Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8715ad8-1947-4d7d-97f5-11cca1a94885.roa
File:                     b8715ad8-1947-4d7d-97f5-11cca1a94885.roa (raw, json)
Hash identifier:          pBa8hgFReLfaTjwbryZhnZ9FQexjr99F7sJ9APPwxRg=
Subject key identifier:   F7:B2:8C:52:C2:D4:ED:40:79:5F:0A:FF:28:38:91:B2:A7:0A:4E:45
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       30B970F0196AD8B638B93B9DF17EC7A863D1658B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8715ad8-1947-4d7d-97f5-11cca1a94885.roa
Signing time:             Sat 08 Nov 2025 01:30:38 +0000
ROA not before:           Sat 08 Nov 2025 01:30:38 +0000
ROA not after:            Sat 13 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fec:cc00::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b9:70:f0:19:6a:d8:b6:38:b9:3b:9d:f1:7e:c7:a8:63:d1:65:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 01:30:38 2025 GMT
            Not After : Dec 13 23:59:59 2025 GMT
        Subject: serialNumber=6cc1e5ae06e722736ea857790eeb1f87e2a4715bb002600ba4f4f4efc29767fa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b3:ee:2b:b4:f3:d4:73:5c:43:81:9d:13:bc:
                    7f:fc:1e:98:84:2b:22:76:c8:b3:b7:05:1c:a2:6a:
                    bd:7b:ad:a4:a4:e0:34:94:ef:f5:d5:1a:bf:c6:78:
                    4b:63:a5:d4:f5:d0:44:02:8f:ce:c8:82:9b:b9:c0:
                    9d:90:ad:49:d0:da:eb:e0:1e:18:e5:20:6d:c7:61:
                    da:12:69:d8:c3:f1:a3:84:a6:fe:3b:65:12:e7:ec:
                    48:df:15:75:75:23:e6:df:f8:06:48:51:26:13:a1:
                    15:11:a2:e9:fd:9e:36:bd:ca:7d:61:cc:a4:f5:a4:
                    3a:95:1d:1a:d7:8e:97:6f:58:52:ba:04:2d:64:86:
                    a8:b2:be:b3:86:d4:b6:f0:c2:b8:85:be:64:2e:64:
                    99:17:e8:1d:90:e2:89:a6:64:4e:bb:b9:1c:8e:fa:
                    5e:91:08:ca:4b:38:58:5c:7a:db:81:2a:7e:4a:a3:
                    6d:31:be:15:bf:c3:20:1c:e6:fa:16:2c:41:9c:81:
                    ca:90:40:f5:4b:27:e3:d7:4c:71:df:82:1c:52:68:
                    84:5e:bc:9a:2b:c5:69:f6:76:85:0c:62:09:8d:d6:
                    4a:5b:a4:c2:37:38:3e:f8:16:a6:af:2b:c0:97:ba:
                    bb:a8:e1:f2:f4:56:29:57:b0:2a:cf:92:e6:55:56:
                    28:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B2:8C:52:C2:D4:ED:40:79:5F:0A:FF:28:38:91:B2:A7:0A:4E:45
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8715ad8-1947-4d7d-97f5-11cca1a94885.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fec:cc00::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:56:bc:8e:c9:0f:83:a4:e3:14:8c:d0:ed:ab:0d:cc:6d:10:
         1e:b3:bb:38:df:54:89:39:c6:41:6d:e9:a9:af:57:37:22:14:
         18:50:95:ec:6f:85:6c:c2:bc:ea:cd:a2:9a:5a:90:af:16:83:
         22:38:7a:4b:29:37:34:19:de:a8:e5:35:ce:46:4f:06:09:d9:
         23:1c:27:52:36:a2:3f:7f:a3:e7:82:42:75:95:3e:b5:84:e6:
         d8:1d:41:6d:4b:8c:b7:bb:74:39:49:4e:72:30:56:ce:0f:ed:
         2d:40:4d:b2:09:98:50:47:44:6f:ec:51:ba:03:dc:00:5d:fb:
         c5:0b:0a:cc:cc:95:92:1b:be:7f:24:e5:d3:93:72:7b:21:c3:
         45:e4:88:27:e9:b6:73:0d:c1:68:4b:2e:53:d1:e5:be:96:b8:
         72:f8:90:fc:7b:bc:c0:14:87:d0:cd:fe:8a:c1:93:d8:cc:b6:
         8e:b0:7c:13:ae:3e:bf:69:ae:9e:13:81:3c:79:8d:3d:31:6f:
         ab:ff:c1:bc:1b:dc:2d:40:84:36:af:ef:bd:55:d0:40:12:f6:
         ff:71:83:80:a1:f2:50:7e:19:ef:c6:45:40:61:9e:81:0f:bb:
         c4:b9:cd:6f:c1:52:13:6c:b2:4d:07:d7:e7:23:a7:9a:25:ce:
         d0:11:6b:f0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----