Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e193cd01-50f2-4d32-8891-d900a7c959d2.roa
File:                     e193cd01-50f2-4d32-8891-d900a7c959d2.roa (raw, json)
Hash identifier:          +++ENqC+RfTLaNv/Dq8cTN9GVS4lh18oYK+s+JB1tEk=
Subject key identifier:   52:56:40:73:1F:A0:35:B8:CA:92:D7:D8:65:E1:6E:1E:95:A7:F0:28
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       607D043759FF6FCBE51411C230967AB58CB2BC09
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e193cd01-50f2-4d32-8891-d900a7c959d2.roa
Signing time:             Wed 12 Nov 2025 01:01:25 +0000
ROA not before:           Wed 12 Nov 2025 01:01:25 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f70:8000::/39 maxlen: 39
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:7d:04:37:59:ff:6f:cb:e5:14:11:c2:30:96:7a:b5:8c:b2:bc:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 01:01:25 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=1f3a85b4f9cc27168683a9555e2b3e71ad257374d94403b2a67965ad669a6479, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9f:ec:79:f3:c2:64:93:1b:3a:0a:97:d7:fe:
                    74:58:a0:41:07:14:88:86:85:99:21:c9:d7:42:15:
                    c6:0d:98:cb:2c:ab:5c:fa:a2:5f:0b:cf:b3:ef:7d:
                    91:1f:ed:b5:af:4a:fc:97:89:cf:7d:18:68:5a:12:
                    d0:78:57:19:87:f0:bf:89:7f:de:1d:d0:ce:24:86:
                    a2:84:99:03:c5:ed:db:d9:54:d9:8c:05:2e:30:61:
                    ae:46:af:fd:99:9a:b9:f1:17:38:58:ed:5c:51:4e:
                    61:b8:94:ce:e8:d5:ae:06:a8:b3:ee:36:06:d9:8e:
                    50:68:c5:a9:ed:03:4d:d4:b5:d0:eb:d8:57:14:65:
                    9e:bc:73:ac:19:0d:2d:15:1c:72:08:86:58:12:ac:
                    90:2f:70:f8:dc:34:0b:33:ae:86:c2:41:33:30:7c:
                    ad:f3:8c:11:6f:eb:69:be:d2:a0:a4:f5:48:6f:e0:
                    05:ea:6b:e4:9f:47:ba:b4:bf:dd:95:76:80:ca:9a:
                    77:44:50:c4:bf:58:b1:ea:0e:6d:c8:33:a8:30:5c:
                    dc:93:8b:ac:29:f0:5d:de:ac:88:9e:0c:89:a4:11:
                    69:f8:27:21:92:7f:68:06:26:73:01:31:44:e0:ec:
                    fc:74:0a:0f:0a:a7:b5:f5:94:10:9c:b3:80:f9:f7:
                    b2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:56:40:73:1F:A0:35:B8:CA:92:D7:D8:65:E1:6E:1E:95:A7:F0:28
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e193cd01-50f2-4d32-8891-d900a7c959d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f70:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         16:5f:1c:5a:09:16:61:25:ed:83:d5:cc:cf:d4:d5:9a:1b:7e:
         a8:27:73:52:dc:b2:1e:af:d9:79:1a:93:43:a8:d6:9c:c6:dc:
         f9:46:a2:af:64:86:5e:8d:23:a5:b4:ec:c3:ca:2e:25:b5:b0:
         5f:75:00:bc:92:c5:52:d3:59:8d:ca:44:f0:bd:a4:e5:38:39:
         fe:83:fc:58:cd:8c:52:8f:a2:e7:69:37:76:0f:af:ce:15:b6:
         c3:e5:8e:eb:d5:81:72:8b:f3:e4:31:c3:6e:99:ef:e7:15:f8:
         a8:fe:3d:05:09:d6:3d:64:2c:3d:50:a1:25:da:dd:2d:bf:78:
         ad:79:46:c0:aa:5c:8c:f4:53:97:8a:1e:c4:42:fc:72:6a:cf:
         6e:0c:84:2d:11:3c:b6:55:7d:4a:b7:bd:55:f9:23:63:b1:e3:
         bb:1a:75:b2:d5:e5:cb:e7:6b:24:62:9b:70:a8:4b:16:87:82:
         37:e0:54:09:6c:8a:67:3e:bd:a4:ce:bd:b0:88:d9:29:2b:d4:
         b7:33:b5:bb:29:c8:c5:69:76:85:cf:02:f8:e3:6b:31:13:71:
         66:22:e5:32:00:76:88:c0:0e:70:a6:bb:a4:53:c1:09:b6:f9:
         45:c2:5b:e6:55:fb:ee:1c:91:1f:d7:ee:01:5a:bb:41:49:0d:
         b0:50:3d:42
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----