Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f55609fa-26b2-4a54-aa19-80da119df028.roa
File:                     f55609fa-26b2-4a54-aa19-80da119df028.roa (raw, json)
Hash identifier:          WVKIbqIVqBzbC7LBnRQp+YymY1M+5UZn8BpCoGuDN2s=
Subject key identifier:   6E:99:99:96:32:E1:FD:28:D2:B2:D5:81:45:17:CF:1C:8A:5A:8B:34
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       616105FE14D32A308959CEE0E3F440E26C284E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f55609fa-26b2-4a54-aa19-80da119df028.roa
Signing time:             Wed 12 Nov 2025 02:10:59 +0000
ROA not before:           Wed 12 Nov 2025 02:10:59 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f2c:c000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:61:05:fe:14:d3:2a:30:89:59:ce:e0:e3:f4:40:e2:6c:28:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 02:10:59 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=e4dd862a91f0230027699de3c9369a167d9547a7b916cf1c337762b57aa6a5a3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:33:55:15:1a:82:21:df:23:fe:25:97:26:52:
                    6b:17:4f:56:d1:1e:7b:69:a2:b1:95:de:c3:e2:a4:
                    59:6c:5e:62:61:ac:48:8d:1b:5e:cf:47:b9:17:26:
                    e6:58:ba:a1:6e:f0:b7:d8:df:ed:cd:a7:53:76:c4:
                    16:3a:51:f9:7a:11:d0:7d:9f:ae:9b:ea:b0:48:20:
                    d1:f1:c1:1b:4b:ec:65:59:42:7d:93:73:87:d3:55:
                    10:90:a5:c2:d5:cc:a3:15:aa:af:64:2f:e5:be:d2:
                    c8:91:d2:f2:e0:98:df:a7:d2:6a:c9:fe:b7:51:13:
                    3e:4d:bc:8f:4e:bb:f7:27:47:c1:4b:ac:41:89:cb:
                    f6:71:aa:86:8d:38:54:93:80:ec:8d:76:d7:5f:cc:
                    52:ed:67:ff:a6:2b:0a:d0:94:52:4a:f7:52:8e:03:
                    56:53:c5:f0:a6:0b:d9:47:5a:e7:53:23:29:bc:16:
                    c1:b0:21:1b:03:2e:24:f3:58:e4:8b:10:ef:eb:d1:
                    b0:0c:d2:77:c0:9d:dc:0d:5f:97:bd:0e:a6:83:89:
                    2e:1c:50:2a:06:50:09:49:ee:81:11:be:2f:ee:90:
                    82:13:2f:5b:41:af:74:95:0b:f6:cc:e2:7a:fb:ec:
                    a3:07:41:c8:d2:0b:ee:b0:b9:35:da:36:c2:a7:9a:
                    9b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:99:99:96:32:E1:FD:28:D2:B2:D5:81:45:17:CF:1C:8A:5A:8B:34
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f55609fa-26b2-4a54-aa19-80da119df028.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f2c:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2b:b6:3a:51:13:fd:6a:38:e6:d6:b6:37:57:67:e4:72:6c:3b:
         77:37:5e:70:a1:0c:aa:04:e0:d2:87:c5:50:7d:05:e4:76:56:
         38:ba:f7:fe:4f:71:a2:7b:4d:6c:5b:35:b8:1f:6a:38:a5:f3:
         cf:ee:56:c2:e3:19:9a:d2:ff:09:0b:cc:44:73:11:38:af:3d:
         c9:fe:a1:0a:8d:d8:6f:40:7e:b1:c3:21:3c:b1:07:16:a9:48:
         75:d8:9b:ea:ba:80:01:aa:69:be:20:a9:dd:a2:43:54:95:3a:
         9a:da:35:d7:31:2d:f1:4f:d1:42:f1:38:6f:18:c9:b6:04:b8:
         61:5c:f1:1f:77:3d:ae:60:a2:29:6a:de:33:ac:11:1c:22:74:
         95:a0:7a:10:27:41:be:06:08:6d:1e:e7:7c:8e:42:e1:a6:9a:
         33:41:ab:1d:da:45:6c:15:03:c8:4c:57:b1:c5:b6:56:01:ef:
         3c:66:91:6e:1e:c7:62:d0:ed:88:de:37:87:f8:87:5c:9c:03:
         27:da:d3:ae:f4:50:78:c5:f1:0c:b0:bc:a2:50:5e:d2:e3:13:
         ea:3a:bd:d0:34:5e:96:c6:fc:e2:77:ed:3d:30:a8:0a:df:68:
         fb:8e:96:69:0f:8a:a5:64:93:a4:fb:49:62:96:84:b3:6f:e3:
         42:b2:5d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----