Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba5981d4-afd6-4470-aa62-ba6b2d148fcd.roa
File:                     ba5981d4-afd6-4470-aa62-ba6b2d148fcd.roa (raw, json)
Hash identifier:          6TGeRs/EHLjBafp0ZXNCtBKQzFF6FLVtYhMNzcBqPis=
Subject key identifier:   CB:AC:73:B0:74:39:97:CD:E6:D4:9D:54:79:2D:A6:9C:CC:5D:1F:D0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4649ED92D3E47EA59015938AF3A460D96C9D0A8F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba5981d4-afd6-4470-aa62-ba6b2d148fcd.roa
Signing time:             Wed 12 Nov 2025 02:31:58 +0000
ROA not before:           Wed 12 Nov 2025 02:31:58 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:6000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:49:ed:92:d3:e4:7e:a5:90:15:93:8a:f3:a4:60:d9:6c:9d:0a:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 02:31:58 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=45b468372789752e4ce5f66f1a8d1e676ec6ae9532f10762576bacfdc75e7a29, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:17:ba:1f:e1:55:b1:9c:ac:89:ec:de:33:cb:
                    4d:98:45:e0:8e:29:9a:19:4d:e5:0d:ca:8c:ad:3b:
                    bc:c4:35:e0:c8:6e:e1:18:51:9a:0d:e2:4f:a7:0a:
                    60:bb:29:57:da:f3:ea:41:6f:50:2a:83:9a:5e:94:
                    35:ce:c7:41:17:3b:27:a4:86:02:20:b8:e5:32:80:
                    5a:66:c8:f6:98:df:18:a3:30:e1:ab:76:92:79:71:
                    43:ce:2c:4e:00:67:41:bf:49:ba:e9:91:0d:45:54:
                    07:38:94:ba:f7:84:eb:ee:04:35:13:ce:ce:0e:b1:
                    58:05:0f:01:88:54:66:54:98:94:07:50:a9:98:ba:
                    57:bc:69:1d:4b:04:94:d8:22:e3:22:e3:66:22:22:
                    97:62:9d:29:78:1d:e8:f9:b6:ab:26:e4:d8:71:15:
                    0e:af:22:74:0b:a8:57:38:1b:8e:26:95:f5:22:ec:
                    b9:39:a3:e9:b4:7f:f9:52:09:c0:8b:e8:38:15:d5:
                    3c:74:1a:57:ba:ea:e6:6c:dd:0b:e6:a8:df:02:7d:
                    0f:f0:0d:52:91:0b:ec:8a:62:d6:4f:53:11:a2:fa:
                    6a:e0:86:22:b1:c8:d5:6d:58:a4:23:da:dd:5c:92:
                    af:02:85:93:91:13:94:25:63:dc:87:74:40:ec:aa:
                    60:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AC:73:B0:74:39:97:CD:E6:D4:9D:54:79:2D:A6:9C:CC:5D:1F:D0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba5981d4-afd6-4470-aa62-ba6b2d148fcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         be:83:93:01:75:13:6c:98:fd:a9:54:e5:44:5d:be:c9:16:5e:
         06:7e:a0:0e:22:d3:15:c9:b4:ea:a5:57:f9:d8:76:97:4b:86:
         25:d9:55:e3:2f:81:46:42:e2:ec:44:80:ec:6b:c3:37:e6:70:
         a3:09:96:f7:ba:9b:56:e8:a4:e8:a1:43:3b:cc:2b:bc:e8:87:
         96:2f:45:81:e2:ea:59:5a:23:5f:6c:a7:57:94:ec:02:4f:8f:
         2a:57:6f:3c:00:ae:44:6f:4d:3c:b0:cd:fa:e0:d8:0b:b6:b7:
         ae:88:15:7a:cc:90:8a:51:56:e7:45:2c:35:1c:b8:75:19:a2:
         a9:5d:99:30:70:1b:cf:1b:97:d8:d7:30:4c:72:ec:5b:ff:3e:
         43:75:91:05:87:52:f8:a9:ef:34:11:44:0e:f9:3e:dd:7d:08:
         99:0e:c4:cb:3a:47:b8:2e:16:74:50:69:91:3c:67:e8:17:df:
         92:41:40:95:0e:39:08:29:d3:5f:d9:86:79:e0:04:aa:fa:6c:
         8b:62:8c:33:75:30:3f:d6:9f:eb:fa:55:40:14:39:7a:a4:b7:
         f2:c3:1a:0e:60:1d:cb:d5:52:5d:4f:d2:28:96:90:74:5c:66:
         6f:da:ff:d0:44:60:2e:99:41:53:c4:73:8a:eb:a8:b6:b9:f0:
         6a:d7:ae:0f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----