Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17403c26-dfc9-4063-8d3e-9c868da268b1.roa
File:                     17403c26-dfc9-4063-8d3e-9c868da268b1.roa (raw, json)
Hash identifier:          Lz1To7pwsvsk8fxab1AsGc09Kxn5dGpF+Hntsu/jmMs=
Subject key identifier:   6A:59:14:15:BF:15:A9:28:EF:EE:04:E3:70:DB:2F:AD:5F:3B:79:B1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       23A6F94BA0CCC6B41037B9387830D3D76B355B0F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17403c26-dfc9-4063-8d3e-9c868da268b1.roa
Signing time:             Tue 04 Nov 2025 00:21:35 +0000
ROA not before:           Tue 04 Nov 2025 00:21:35 +0000
ROA not after:            Tue 09 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff6:a400::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a6:f9:4b:a0:cc:c6:b4:10:37:b9:38:78:30:d3:d7:6b:35:5b:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:21:35 2025 GMT
            Not After : Dec  9 23:59:59 2025 GMT
        Subject: serialNumber=f61bf260020f0d15a3cd9d2216d8865bb2e9e426a1b25790d4c66c9a0481c9e1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4a:4d:4e:e5:04:fa:c2:b6:75:e1:da:c4:6d:
                    e8:2f:33:50:e8:21:f4:c9:04:cb:db:24:cb:23:7b:
                    90:5f:53:2d:b4:a8:90:17:67:55:e0:7b:71:32:cb:
                    05:f1:70:c1:09:4e:10:41:ca:be:ba:17:0d:64:37:
                    86:ff:80:58:de:97:2f:c8:10:a7:29:65:a4:d8:ab:
                    78:a6:b4:78:ce:96:43:af:75:0d:b8:74:6a:49:56:
                    4a:25:82:a9:b7:81:5e:e0:c7:28:0a:46:ec:c6:e8:
                    bf:5d:ab:e5:a1:f8:49:5d:25:07:5c:7d:a8:66:8b:
                    7c:f6:e3:99:41:a1:d2:ca:42:e0:c7:c0:44:39:c1:
                    d9:27:00:98:81:1b:1e:37:f8:d6:3d:59:ec:2f:d4:
                    37:3a:2a:af:b2:8b:e3:8a:f1:af:a9:38:92:2d:73:
                    e0:64:88:0f:eb:a8:ff:d1:8f:7f:0e:db:03:64:65:
                    b7:0d:fe:e7:00:30:4b:9c:04:50:3f:0d:8d:6f:5e:
                    d2:14:c1:ed:0c:d1:83:ad:52:8c:3e:4c:38:b8:fe:
                    13:e5:35:23:18:7d:87:3e:73:fd:02:c3:5d:f6:46:
                    91:f6:16:81:ef:7c:2e:c4:e7:99:12:7a:e4:fe:f9:
                    46:1d:a1:69:26:5b:26:32:de:42:76:d1:42:e8:d5:
                    c4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:59:14:15:BF:15:A9:28:EF:EE:04:E3:70:DB:2F:AD:5F:3B:79:B1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17403c26-dfc9-4063-8d3e-9c868da268b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff6:a400::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:ce:dc:0e:61:ad:64:b4:a9:5b:f0:97:e5:51:d1:3d:66:d5:
         e6:93:56:61:89:8b:cc:86:76:69:b5:ec:9f:1f:65:aa:b2:0c:
         58:a2:ed:f0:a2:1f:0a:f9:e0:a8:00:2b:8a:36:71:13:4b:a5:
         4a:16:e9:5a:3c:81:c9:21:1c:f7:9d:06:bb:41:f2:34:6a:90:
         fc:b4:7d:e0:ed:c2:52:b0:60:00:6f:65:1f:f1:ec:d1:f6:fc:
         fb:a5:05:c1:89:94:cf:cf:90:d6:36:ac:15:67:c8:c5:b3:42:
         30:2c:3f:a4:87:a7:45:74:75:45:e8:8c:e3:dc:45:00:a2:26:
         66:84:3e:6b:48:39:c4:ef:ea:cc:52:87:ff:2f:49:72:c7:18:
         b7:fc:97:3d:72:8b:3a:e3:38:76:be:d7:99:e0:94:75:30:4e:
         89:a0:cf:70:90:84:1d:83:82:a9:f6:99:27:cb:b5:9b:75:9d:
         ed:d5:f5:fa:15:4f:8f:58:9f:50:5e:ba:d0:08:6c:ac:b9:ed:
         2b:86:58:2f:22:62:10:34:20:d6:c7:fa:96:2c:bb:b5:69:9f:
         fe:f8:7b:68:40:7e:7c:80:4d:7e:72:df:c0:72:2e:cc:83:bc:
         69:23:ac:12:b3:a2:68:07:d2:f7:dd:1f:1f:2d:59:41:f3:e7:
         2a:07:0c:11
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----