Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2ded0f1-3e58-4bf3-b5bc-be8a105e5b4e.roa
File:                     a2ded0f1-3e58-4bf3-b5bc-be8a105e5b4e.roa (raw, json)
Hash identifier:          R6BudMuQ2DvxpudNe3oRsmfqoZ6drWlfWefEOWTGCDc=
Subject key identifier:   46:33:D3:53:63:A9:CC:7C:4C:FA:0E:61:12:E0:B1:B8:E2:08:F4:23
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7DB3DEA19267CE8962084A96291E83C8F8DD8152
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2ded0f1-3e58-4bf3-b5bc-be8a105e5b4e.roa
Signing time:             Wed 12 Nov 2025 02:20:42 +0000
ROA not before:           Wed 12 Nov 2025 02:20:42 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff2:c000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b3:de:a1:92:67:ce:89:62:08:4a:96:29:1e:83:c8:f8:dd:81:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 02:20:42 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=d7002f654106bc3c72cff7e9b1552251236c02a08d91ab9f505d3275a5dffdb8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b7:b0:1d:25:23:52:c9:ae:09:ee:e0:e4:ec:
                    83:b9:cd:5c:cb:a0:7f:47:cf:16:94:6c:53:e9:7c:
                    b4:b3:e0:c4:ba:95:7b:c8:86:64:e8:e2:2c:50:c1:
                    34:63:e7:ae:5f:a2:62:6f:40:e6:63:e3:54:f9:a6:
                    be:8e:e0:33:9b:ea:05:24:0e:45:a0:1f:02:ad:2d:
                    fa:f4:94:6d:4d:6e:86:77:a2:f1:0e:d7:60:60:b9:
                    54:b3:95:75:d6:25:a9:e8:36:6c:96:e3:f4:2b:fb:
                    6b:bd:1e:8b:3f:64:d8:eb:30:08:89:c2:3f:3a:37:
                    bd:72:96:3a:ea:0a:cd:7d:56:a5:31:ce:75:c4:d6:
                    18:93:9b:d1:52:1f:a6:0f:4f:ce:5d:f2:cb:02:19:
                    6c:7f:ca:c1:5c:07:b3:6d:e9:74:9f:be:da:ed:73:
                    95:45:aa:92:ed:8b:4a:b1:f4:c1:82:8b:0a:29:b7:
                    ef:2b:da:a7:b8:15:4e:bd:fc:63:76:9d:05:5b:5d:
                    1d:18:2c:64:90:41:f5:d1:a1:9f:30:14:84:20:66:
                    05:14:f3:31:13:50:9e:be:3c:bc:1a:8c:c7:da:1d:
                    04:21:1f:a4:65:d3:c1:a5:39:69:b9:01:b7:da:8f:
                    0e:2f:f4:25:e1:ff:54:13:1a:f0:eb:28:fd:3d:bf:
                    74:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:33:D3:53:63:A9:CC:7C:4C:FA:0E:61:12:E0:B1:B8:E2:08:F4:23
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2ded0f1-3e58-4bf3-b5bc-be8a105e5b4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         27:81:90:af:f5:93:28:27:73:77:95:11:d5:c0:02:32:9f:b8:
         42:a5:6b:83:87:2f:ad:6e:2f:ea:95:48:21:a1:3d:2a:b9:ac:
         a5:2d:f6:92:5a:0b:22:1e:30:1c:50:f8:0f:6d:7c:44:35:a0:
         63:c1:c7:8a:07:79:c2:bc:8b:5d:e1:7a:6e:c6:72:db:8d:23:
         02:8b:45:85:ba:af:71:58:54:a1:f7:88:5f:db:cf:53:46:af:
         d9:63:eb:cd:a7:9e:d2:97:c1:4d:af:41:a9:f9:b5:14:44:cc:
         86:fa:c6:01:f9:2d:11:84:6b:3e:91:70:eb:7d:db:00:64:69:
         ac:18:97:24:34:f3:ba:c8:7f:23:17:dc:e3:e2:4a:5c:f4:2c:
         6a:b0:c2:be:7f:a3:8e:39:5f:11:4e:9e:92:88:4f:fd:ae:55:
         1c:8f:d9:ef:9b:cd:dd:ea:e3:8b:35:2a:9f:24:82:f2:e4:32:
         d3:22:27:07:f4:78:3c:c3:f3:81:d1:b8:12:b1:8f:0c:fd:1a:
         3d:6b:72:5d:0e:f1:ff:1f:00:2c:91:73:50:20:e0:be:f3:04:
         95:f4:53:d3:45:d9:fe:76:be:65:c0:3c:93:a6:2c:4b:7e:ac:
         48:61:77:fa:aa:05:d3:f8:e8:04:94:cd:8e:65:56:bf:81:63:
         62:de:47:ed
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----