Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/016a5fc6-f8fc-4320-9c8e-fec0cfd5a306.roa
File:                     016a5fc6-f8fc-4320-9c8e-fec0cfd5a306.roa (raw, json)
Hash identifier:          lsHr+Mdi5fPnmnUAOlLcXxI01/bQSaD0rntCS8eQfsg=
Subject key identifier:   A5:BE:D2:C9:B1:D9:08:8B:7E:12:3A:EE:40:57:AB:49:0B:9B:77:BD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2E94777515E670E1E16076ED26AFB1DD5741CC82
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/016a5fc6-f8fc-4320-9c8e-fec0cfd5a306.roa
Signing time:             Fri 31 Oct 2025 00:40:06 +0000
ROA not before:           Fri 31 Oct 2025 00:40:06 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f10::/28 maxlen: 28
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:94:77:75:15:e6:70:e1:e1:60:76:ed:26:af:b1:dd:57:41:cc:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 31 00:40:06 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=8b74ed195c97ada1efd10498932407966f05549e8c2c9250778de1463d52f899, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:da:a1:ca:7c:10:f8:39:22:7c:36:94:f5:af:
                    14:32:08:ca:b7:f1:67:5b:6d:91:1c:78:74:cd:9a:
                    8d:80:36:da:50:b2:c3:d2:6d:6f:84:a2:1e:5a:59:
                    5a:3b:59:00:fa:e2:8d:1b:ab:95:f6:03:9b:ae:1a:
                    ea:af:fa:7a:a7:2c:3f:0c:b4:93:7c:ed:a5:0e:77:
                    32:83:9d:0b:2f:93:67:2a:b8:cf:11:7d:a8:ec:35:
                    12:24:cd:20:9d:ae:75:0b:12:ae:88:a3:20:e9:f6:
                    69:11:c1:62:3b:a9:d4:c9:e3:f7:e2:eb:40:d0:d4:
                    40:95:f0:26:6f:ca:19:a2:63:d9:c5:4b:06:51:01:
                    55:c5:0a:5e:aa:65:f8:9b:57:00:44:6e:c0:ad:c3:
                    a0:0c:ae:19:0d:b0:66:3e:64:29:85:99:41:32:b8:
                    08:67:c0:ce:db:33:eb:1c:3b:72:3e:64:ae:90:fd:
                    a9:1c:80:2f:2f:f7:7b:c0:01:e7:08:a5:fb:dc:26:
                    02:5c:16:3b:5d:82:cf:7a:02:70:af:ff:65:4f:db:
                    bc:89:1b:6e:1f:f2:da:2a:f4:d1:b2:01:89:c1:6e:
                    7b:1d:fb:b2:a1:48:3c:ab:c6:94:75:75:c7:80:1a:
                    84:62:5b:9a:a4:70:b4:d7:07:1f:5f:a6:ab:e9:a9:
                    3c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BE:D2:C9:B1:D9:08:8B:7E:12:3A:EE:40:57:AB:49:0B:9B:77:BD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/016a5fc6-f8fc-4320-9c8e-fec0cfd5a306.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f10::/28

    Signature Algorithm: sha256WithRSAEncryption
         78:1b:8e:a7:9f:b0:c2:ba:cf:dd:bd:19:ce:f4:5c:2e:9e:51:
         dd:b9:88:4e:2d:47:a0:ab:a9:5e:65:5e:f7:7d:c8:da:4e:ab:
         d7:d3:3e:a0:14:0d:95:b0:17:eb:87:99:d2:e1:55:1d:f9:86:
         32:85:44:27:a5:ee:99:26:f6:78:0d:8a:d5:99:09:aa:83:07:
         4f:99:90:f7:07:21:b8:b6:c1:e9:b3:fe:8a:24:23:a3:48:e3:
         89:a0:a4:26:e1:28:5b:7e:85:fc:3d:7f:91:1f:c6:6b:4f:82:
         4f:11:03:25:ad:d2:22:f0:f2:88:9c:e7:d1:5a:9c:77:fb:dc:
         f5:7e:40:96:64:bb:7d:f0:15:79:24:59:57:6e:1d:4e:7c:68:
         af:99:12:23:49:81:06:4b:06:96:cb:b9:c7:1f:ce:3a:02:d1:
         21:c2:87:93:3c:dc:b0:44:56:fc:3d:df:d7:78:2f:82:0e:8e:
         1a:a2:6f:91:f1:d6:9d:92:bb:ab:56:ac:10:72:c1:bd:df:40:
         43:48:8d:42:a2:ab:9f:31:44:a3:93:03:85:55:78:ab:d5:4e:
         2d:36:f4:40:83:0e:0c:4b:5f:5c:6b:0d:38:8b:e2:61:f6:98:
         27:cb:66:34:7d:84:7d:65:54:59:70:0b:3a:fe:7c:d1:b4:54:
         18:3a:4e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----