Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/451673e6-334d-4e4b-b936-5534942489c1.roa
File:                     451673e6-334d-4e4b-b936-5534942489c1.roa (raw, json)
Hash identifier:          zh8NBO3Iw7lAMjqioRJC8LxX2+b3ZLkCG+BVIyQIIak=
Subject key identifier:   45:69:34:65:49:ED:C2:42:33:17:C8:45:8F:1E:CC:6D:F2:B8:F5:22
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       08885E16475F9DA8B77596DB4577FC37D85BCCB4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/451673e6-334d-4e4b-b936-5534942489c1.roa
Signing time:             Mon 22 Sep 2025 18:00:39 +0000
ROA not before:           Mon 22 Sep 2025 18:00:39 +0000
ROA not after:            Mon 27 Oct 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1fff:5000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:88:5e:16:47:5f:9d:a8:b7:75:96:db:45:77:fc:37:d8:5b:cc:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 22 18:00:39 2025 GMT
            Not After : Oct 27 23:59:59 2025 GMT
        Subject: serialNumber=686199abc4259c76eb1ccef46cfef9865787680c4791ffc71c73feb823d8550f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:be:73:28:4a:5e:62:38:ce:0b:32:89:7c:89:
                    1f:82:ae:85:57:62:51:57:69:d0:c4:ab:f4:bb:3f:
                    4b:cd:44:88:ea:93:be:75:63:ef:55:15:a4:41:95:
                    2f:fd:5e:53:69:45:c3:4d:c0:4b:07:f7:7d:dc:ae:
                    5a:78:dd:f3:28:09:ea:a9:a5:6f:35:5e:c5:94:41:
                    cb:96:73:80:83:ab:ad:3c:38:76:bb:e6:0a:15:ef:
                    ac:ff:0d:2a:ec:e6:d0:02:dd:2b:2c:82:f5:93:ea:
                    fc:0b:00:6d:02:69:3d:ce:15:e9:43:1b:c4:8e:9f:
                    79:34:24:b3:51:3e:23:8f:9f:89:49:d8:40:c1:26:
                    a6:79:31:a2:c9:27:f5:4a:f6:bb:90:a7:5f:08:db:
                    0a:7e:20:1a:3c:07:22:4b:4b:80:d6:70:36:74:fb:
                    43:df:5e:5b:a4:b8:17:1a:16:d1:87:cd:52:d0:d5:
                    d2:5d:f7:b7:3b:23:5f:ad:ee:43:c8:07:da:12:4b:
                    3d:b2:2e:47:fe:9a:fc:19:85:7f:7a:1e:81:c0:93:
                    71:cb:e5:52:e8:8c:89:6b:23:db:3c:8e:6c:f6:ac:
                    09:b1:b2:dd:12:89:28:0d:55:ad:2e:56:53:e4:6f:
                    c9:14:aa:8f:cf:c7:59:af:da:09:13:0d:07:b2:97:
                    b4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:69:34:65:49:ED:C2:42:33:17:C8:45:8F:1E:CC:6D:F2:B8:F5:22
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/451673e6-334d-4e4b-b936-5534942489c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         19:fb:a5:a6:ed:df:51:01:2a:66:7b:71:92:03:d8:f7:76:4d:
         26:9b:52:b0:ca:47:e4:cf:6c:79:b8:8c:f4:3d:ad:ff:e8:fa:
         1c:05:b6:17:0d:ed:ec:71:1a:73:0a:45:1a:d1:26:e8:77:fb:
         2b:62:5b:28:c6:bd:f9:e2:4f:bf:0a:e7:64:a3:a7:cf:c6:9b:
         7f:34:10:82:9e:d5:d0:e1:ee:43:8c:21:85:aa:12:7b:44:32:
         40:19:90:82:5b:bb:65:e9:5a:01:a1:31:4f:4d:05:fe:63:98:
         ed:43:c5:21:cc:ba:81:c4:a0:b1:d5:cd:4e:2d:98:a4:a1:b6:
         d7:9d:f0:bf:f1:57:02:55:0d:fc:1b:b7:94:3c:dc:3c:99:08:
         f3:d2:00:f1:0c:34:0e:f0:01:a1:59:ad:1b:cf:23:5b:05:42:
         0a:8c:50:19:2b:1f:83:de:71:18:a4:f6:8c:17:b5:b8:5d:1b:
         85:6d:24:71:98:b8:91:2e:20:4d:42:5c:f6:59:4a:f1:34:47:
         dd:71:d4:b7:4d:02:b0:2a:13:31:b8:0e:ea:0e:1a:4d:d9:2f:
         0c:2c:b2:e8:3c:eb:24:f5:a1:fe:da:b6:d0:f9:93:73:3a:0d:
         a1:b9:5f:09:fd:cc:f3:73:12:fd:a4:ed:92:f9:ae:3f:fa:fb:
         88:a3:ba:eb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----