Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b1eee8b-9fac-4ddf-a2ab-545679eeb103.roa
File:                     2b1eee8b-9fac-4ddf-a2ab-545679eeb103.roa (raw, json)
Hash identifier:          p1zIs890mj5TksG6s2qoyxUyU5lDedyKffO9JKaxKXs=
Subject key identifier:   8F:CF:E5:E7:53:1B:4E:EA:36:F5:FC:13:F1:85:A8:7C:2C:70:AC:94
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       CBD8496859F77291AE25245C322C0CA2C52F50
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b1eee8b-9fac-4ddf-a2ab-545679eeb103.roa
Signing time:             Wed 29 Oct 2025 07:25:07 +0000
ROA not before:           Wed 29 Oct 2025 07:25:07 +0000
ROA not after:            Wed 03 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fea:8020::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            cb:d8:49:68:59:f7:72:91:ae:25:24:5c:32:2c:0c:a2:c5:2f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 29 07:25:07 2025 GMT
            Not After : Dec  3 23:59:59 2025 GMT
        Subject: serialNumber=b0cdb2cec5670aaa145161c4101444004a831baf5cdd0276b21b23f32a05beb4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fa:49:af:97:3a:da:27:ac:6f:6f:7b:73:6e:
                    42:4f:94:4d:e1:fd:e2:6d:f6:86:6e:51:a4:e4:3e:
                    37:e6:cd:b8:c9:cf:06:bb:8b:c4:08:6c:05:94:47:
                    50:83:d3:bd:fb:0f:55:76:19:60:be:d9:ae:1d:6c:
                    55:ba:f2:16:92:ac:fd:65:f9:c1:a3:f1:3d:72:01:
                    f7:51:08:a9:47:9a:1b:8d:e8:58:07:92:1c:8d:69:
                    4f:8a:0d:b8:17:31:3d:45:ac:c4:1a:03:aa:c3:1e:
                    c1:38:13:2e:8f:81:95:90:e0:c4:e2:72:c2:2a:2d:
                    0c:7e:77:91:0f:50:62:85:27:fe:07:f6:2d:6d:0e:
                    5a:ef:44:cc:67:82:56:1e:82:b8:b0:2a:89:c2:7b:
                    1e:85:33:b0:29:da:e3:65:13:77:c5:68:81:78:aa:
                    94:81:d6:90:82:44:a3:b4:4d:59:13:9f:68:c7:38:
                    7d:66:fa:38:92:ea:fa:87:e7:61:04:20:18:c5:11:
                    2c:15:f4:76:dd:54:77:24:ee:db:c4:26:b5:48:4d:
                    95:64:bb:f1:ba:d4:fd:23:36:ef:22:72:9e:c3:5e:
                    c1:38:03:3e:47:2d:2d:0e:a5:ae:67:24:ac:fa:5a:
                    4f:a9:c6:3e:dd:69:1f:1f:0c:ce:c0:7c:4a:4c:68:
                    38:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:CF:E5:E7:53:1B:4E:EA:36:F5:FC:13:F1:85:A8:7C:2C:70:AC:94
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b1eee8b-9fac-4ddf-a2ab-545679eeb103.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fea:8020::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:f4:4a:e3:16:15:ca:95:44:88:4c:30:86:03:70:63:a7:69:
         88:48:31:92:da:69:77:5b:be:05:37:47:2c:2b:50:5c:f2:63:
         29:36:3d:f7:a7:5d:c0:84:63:f9:cf:15:d6:16:74:1b:fc:bf:
         fb:4d:d1:4f:c7:03:df:df:d7:b9:57:4f:64:79:d1:4b:2f:8f:
         b0:29:d6:62:34:d9:28:fe:ae:c1:20:90:ce:6f:74:42:95:59:
         1c:ef:61:39:db:1f:e4:12:c4:30:72:eb:ac:3f:46:cd:1d:57:
         34:2e:ae:00:35:52:28:a0:71:bf:c2:f5:4b:16:a3:6b:6d:e0:
         e5:91:b8:d7:ae:aa:b7:c3:55:b3:9a:c9:19:52:27:d4:8b:07:
         37:a8:75:c8:09:b5:f2:b6:2d:03:3f:48:88:d0:42:5d:24:13:
         b8:2c:4c:3a:64:33:d1:65:b6:f7:52:d0:ac:7a:c3:d5:d4:90:
         87:ec:eb:8f:05:e7:f7:fb:87:d7:a1:f4:c5:05:c6:1c:8f:91:
         e9:c5:1c:36:80:b2:cf:e4:3a:52:f3:4b:fb:e4:f3:22:69:8c:
         9d:81:87:c2:d5:62:1d:eb:35:0f:33:64:58:10:e6:3a:00:9a:
         de:d7:89:7c:f0:a0:20:cc:87:ee:dd:49:fd:40:66:77:e8:6c:
         e6:31:42:0a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----