Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df3ae160-da55-486d-beda-d773b1dcb8ec.roa
File:                     df3ae160-da55-486d-beda-d773b1dcb8ec.roa (raw, json)
Hash identifier:          kNLD6dqqMCL03wYSzlfJYJCotH5IV/+YYDLIgrgnVsE=
Subject key identifier:   C8:39:D4:AF:EB:1E:A9:E8:E6:27:75:32:B6:BF:1A:77:DB:34:29:57
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       22FE82946BC3BBACC157AEC6F12B00BF689F1E0B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df3ae160-da55-486d-beda-d773b1dcb8ec.roa
Signing time:             Tue 11 Nov 2025 02:00:04 +0000
ROA not before:           Tue 11 Nov 2025 02:00:04 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:1020::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:fe:82:94:6b:c3:bb:ac:c1:57:ae:c6:f1:2b:00:bf:68:9f:1e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 02:00:04 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=b0ee17153685e507237fff1a781b7e282adeb1018de607a85260738454653fbf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:47:c2:d3:ba:98:6a:72:b1:07:cc:6b:af:70:
                    03:d3:61:e8:85:d0:ce:4e:a0:c7:af:53:11:f2:29:
                    ff:7b:8e:34:6a:a7:33:eb:e9:70:1a:ab:11:11:3a:
                    e0:62:5d:6f:48:9e:7e:e9:a1:f3:36:a6:44:b8:8f:
                    44:a5:35:1e:55:a6:b1:f4:eb:e6:30:0b:33:1d:7e:
                    26:44:e8:8c:a1:64:6f:e0:ee:b7:a3:2d:b5:38:48:
                    a5:38:f9:c8:a0:87:01:31:77:47:a8:7c:cb:c2:92:
                    96:32:74:8e:19:13:f4:f9:1a:59:bd:12:3b:f4:38:
                    04:49:21:2e:4c:f7:c2:69:a3:37:94:46:9e:10:3a:
                    ad:a8:63:77:28:98:6b:b2:55:cf:16:f4:d9:d3:37:
                    85:48:7b:74:8a:e7:d1:30:3b:9a:6b:cf:4b:9d:df:
                    73:90:29:8b:b1:63:19:a1:70:48:0a:f3:0f:7c:60:
                    53:cb:e0:83:a3:08:be:88:14:12:d8:ea:aa:af:2d:
                    8b:a3:f4:2c:0c:fb:36:fa:d9:a8:24:d9:a7:87:0f:
                    11:d4:33:55:58:28:bc:56:83:1a:05:f9:e7:19:2d:
                    8f:c9:7f:ba:76:ba:95:49:de:17:7d:a8:2c:7a:0d:
                    c5:b9:43:a9:6a:2e:4f:c7:a4:ba:0a:7e:94:bd:2e:
                    91:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:39:D4:AF:EB:1E:A9:E8:E6:27:75:32:B6:BF:1A:77:DB:34:29:57
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df3ae160-da55-486d-beda-d773b1dcb8ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:1020::/48

    Signature Algorithm: sha256WithRSAEncryption
         d1:e7:00:49:00:10:09:d4:8e:df:68:d8:4e:a9:2a:55:4c:f7:
         b0:bf:f6:0c:ad:01:e1:b4:6e:55:08:23:ee:11:8e:0a:35:8d:
         24:75:9e:83:52:73:14:d6:be:19:4e:ee:18:af:47:62:29:26:
         f2:39:c7:5d:77:99:34:6a:e7:34:7a:b6:72:2f:a2:ee:df:ef:
         e2:1f:32:16:1a:d8:00:e0:e2:34:66:b9:0b:89:9f:5a:24:9d:
         95:ca:d5:9f:c3:06:8a:c9:81:ab:ac:d7:41:5a:9b:6a:1d:97:
         70:24:ff:f9:15:11:cc:18:ca:d3:36:80:57:08:39:cd:f8:e2:
         91:5e:65:40:2a:1f:01:6d:ed:26:2b:fe:b8:23:78:a2:20:f5:
         db:c0:f6:d7:19:43:a7:38:2d:65:81:4e:cb:3b:47:bd:96:c7:
         34:12:e6:28:94:62:a5:ef:fe:85:e0:02:59:8d:d3:9b:89:8a:
         f5:f6:64:af:e5:12:32:ee:a2:ed:7f:38:6d:79:de:c0:2d:73:
         af:e5:1d:9a:f2:81:07:e1:46:15:cc:3c:f1:97:b1:cd:6f:4c:
         4f:a1:88:39:1c:ba:79:7e:cc:b0:17:96:1e:3b:41:73:2b:d7:
         99:c2:6a:66:34:f3:7e:c6:5f:09:8e:d3:b7:69:51:03:58:6d:
         f6:f9:94:17
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----