Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc4b71fd-9963-4adb-be05-598fbf89dc31.roa
File:                     dc4b71fd-9963-4adb-be05-598fbf89dc31.roa (raw, json)
Hash identifier:          YNf7cJIJJqyr+wgw2d2/TJDJvpcjNGlI3/DfAfmhYvk=
Subject key identifier:   59:F9:FB:40:51:CE:94:5E:BA:00:FB:77:62:88:21:5E:C5:F9:9D:53
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       32442CBD62707647F5DBEFBC34CCD1F9406EEE77
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc4b71fd-9963-4adb-be05-598fbf89dc31.roa
Signing time:             Sat 08 Nov 2025 01:51:22 +0000
ROA not before:           Sat 08 Nov 2025 01:51:22 +0000
ROA not after:            Sat 13 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fec:7800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:44:2c:bd:62:70:76:47:f5:db:ef:bc:34:cc:d1:f9:40:6e:ee:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 01:51:22 2025 GMT
            Not After : Dec 13 23:59:59 2025 GMT
        Subject: serialNumber=65147907525b4c68448c737a7857170decc12e3b05deaba6fb93a6c23b2d8c2f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5d:94:08:41:21:fa:ce:24:af:38:c8:1c:8d:
                    12:22:0e:d1:4c:66:a0:f4:0c:1a:68:da:e7:e0:bb:
                    84:dc:1b:3c:2a:fe:48:27:e2:5f:f5:32:41:74:60:
                    30:5c:10:5f:f7:70:31:04:df:04:55:ee:b9:96:fa:
                    92:73:f7:5f:b8:c2:86:e9:f1:09:f3:aa:62:46:1e:
                    04:16:d2:15:f2:07:17:83:b6:23:09:e3:ec:dd:83:
                    b2:3d:e4:4d:a7:dd:ed:fc:ed:05:66:38:01:de:5b:
                    4e:59:6e:57:90:e5:c8:ba:b1:ab:30:be:df:bb:97:
                    ba:c3:78:20:ee:41:09:17:a1:5c:d4:c1:95:c7:11:
                    a5:18:be:fd:04:7b:43:8d:a6:da:31:c9:5d:cd:f2:
                    37:b0:0f:c9:57:68:17:74:60:b5:8e:da:ff:a2:52:
                    15:68:92:9d:b9:25:73:7b:ce:73:0b:c9:08:4f:4c:
                    f8:14:5e:64:54:54:e1:f5:89:cc:36:60:2d:15:75:
                    28:45:95:b4:d2:ea:bc:a2:a1:43:23:b1:e2:a1:f1:
                    0c:34:b2:3a:94:89:20:cb:e9:11:76:d0:83:f7:35:
                    66:36:a4:98:46:90:b3:15:d3:db:d9:08:38:af:45:
                    c5:2a:f9:aa:1f:3d:db:09:11:90:de:da:f2:56:d3:
                    1c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F9:FB:40:51:CE:94:5E:BA:00:FB:77:62:88:21:5E:C5:F9:9D:53
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc4b71fd-9963-4adb-be05-598fbf89dc31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fec:7800::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:d3:e4:05:d0:ed:76:63:ad:fa:17:de:e7:ec:58:0f:19:66:
         cb:52:84:c0:7e:b3:06:fe:12:8c:41:7f:25:99:d1:a3:c9:f8:
         44:dc:47:9b:fd:a2:3e:ce:cb:f1:1d:be:be:40:09:ea:4e:60:
         f9:ea:10:b2:23:08:6c:dd:04:9a:85:34:50:c4:5c:2f:de:51:
         76:5e:34:4f:87:d1:2a:c4:c0:c4:8a:a8:ff:ef:6f:0c:db:f2:
         9c:7f:4e:1c:66:ad:e6:03:d5:a6:e3:75:a2:11:2c:ba:a1:9b:
         cd:09:8a:aa:e8:9b:a1:9d:80:93:d0:38:42:f3:16:03:eb:ad:
         92:0f:f0:76:5b:25:4d:dc:42:1c:97:c1:b7:32:40:67:43:71:
         66:d9:a0:19:b8:d6:57:4f:47:5d:bb:8f:c6:38:6a:ad:74:77:
         fb:61:e6:d5:03:be:a1:f5:21:bc:02:e1:77:9d:09:a7:61:94:
         04:70:ae:a4:68:73:53:0e:89:5d:fe:9b:9a:71:75:4b:60:46:
         65:81:60:65:6f:98:14:7c:de:64:60:c8:bd:a9:79:89:bf:d3:
         b6:77:5b:c4:94:33:fd:1d:0c:0f:f9:18:9e:c6:a9:fa:57:25:
         bf:a0:57:b8:9c:be:2b:38:20:d1:97:c8:f3:34:96:d4:6c:c4:
         0e:16:b7:25
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----