Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e68000d-b224-4a7b-afd2-7a6c5c55bbe8.roa
File:                     5e68000d-b224-4a7b-afd2-7a6c5c55bbe8.roa (raw, json)
Hash identifier:          zqa85NaVvNjarKrK0Bdl1IU6VtrDh4zUg0q4BuStfK4=
Subject key identifier:   ED:51:4F:09:66:9D:B3:8A:F9:D5:F5:6C:DC:DD:1E:7F:92:79:E1:1C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       74D0FC717C738A8FC10436E7BE296E191143D284
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e68000d-b224-4a7b-afd2-7a6c5c55bbe8.roa
Signing time:             Fri 03 Oct 2025 00:21:58 +0000
ROA not before:           Fri 03 Oct 2025 00:21:58 +0000
ROA not after:            Fri 07 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fa0:c000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d0:fc:71:7c:73:8a:8f:c1:04:36:e7:be:29:6e:19:11:43:d2:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  3 00:21:58 2025 GMT
            Not After : Nov  7 23:59:59 2025 GMT
        Subject: serialNumber=b086e1300fc761a101988678901aa2a93db9fd70ac80a620305ef996af546abb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:07:9f:8b:87:74:1a:d6:68:1c:ea:48:8c:ed:
                    aa:15:b3:9e:25:73:95:83:0e:44:72:c7:dc:4c:92:
                    ef:6f:cb:94:df:37:14:c3:64:2b:07:a1:09:42:07:
                    fb:4a:9a:dc:aa:56:64:e9:7a:90:5b:1a:5f:f2:40:
                    ad:d9:ea:a3:29:cd:c3:fc:8e:38:53:1a:fe:0f:c0:
                    8e:5f:83:49:6f:6b:84:55:99:4f:ff:f7:bd:f6:20:
                    97:68:3e:e5:15:9e:b2:13:ca:a7:e2:62:9d:06:40:
                    e0:54:15:8b:5e:d9:c6:ca:2d:af:fc:a8:ff:de:c2:
                    9e:0c:e5:f0:b6:8d:9e:57:5a:86:7e:c1:0b:c0:a6:
                    f7:56:61:a4:2c:26:72:c7:7f:ae:c8:aa:b8:12:27:
                    2f:97:8f:bf:43:6b:23:4c:56:5a:ea:26:86:17:66:
                    86:e3:dd:05:85:ca:f3:8e:ec:2d:00:29:e0:d4:d2:
                    79:1c:5b:5e:5a:a8:11:4b:b3:e9:1c:64:ba:77:c2:
                    bf:1f:e4:ff:74:cc:9e:18:40:0d:09:47:40:61:bb:
                    8b:05:83:72:1c:cb:de:e0:14:f3:66:17:1d:e2:5f:
                    90:c0:2f:91:30:e4:b6:5f:b3:80:60:68:51:21:38:
                    22:e2:06:30:66:8b:05:d9:84:5e:3a:8f:0e:05:c4:
                    53:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:51:4F:09:66:9D:B3:8A:F9:D5:F5:6C:DC:DD:1E:7F:92:79:E1:1C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e68000d-b224-4a7b-afd2-7a6c5c55bbe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fa0:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         d6:15:cc:a2:65:bd:f2:00:88:f9:b4:b8:f5:d0:6f:9b:ae:62:
         c5:33:0c:bd:31:a9:dc:7d:c2:09:ca:ce:b4:b5:ab:4a:ad:e6:
         ef:cb:69:83:4a:a0:c3:0c:11:5d:23:95:f5:bb:50:2b:c2:ee:
         17:e4:71:93:19:43:70:96:9c:fc:6c:de:72:71:95:4d:2d:93:
         39:3a:37:63:2f:8c:71:1d:57:3e:2f:50:3c:af:91:61:35:3d:
         07:4b:19:39:12:e2:f8:2a:6f:c9:e5:07:26:b3:74:9a:72:5d:
         8e:8c:55:2b:12:e1:19:e5:96:1e:23:99:7a:dc:c1:d0:7e:53:
         d7:d3:27:0b:6a:35:c2:a1:9d:65:3a:bf:88:25:9d:17:68:1c:
         20:14:a4:f3:55:b7:22:c8:bf:7c:84:fe:9e:f6:28:71:20:61:
         5d:8e:29:38:9f:23:6d:5e:a2:a6:c5:9b:3c:8d:10:88:7a:23:
         c8:01:21:6e:ba:9b:be:5c:cd:b9:cb:b1:ee:8d:11:af:76:48:
         0d:d1:3f:e6:fb:44:bc:ad:5b:e8:11:a3:bb:32:8b:b7:01:8c:
         be:4a:0e:4d:47:0b:39:0c:fe:7f:2b:e6:70:ae:39:02:b1:b7:
         1c:52:62:c9:2b:ae:d5:03:a4:15:fb:1a:da:66:5c:89:cd:68:
         e9:8a:6f:66
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----