Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17140b33-2c00-4d42-94a6-d59281bc5014.roa
File:                     17140b33-2c00-4d42-94a6-d59281bc5014.roa (raw, json)
Hash identifier:          l7xsgQUL2x5WM1ZI+S+AEiEtg9Iq/+7cFigiAT15c7s=
Subject key identifier:   38:DF:DC:B6:2F:7E:92:D4:2B:B4:EE:82:F2:16:2D:A8:AA:2C:21:0B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2E6DE1639C68A1512CB3740EF646A201913D28D3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17140b33-2c00-4d42-94a6-d59281bc5014.roa
Signing time:             Wed 29 Oct 2025 07:25:08 +0000
ROA not before:           Wed 29 Oct 2025 07:25:08 +0000
ROA not after:            Wed 03 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fea:8040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:6d:e1:63:9c:68:a1:51:2c:b3:74:0e:f6:46:a2:01:91:3d:28:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 29 07:25:08 2025 GMT
            Not After : Dec  3 23:59:59 2025 GMT
        Subject: serialNumber=88d3f4a9c14e6a3e723e177edc2fe5924089cf34951d1125c821291c70f3f58e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f9:40:3d:14:85:53:e0:89:1e:68:5a:96:7e:
                    91:f2:6b:22:dc:df:f2:87:2f:03:d2:a2:4d:5b:9d:
                    22:4a:be:7a:d8:23:d5:38:b5:eb:1b:0c:19:b9:f8:
                    ff:41:d9:3f:12:4d:ce:d3:22:2a:27:70:a7:8a:bc:
                    45:51:64:05:da:05:79:00:8a:c1:d2:2d:88:e7:46:
                    ff:6b:0e:3c:ac:cf:69:fc:d9:f8:96:c0:25:8f:27:
                    a0:b7:56:5d:dc:45:67:85:04:b5:c3:93:9e:d6:14:
                    f7:ce:6b:fc:22:41:32:e6:53:c1:43:f7:01:5a:8f:
                    64:e3:28:54:1b:72:02:75:e1:ba:bf:74:d1:ff:d9:
                    1e:c6:ed:40:c9:3d:c4:49:92:31:c5:96:8c:98:77:
                    bb:4b:fb:8c:82:70:fc:2b:ff:e2:31:ca:7e:1f:fb:
                    9e:41:9e:b4:15:a0:85:35:f4:87:b5:a0:dd:e1:33:
                    ce:c0:3d:a1:5a:64:a6:3e:cf:6e:f8:f2:dc:89:fa:
                    cb:12:bb:8a:05:5e:fa:70:6b:7a:ed:4a:ec:4d:6a:
                    4d:c5:6d:52:95:66:be:05:d0:65:94:66:0c:a6:7d:
                    49:47:c1:b0:9f:27:00:9e:fe:9b:49:52:85:a4:de:
                    93:31:a5:88:cf:8f:5a:61:20:03:11:33:69:1e:0a:
                    3c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DF:DC:B6:2F:7E:92:D4:2B:B4:EE:82:F2:16:2D:A8:AA:2C:21:0B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17140b33-2c00-4d42-94a6-d59281bc5014.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fea:8040::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:5d:00:87:af:2c:f0:6c:00:29:6b:73:f5:c5:49:ee:26:93:
         1c:34:48:a9:f0:cb:57:35:d0:24:f6:ff:0e:03:82:ac:6c:d8:
         da:20:10:74:eb:8f:cd:25:c9:d0:01:95:70:08:f8:e4:54:84:
         b0:68:73:20:22:a8:73:42:db:89:0d:70:f1:ed:08:aa:3c:de:
         94:b1:68:72:3c:4a:e3:df:4a:28:4d:a5:49:8b:6b:56:e7:21:
         c2:3b:3f:64:09:c1:d4:52:fb:bb:0c:7f:1e:04:18:e2:15:7e:
         25:2b:af:9a:1d:5a:eb:1b:09:dd:55:b1:b7:f2:0e:2f:20:a8:
         27:f1:4c:d6:e1:e7:87:8e:76:d6:41:eb:e7:bd:5b:4f:ba:f5:
         df:5b:43:20:7e:1b:ad:04:3b:7c:a7:1d:d9:64:a1:31:8f:1f:
         62:1d:04:b2:30:e6:86:01:7f:00:92:55:d0:38:bc:55:28:ac:
         a5:38:ac:8d:9c:4a:d6:16:c1:ff:c9:d4:4d:79:5a:15:65:89:
         8f:37:4b:f8:24:74:00:70:0b:90:3d:aa:ee:e6:e7:c9:fc:57:
         2b:5a:ae:f4:9b:3a:bf:ec:ee:9c:ed:8e:f1:3b:58:ba:2c:aa:
         58:1d:2c:f9:56:d3:b7:72:70:3e:ec:fd:db:af:9a:8b:e6:8c:
         5f:e9:6b:70
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----