Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88af232b-a592-480d-8a90-b58df1ff6229.roa
File:                     88af232b-a592-480d-8a90-b58df1ff6229.roa (raw, json)
Hash identifier:          bKpBcp6yQSW3wDZZoIlBmyQdaEOOVVD0vmPfEG3/15E=
Subject key identifier:   4D:95:34:58:11:EB:C7:75:00:DE:33:E0:62:CD:CC:25:BE:CC:38:73
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2548960DFB38E3CFAADD34D9A492A3F845DFBC35
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88af232b-a592-480d-8a90-b58df1ff6229.roa
Signing time:             Fri 10 Oct 2025 14:22:01 +0000
ROA not before:           Fri 10 Oct 2025 14:22:01 +0000
ROA not after:            Fri 14 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f29:c800::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:48:96:0d:fb:38:e3:cf:aa:dd:34:d9:a4:92:a3:f8:45:df:bc:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 10 14:22:01 2025 GMT
            Not After : Nov 14 23:59:59 2025 GMT
        Subject: serialNumber=2c6d342c4aafed4b58dac2b393d245c50372e400593bde571f7e048aa798c339, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d6:05:73:35:35:44:18:e3:23:96:bf:2d:b0:
                    7f:ee:da:f2:6c:07:28:ef:3c:8b:33:08:bf:38:9d:
                    98:ed:2a:02:c4:10:bb:60:ad:87:df:09:f3:75:37:
                    b4:c9:bd:6f:91:14:c2:b7:70:df:ee:75:28:17:05:
                    a0:d4:a1:9f:db:4e:14:4a:a3:69:20:da:d1:11:58:
                    56:c2:aa:20:dd:f2:97:74:1f:bb:a3:a2:51:c4:9e:
                    f5:08:74:b2:9e:46:05:04:53:e6:32:68:8b:65:3d:
                    76:44:f0:04:52:c5:2d:d2:73:bf:53:98:86:43:2f:
                    64:72:5e:32:50:a8:2b:fd:22:63:2a:52:26:6a:63:
                    2d:19:91:a8:52:39:a4:88:53:fc:18:b9:2e:a6:ca:
                    70:d9:c4:78:bc:c1:90:a9:17:31:a0:32:d5:90:84:
                    f1:ab:02:c7:a7:7b:21:c9:6e:25:df:72:60:0c:f5:
                    27:5b:aa:04:48:87:81:8f:69:a8:e4:57:3d:bb:33:
                    42:b1:2b:66:a8:af:7d:7b:52:83:4b:85:c2:0c:4e:
                    27:68:bb:7c:51:e2:2e:90:88:ab:32:4e:68:5b:6c:
                    3d:bf:d8:ed:c1:55:2d:8c:f8:f1:be:86:cc:68:84:
                    4b:41:c5:25:65:06:a8:af:2f:c6:87:2f:44:f6:e3:
                    b1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:95:34:58:11:EB:C7:75:00:DE:33:E0:62:CD:CC:25:BE:CC:38:73
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88af232b-a592-480d-8a90-b58df1ff6229.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f29:c800::/37

    Signature Algorithm: sha256WithRSAEncryption
         41:a6:00:e9:17:3f:d0:e0:63:23:0a:f2:fd:ce:db:cd:35:25:
         bc:af:ca:a7:7a:ce:d5:7b:90:ae:b1:bd:dc:fb:4b:fc:38:73:
         98:0f:1f:ff:05:ce:97:2e:99:76:2c:5c:ba:02:56:e6:c2:e6:
         a6:bf:c6:91:70:5e:a5:43:00:76:23:13:27:76:57:2a:7a:bc:
         00:a9:e5:76:b2:49:6e:af:ed:2f:6c:fa:34:50:9b:f2:b5:f2:
         24:83:07:56:ea:c3:82:13:13:27:b0:a6:83:d6:eb:db:cc:36:
         b4:64:aa:2b:b9:46:20:fe:6c:01:c5:6a:ee:50:72:ba:77:39:
         1b:1a:73:90:3a:98:62:da:57:3f:44:d0:72:b9:34:7f:f4:79:
         28:b2:eb:b8:15:c1:56:a7:d6:4a:e5:08:57:30:82:45:17:f3:
         1f:8f:ff:c2:ed:4e:88:6a:38:72:1f:9d:b4:9f:69:49:b4:06:
         d9:9d:c7:00:d9:2b:84:81:b3:42:a9:04:85:26:a2:23:53:55:
         cd:1d:f7:31:26:fb:4e:16:99:8b:b4:8c:ab:e3:f7:23:d2:7d:
         de:2f:97:30:63:7f:38:93:91:e2:b7:04:39:d8:48:09:4e:1d:
         4e:2f:11:44:45:f7:0d:f8:4e:a8:f7:48:c1:26:89:60:b7:17:
         7b:55:95:77
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----