Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9c7f340-7eed-443d-9067-e118bc47004c.roa
File:                     e9c7f340-7eed-443d-9067-e118bc47004c.roa (raw, json)
Hash identifier:          eFj9KxGxP5UEc2pp7j02amoF8cytSC8N0fyrkYrLank=
Subject key identifier:   14:E5:13:4E:82:BE:A4:F9:0F:EA:FF:73:44:86:A9:D9:26:2A:61:A9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0735D714C3D91A60C34D62AA79E2A62C325D16B1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9c7f340-7eed-443d-9067-e118bc47004c.roa
Signing time:             Mon 06 Oct 2025 15:41:17 +0000
ROA not before:           Mon 06 Oct 2025 15:41:17 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ffd:8040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:35:d7:14:c3:d9:1a:60:c3:4d:62:aa:79:e2:a6:2c:32:5d:16:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 15:41:17 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=a86cdbeeb334624ecbf1f7ca8f1e6685aa2438cff4a645f9510cfea581473467, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:06:8f:8a:b9:33:a6:8b:f3:45:5c:3f:59:8f:
                    2c:f9:11:4f:e8:a8:e3:f8:ca:06:10:2c:9a:0d:90:
                    9b:a6:05:09:20:ff:a5:72:8f:f4:b0:23:80:be:37:
                    27:d1:17:93:3f:09:0b:c2:55:72:9a:56:92:57:5b:
                    b2:6b:26:19:7c:73:92:30:c9:e2:76:4c:4d:be:d5:
                    bb:26:01:f4:c5:6c:f1:1d:43:5f:11:43:d9:79:94:
                    d5:1d:f0:e3:9a:34:b4:da:18:f5:8e:0a:ff:83:59:
                    ed:87:b0:ed:4e:d3:fd:40:45:2a:5e:0d:bd:73:c0:
                    b1:da:0b:49:35:86:01:23:89:ed:c8:09:a1:dc:84:
                    8d:b6:4f:2d:47:44:df:4a:74:14:5a:b6:d3:42:e5:
                    5b:eb:cb:e5:89:8d:e8:99:ba:8d:fc:d0:dd:a7:8f:
                    24:59:50:07:a0:d0:77:85:6a:5b:b7:c4:a3:7a:6f:
                    f2:f9:37:c9:a4:70:37:1f:83:0e:bc:3e:3d:0a:1a:
                    45:30:45:a6:ac:96:27:8d:b7:c9:78:b2:00:1c:ce:
                    f8:df:36:86:01:e9:cf:97:04:8e:7d:11:25:b4:18:
                    7c:e6:45:23:ae:8a:c1:25:05:f9:24:be:bc:d5:64:
                    21:76:aa:76:3c:30:50:b1:75:a9:4d:23:49:69:3c:
                    a1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E5:13:4E:82:BE:A4:F9:0F:EA:FF:73:44:86:A9:D9:26:2A:61:A9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9c7f340-7eed-443d-9067-e118bc47004c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffd:8040::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:25:11:a5:ae:54:08:33:5b:a7:7c:20:14:cc:2a:e1:2a:63:
         5e:6c:fa:43:79:2c:e2:f5:56:3e:40:e9:b2:3e:fd:0c:9b:aa:
         84:a7:35:d3:2b:1e:7a:da:0e:89:1a:ac:73:be:f4:bd:a4:c9:
         8c:29:9f:50:eb:3e:53:0f:01:34:7a:f8:34:d3:2c:60:54:85:
         f3:ac:28:6c:97:1b:ea:0e:d6:19:0f:f8:a4:a3:2d:68:20:db:
         08:41:fe:44:f3:be:9c:41:ac:50:d2:4b:d2:3b:62:8f:b4:91:
         12:a0:dc:1b:bf:0a:09:ba:b4:59:62:cb:3b:a8:89:4b:ed:44:
         2c:ae:49:64:d8:4c:d3:9c:98:ce:61:31:0e:fc:e3:ed:26:0e:
         80:3a:aa:40:8f:73:05:18:02:19:92:05:4c:91:0e:10:7c:ea:
         a8:8f:95:af:cd:d8:6f:1d:77:fa:0d:af:d9:0a:f7:26:5e:c8:
         1e:a0:06:2d:fa:82:70:15:7e:35:16:84:21:d8:11:58:79:ee:
         07:48:ef:41:d9:71:57:0e:a5:ad:91:f3:65:9b:9c:fe:17:6f:
         21:92:4b:6d:de:52:d4:c9:ec:01:fc:af:f1:32:91:d9:23:e6:
         9c:8e:e6:d5:c6:a0:02:59:a8:92:47:22:44:21:ce:21:ad:59:
         be:9d:43:02
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----