Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84f379a5-7566-4771-9096-e4caa876ae50.roa
File:                     84f379a5-7566-4771-9096-e4caa876ae50.roa (raw, json)
Hash identifier:          LuAx1SVki6jvGZPstiBJKOblaKO93tFiSMlzSHe/GHw=
Subject key identifier:   8B:C1:F3:DF:47:19:DD:94:7F:59:C1:AE:2B:91:F6:15:E6:1D:6D:E9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4A97317B82AF78493D6EBE0FCB04B09959CC9164
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84f379a5-7566-4771-9096-e4caa876ae50.roa
Signing time:             Wed 12 Nov 2025 02:20:44 +0000
ROA not before:           Wed 12 Nov 2025 02:20:44 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:7400::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:97:31:7b:82:af:78:49:3d:6e:be:0f:cb:04:b0:99:59:cc:91:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 02:20:44 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=797f04404480644ebd87e733348b24dd48074a9a41fd4f4870241280838c0e3e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:00:c0:ff:51:ab:e8:bc:ed:1c:df:7b:b5:1d:
                    4e:a3:1b:e6:58:27:de:7c:54:b9:fc:ed:71:15:c3:
                    be:68:ab:25:14:80:0a:b2:27:c0:53:28:fe:83:5a:
                    cd:68:83:e8:3b:11:1b:69:8f:af:2a:ab:d8:35:93:
                    df:b3:1d:8c:84:4d:7d:d3:61:86:1d:0c:7b:ed:02:
                    02:b6:70:bc:c7:e0:db:b3:46:30:56:4f:fa:8f:4a:
                    5c:03:98:16:5d:87:20:fb:be:00:59:27:86:68:bd:
                    4b:c7:76:8a:ad:62:2c:f1:5e:e0:f5:86:dc:78:e8:
                    aa:b5:e5:1e:c6:21:79:a6:88:de:4d:7c:05:76:90:
                    b0:51:69:75:0c:75:b3:15:1f:15:88:00:27:25:40:
                    ff:ef:78:7b:a7:42:60:eb:c6:3b:d1:50:70:87:8d:
                    8d:30:8b:df:bd:28:df:71:2b:13:bc:de:a4:49:91:
                    4b:d8:45:d9:e3:95:49:b2:28:a1:c1:65:4f:93:a1:
                    af:5a:44:30:71:f6:c9:4b:21:06:e6:35:12:a0:5d:
                    f1:2a:70:c4:13:82:b1:91:6a:0f:9b:88:46:d0:cb:
                    dd:2f:99:73:cb:58:4f:46:79:01:80:f8:91:8b:c4:
                    9b:c0:df:67:da:b0:0e:35:44:9b:73:e4:f5:29:61:
                    86:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C1:F3:DF:47:19:DD:94:7F:59:C1:AE:2B:91:F6:15:E6:1D:6D:E9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84f379a5-7566-4771-9096-e4caa876ae50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:7400::/40

    Signature Algorithm: sha256WithRSAEncryption
         26:c2:50:1a:12:96:0d:c6:15:b6:03:cf:b9:9d:93:67:42:49:
         c9:1f:24:68:a4:97:ad:7f:bf:be:ca:b0:12:af:75:42:50:2f:
         db:53:37:e0:00:a7:d6:26:41:65:0f:26:59:82:ed:dc:df:76:
         b6:1d:7b:59:57:8f:c2:06:17:77:42:f4:ae:1b:f3:b1:31:23:
         de:15:d1:db:06:6e:10:dc:1e:0a:46:50:b0:66:dc:46:44:02:
         35:9b:7b:18:59:c7:cc:fc:cd:12:8e:0e:3d:d6:67:b1:cb:7a:
         1f:dd:ca:df:ce:81:1e:b4:4c:ba:53:28:70:39:bb:e1:a6:17:
         7f:9d:19:33:c0:c6:c7:86:a0:18:a4:06:fa:00:50:6c:57:eb:
         02:cc:dc:07:55:2b:9b:93:56:8a:81:81:d6:3f:8f:61:7b:28:
         f7:39:be:ce:ec:ed:52:26:ac:bd:80:f1:cf:62:49:51:28:94:
         95:df:71:b9:bd:ec:1f:ed:e1:6b:73:c1:3e:3d:91:51:08:ed:
         5a:3d:43:ba:dc:a5:09:12:9c:0e:ac:7b:a9:ec:8a:49:cf:1b:
         20:cc:94:12:bc:56:23:56:67:64:ab:0d:ed:33:24:e2:94:f5:
         db:d4:7c:cf:33:9e:08:30:2c:28:e5:75:3d:bd:32:a3:2b:67:
         13:fa:11:31
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----