Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4ae4400-d755-410a-8030-0c3ce316310d.roa
File:                     d4ae4400-d755-410a-8030-0c3ce316310d.roa (raw, json)
Hash identifier:          CCOtVRwhwW9RmAkQGG9bKaVxr3Ml1lvNaj8U94VMPu8=
Subject key identifier:   C1:46:76:AA:3D:50:62:A8:6B:A9:25:6F:5E:66:09:F2:EB:A8:96:84
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       22CFAC8DA93E545E33E15686CB5B4CA3B0C59807
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4ae4400-d755-410a-8030-0c3ce316310d.roa
Signing time:             Mon 22 Sep 2025 17:21:31 +0000
ROA not before:           Mon 22 Sep 2025 17:21:31 +0000
ROA not after:            Mon 27 Oct 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fff:8140::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:cf:ac:8d:a9:3e:54:5e:33:e1:56:86:cb:5b:4c:a3:b0:c5:98:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 22 17:21:31 2025 GMT
            Not After : Oct 27 23:59:59 2025 GMT
        Subject: serialNumber=81410b95d74a6eb169a046f1d6a32ee45e0b2d5fe1ded12b30b4a9d8cc897913, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:13:d0:d4:14:0a:fc:c1:22:45:5c:c3:e3:80:
                    e7:b9:e8:49:94:d1:b8:90:09:71:7a:df:5c:9d:80:
                    7b:5e:84:71:43:08:8e:07:fb:f7:35:6c:fd:96:5d:
                    3f:e7:dc:33:ae:6f:e6:00:6a:f3:5b:3f:2a:46:be:
                    71:3e:e0:ff:43:19:63:e7:89:d0:77:d1:f4:e5:2f:
                    69:ea:c0:9a:2f:36:1f:18:dd:da:c5:04:8b:9f:2d:
                    94:38:45:fa:8a:92:6c:2c:90:3b:24:0c:b7:78:ec:
                    23:e3:8e:3e:83:9a:9c:eb:a3:0f:f3:ea:7c:e5:87:
                    89:97:14:23:27:36:7b:f5:b5:b6:a9:4e:60:e9:c0:
                    0b:b1:f9:87:9c:54:77:96:4f:4b:e0:98:ed:9d:4a:
                    d2:20:40:7a:8f:82:27:61:db:35:7e:e9:84:8e:a1:
                    00:e6:9f:c6:bb:c2:e9:91:16:05:ef:bd:61:d4:d7:
                    72:6a:d6:8a:d9:e9:3c:8e:c3:57:c5:9f:c8:e6:ca:
                    af:67:8e:0f:41:01:0f:6b:65:cc:97:a3:48:16:28:
                    08:d6:79:af:23:a3:f7:4a:64:7c:07:5f:7d:a0:23:
                    a1:d3:38:72:10:ef:b8:d9:7b:f6:91:bd:4d:73:82:
                    c6:41:91:ce:92:50:0b:9c:75:bc:cd:ea:61:dc:a7:
                    e4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:46:76:AA:3D:50:62:A8:6B:A9:25:6F:5E:66:09:F2:EB:A8:96:84
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4ae4400-d755-410a-8030-0c3ce316310d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:8140::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:8f:9e:a4:b9:90:67:6d:f5:9f:4c:c4:81:7e:a5:eb:5f:21:
         71:8f:e8:14:a2:12:46:8a:94:9b:e7:9b:02:dd:ce:dc:df:d7:
         ca:26:d1:f6:e3:e7:ae:71:af:40:ce:4d:54:83:37:a2:19:9f:
         f6:48:50:47:ef:80:cc:9b:76:8b:8d:a3:b3:f4:8e:9b:95:27:
         c1:07:9f:0c:56:87:0e:7f:89:0d:83:92:b2:87:3f:e8:01:8c:
         93:c4:f2:ae:a5:c0:a4:58:90:34:07:fb:10:0a:12:64:bb:86:
         ca:0e:03:cb:76:08:03:4b:1b:91:b5:83:49:c3:fa:89:9b:29:
         3b:9b:f9:52:48:91:e1:8c:29:5c:21:7c:79:61:79:70:60:40:
         f3:c0:a8:21:25:8d:50:9c:bc:a7:fd:1a:ac:cc:64:29:fc:91:
         86:5a:38:9d:cb:30:6d:a6:78:91:e4:e3:3e:da:3f:5d:5a:71:
         ca:29:3d:65:f6:ef:de:bd:79:ef:38:49:66:4d:62:84:46:bd:
         ea:0e:ff:f6:a5:21:d8:8f:38:40:e2:b5:47:ea:b2:65:c4:87:
         36:d3:1d:b6:80:43:71:b4:c3:7c:6d:44:6d:3d:e0:db:88:e8:
         46:97:27:e8:78:77:b3:6a:cc:dd:e3:e7:2a:d5:8e:27:c6:fa:
         1b:cc:04:e9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----