Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a963b27-1b7d-4247-8873-a42567edfb3e.roa
File:                     6a963b27-1b7d-4247-8873-a42567edfb3e.roa (raw, json)
Hash identifier:          sa8a0nwiUlNR0mLqJ73R8Mud7BsFiQpTjXQni2gbztE=
Subject key identifier:   C9:40:F0:80:CC:23:46:1A:97:61:85:87:4C:A9:76:FE:7D:D8:21:13
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2CB6D67A27267689A3961C631EAFAEB5B9F47285
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a963b27-1b7d-4247-8873-a42567edfb3e.roa
Signing time:             Sat 04 Oct 2025 00:41:50 +0000
ROA not before:           Sat 04 Oct 2025 00:41:50 +0000
ROA not after:            Sat 08 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f61:8090::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b6:d6:7a:27:26:76:89:a3:96:1c:63:1e:af:ae:b5:b9:f4:72:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  4 00:41:50 2025 GMT
            Not After : Nov  8 23:59:59 2025 GMT
        Subject: serialNumber=69f00fec53683654eb0c142b6f1e0211b798470595a03a0a383dca287aaa68d3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7e:fe:c3:9e:4f:5e:19:4d:da:9d:5e:2f:5c:
                    d9:22:79:72:b9:ff:fc:33:63:09:cf:f4:86:f6:96:
                    22:bc:a6:72:be:6f:a2:6d:2e:30:bf:6c:5f:0e:97:
                    15:73:78:0b:0f:ff:5d:fb:b0:01:82:25:6d:eb:b0:
                    18:b4:57:a5:87:2b:c6:7d:51:5b:bd:71:92:1c:ca:
                    fc:10:bd:79:44:12:05:ad:e4:85:6c:59:0a:33:f4:
                    c4:43:c0:ea:48:9d:d5:79:9f:61:6d:b5:0f:b7:eb:
                    d6:a8:d2:9b:90:27:f6:c6:5d:be:18:52:15:e3:e5:
                    94:5b:b2:b8:95:db:fa:27:e1:80:16:29:76:82:52:
                    3a:b1:b7:bb:cc:80:14:47:94:3d:6c:e0:a1:5a:4c:
                    97:4b:98:e8:f9:8b:61:5a:9a:80:ad:91:1b:79:f0:
                    61:4f:26:1a:20:ed:3d:86:da:95:57:1f:74:c3:fe:
                    6c:49:2d:3e:46:ff:28:42:bd:87:54:74:38:0f:42:
                    34:fe:83:6a:38:60:39:01:b7:53:ae:56:0c:f0:44:
                    6a:7e:41:e1:87:67:75:8e:60:44:5b:83:1c:cb:16:
                    a1:ee:cf:cc:9b:e0:d7:f3:99:02:c7:bc:11:ac:28:
                    f8:90:a6:8d:91:ec:0d:30:ec:b7:13:df:1e:55:88:
                    eb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:40:F0:80:CC:23:46:1A:97:61:85:87:4C:A9:76:FE:7D:D8:21:13
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a963b27-1b7d-4247-8873-a42567edfb3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:8090::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:50:11:aa:ea:29:81:e2:0f:4d:b1:34:42:b3:da:8f:74:a5:
         9a:36:52:7c:0e:42:f5:eb:37:b6:2c:3e:94:c4:36:15:81:2d:
         64:ab:c2:59:30:5a:fd:da:e6:d9:7b:de:87:45:96:b7:49:1a:
         f4:b1:04:4a:16:58:80:22:ee:2a:1f:f3:a2:e3:7a:b2:04:5b:
         c0:4f:8b:07:7f:59:1f:14:ce:b9:16:34:6d:6e:a1:e2:7f:09:
         83:e6:a0:d0:6c:7f:a7:f5:9a:7d:82:28:28:95:72:01:b0:2e:
         db:bf:e8:cd:5b:a7:a7:d4:09:dc:c5:0c:8c:49:0d:00:29:18:
         07:7c:d1:1c:c4:7f:5b:36:7f:fa:21:1f:6b:eb:18:4c:cb:6c:
         7b:91:cd:0b:03:2f:49:3d:13:72:d5:38:74:21:e7:5a:e9:ba:
         15:da:85:34:6e:d9:6a:f6:3a:a3:5b:85:87:2f:1b:6b:a2:d9:
         dc:73:c9:f6:51:31:b1:2f:18:b5:49:43:91:8a:03:d2:23:a3:
         1b:b9:ea:4d:ab:e8:4d:a2:30:26:08:83:ae:dd:4f:6a:97:7f:
         b6:cb:42:e5:2e:42:41:07:ad:36:2e:a5:35:f7:65:93:32:09:
         be:4c:7d:15:df:12:04:2c:6b:b2:f4:4b:1d:29:9d:3b:84:d2:
         1d:a8:7d:22
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----