Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1af15cef-03a0-4d9a-a7c7-d63126649370.roa
File:                     1af15cef-03a0-4d9a-a7c7-d63126649370.roa (raw, json)
Hash identifier:          kykBK04ugtEnz2t0wL0JqY/trb9iFNMf5GyAJ5+5EaA=
Subject key identifier:   A1:F4:F1:11:A0:87:D1:64:DF:EA:01:03:2B:6E:02:26:63:CC:A5:8A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6F29745C58160899103BBD4E3F71161C6C7F90AE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1af15cef-03a0-4d9a-a7c7-d63126649370.roa
Signing time:             Wed 29 Oct 2025 00:40:40 +0000
ROA not before:           Wed 29 Oct 2025 00:40:40 +0000
ROA not after:            Wed 03 Dec 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1ff3:50c0::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:29:74:5c:58:16:08:99:10:3b:bd:4e:3f:71:16:1c:6c:7f:90:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 29 00:40:40 2025 GMT
            Not After : Dec  3 23:59:59 2025 GMT
        Subject: serialNumber=754b59f69a8da04f6da02b0a1a772fe5b7b69612368819118376d06e213e3641, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9b:fb:97:3d:ba:f3:01:de:93:3f:ed:9f:71:
                    5f:1a:de:25:61:6d:f1:78:2e:9a:eb:e9:43:74:8f:
                    9c:ba:9a:c6:7c:01:f9:36:ae:4c:d0:5d:33:e6:73:
                    b8:e1:2a:8a:80:bc:7b:52:b9:a2:de:73:46:28:68:
                    32:b6:3b:21:26:6f:60:4a:63:af:4e:b6:25:45:73:
                    2e:10:7b:d7:d4:43:49:b3:8d:41:a6:1e:ab:18:bf:
                    e6:a4:36:91:f1:7c:59:d4:26:a1:7e:dd:34:45:38:
                    a2:67:29:c8:25:d3:e8:68:cd:0a:c8:08:09:3a:6a:
                    30:bb:14:0a:91:98:8a:3f:ca:52:85:78:a3:b4:67:
                    bb:8a:4f:8e:c2:af:65:13:1b:19:4a:79:34:f8:87:
                    ff:e6:f2:23:62:1c:b1:e6:9f:e6:54:79:97:e0:ac:
                    bf:d3:fd:dc:fb:96:f0:54:24:2d:49:f1:51:98:00:
                    ac:c9:1a:4d:03:40:17:f2:89:0e:7c:67:38:5a:eb:
                    d6:2a:7e:7c:49:d2:fe:42:8d:39:8c:ac:4c:07:92:
                    17:2f:1f:ec:fe:06:74:1c:8a:9a:36:c7:8d:38:71:
                    91:c4:8f:0b:72:f4:5e:b6:6e:92:d3:4f:3a:06:7d:
                    ed:bd:0f:0f:c8:44:6b:5d:ce:9b:5c:8c:cc:77:93:
                    26:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F4:F1:11:A0:87:D1:64:DF:EA:01:03:2B:6E:02:26:63:CC:A5:8A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1af15cef-03a0-4d9a-a7c7-d63126649370.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:50c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         65:e9:48:62:65:11:fe:3a:8f:62:f7:d9:08:8c:aa:b6:e8:aa:
         b5:72:f5:63:ed:53:71:86:ba:cb:73:2a:ea:c8:48:c9:74:8b:
         46:da:04:7f:75:64:ad:0f:7e:0a:d4:35:40:f6:c0:dc:69:6c:
         13:80:ad:4d:02:39:01:06:7a:e5:d1:41:43:48:30:02:9f:a2:
         37:00:cd:4d:6f:8b:fb:aa:e3:40:29:73:e3:09:56:ad:31:af:
         f9:ac:ee:78:58:0b:f1:b7:d0:73:1d:bf:95:3f:c7:94:ae:47:
         15:3b:8c:10:4b:21:3b:04:82:d5:03:47:c5:a5:f4:e0:03:47:
         9a:cd:89:9f:1e:02:9b:e5:e8:30:3d:8b:f8:42:6c:f9:86:a5:
         83:1b:14:94:f0:30:b1:04:4a:03:b2:e9:64:f6:e8:d6:5f:49:
         c3:d4:37:69:35:a8:6a:87:60:50:73:6d:5f:6b:73:4f:83:e2:
         8e:d4:7d:ef:c5:75:f5:31:72:38:81:72:37:b5:33:1b:40:aa:
         cb:68:d9:66:e0:4b:3e:ea:3f:b1:6e:d2:6a:51:2d:9a:2c:16:
         40:3f:cc:96:9f:18:d9:d5:d4:aa:82:13:f6:75:b3:6f:d6:ce:
         d9:66:94:64:68:7b:d5:bc:8e:d2:a3:9d:75:d8:2a:53:12:b0:
         0d:40:8b:64
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----