Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5ede365-047d-4c5f-a97d-dee6ba58b110.roa
File:                     f5ede365-047d-4c5f-a97d-dee6ba58b110.roa (raw, json)
Hash identifier:          cC1wozfAMrCmCd7+UQpV6iYn7WknZYPu4BmguA6DDjk=
Subject key identifier:   28:B7:9F:F7:B2:1A:7D:1F:A4:98:17:32:85:66:38:DF:9B:52:41:08
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       06EF87CFB16BBD95B9B09985BD58770E92B14042
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5ede365-047d-4c5f-a97d-dee6ba58b110.roa
Signing time:             Wed 12 Nov 2025 02:20:39 +0000
ROA not before:           Wed 12 Nov 2025 02:20:39 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f17:4400::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ef:87:cf:b1:6b:bd:95:b9:b0:99:85:bd:58:77:0e:92:b1:40:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 02:20:39 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=72b4d32a7f68584b45e7f10f44bd59094ed735257d2dd95d48582f438e7dd952, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:56:ac:25:b9:ff:da:60:25:aa:79:b3:a1:98:
                    71:12:09:74:57:69:9e:a0:8d:34:4f:35:61:07:c8:
                    d5:35:27:67:94:d1:42:bd:91:ff:d0:60:71:01:83:
                    ba:9f:f5:12:c8:0c:26:9c:5d:07:c1:77:72:47:a0:
                    5c:17:bc:af:24:80:22:d2:c6:5f:df:08:7a:ae:0b:
                    ce:44:1d:a5:e4:bc:0d:09:a6:82:e2:87:94:b4:d8:
                    36:d6:95:33:5d:52:6f:51:64:05:1e:da:54:b0:61:
                    ba:94:44:4e:41:7c:e9:02:97:97:81:a2:b9:9b:36:
                    d9:7d:5a:10:0c:8b:66:ea:98:73:e5:ed:8e:75:d8:
                    ee:76:7e:9f:6b:ce:6b:b4:71:7e:1f:a3:d6:fc:15:
                    f1:c6:ab:9b:b8:77:96:b9:8b:16:20:36:cb:ed:b8:
                    38:a9:bf:72:4f:02:23:97:ee:6f:49:a2:a7:ef:3a:
                    0f:3d:00:a3:88:0c:b8:95:9a:d5:29:a0:b0:fe:ad:
                    31:d0:80:f8:ee:28:95:fd:94:a8:98:15:a2:b6:1b:
                    e7:9c:17:a4:75:df:dd:56:0b:88:b2:cc:59:d9:cd:
                    53:02:81:1e:41:aa:d5:41:78:36:55:b1:34:e7:3b:
                    c2:e9:cf:15:89:c1:2f:f9:d3:df:15:95:58:7c:15:
                    b5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B7:9F:F7:B2:1A:7D:1F:A4:98:17:32:85:66:38:DF:9B:52:41:08
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5ede365-047d-4c5f-a97d-dee6ba58b110.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f17:4400::/38

    Signature Algorithm: sha256WithRSAEncryption
         0e:fe:92:25:71:89:1c:a9:78:18:b0:93:fd:43:6a:ab:ec:93:
         74:30:6a:bd:f8:a6:88:47:c0:b4:de:00:96:39:67:4e:f1:fd:
         5e:b9:95:9e:b5:df:05:46:97:20:c2:cb:29:0f:eb:6f:b4:a9:
         43:0d:4a:0a:ac:1b:dc:37:69:a8:2c:41:52:5b:de:9e:6b:45:
         4e:e4:4f:36:bf:a5:b0:3e:3d:6a:1a:7d:68:5e:d0:33:0c:44:
         ba:aa:8a:9c:13:a2:d1:cf:20:08:35:86:dd:32:32:2c:d1:24:
         05:fa:e4:53:0a:4e:40:d3:d6:05:c5:77:de:88:28:c6:04:39:
         53:52:20:5c:25:74:ef:99:68:ed:ec:55:52:8f:00:ba:a1:19:
         68:75:ec:ec:fc:65:db:00:ea:df:b3:17:27:e4:5e:f0:4b:9a:
         d6:b8:c5:52:33:cf:38:66:c3:ea:54:0e:2f:86:76:bc:8e:a9:
         1d:81:6a:b2:de:b6:8a:0e:f9:5f:ac:c4:45:a1:ee:61:48:ed:
         e4:6e:ca:40:ed:25:b3:be:31:f9:6f:a4:22:44:b0:39:fd:85:
         0f:e8:70:40:7b:99:58:2c:d7:83:74:f5:2f:ee:27:a3:0d:93:
         4a:ac:34:0d:c5:1d:98:8b:a3:c9:51:5e:42:3c:69:fd:c1:71:
         61:65:29:91
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----