Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46d8ea93-1dc7-4f43-8179-8b6492e119a2.roa
File:                     46d8ea93-1dc7-4f43-8179-8b6492e119a2.roa (raw, json)
Hash identifier:          Kz07GZ3TBb2/E63uxvFhsuC8AQXBzrMrPJRCkn68wUc=
Subject key identifier:   29:FA:C4:B1:4D:72:D4:B1:05:C4:37:70:1A:15:4D:A7:A6:68:2B:9E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0CE5CFCCB045C1382B1E6645A32FCAC73FF684B3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46d8ea93-1dc7-4f43-8179-8b6492e119a2.roa
Signing time:             Wed 29 Oct 2025 07:24:54 +0000
ROA not before:           Wed 29 Oct 2025 07:24:54 +0000
ROA not after:            Wed 03 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fea:2040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:e5:cf:cc:b0:45:c1:38:2b:1e:66:45:a3:2f:ca:c7:3f:f6:84:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 29 07:24:54 2025 GMT
            Not After : Dec  3 23:59:59 2025 GMT
        Subject: serialNumber=81ef846bbebcb8a520f2662bdcf66ca7e29d60e68ba82efed6adea1aa13101a3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1c:da:60:2e:5b:66:56:15:b7:0f:53:ab:55:
                    6a:36:c8:c6:ff:0e:b5:0f:28:05:61:be:62:ca:bf:
                    dd:38:a0:02:ac:d4:c7:9f:b8:4d:34:97:69:42:e9:
                    d9:ed:5c:2b:a1:28:47:e2:5c:b0:5e:12:1f:18:c0:
                    d8:13:e1:68:97:30:0b:85:59:3c:4b:64:79:1f:47:
                    8a:89:d1:43:fa:9d:58:41:89:b0:e7:c0:f6:7e:61:
                    30:fa:4e:10:d2:2a:41:ff:2f:31:75:a5:91:f4:63:
                    08:5f:cc:d9:aa:e6:b7:a9:48:18:16:4b:a6:09:74:
                    50:0d:04:d8:1e:48:99:00:62:0e:bd:6b:06:41:07:
                    c6:b5:d2:dc:9c:e8:a6:40:b9:e1:af:1e:60:c4:0e:
                    10:2a:fe:68:c0:23:73:a8:f9:ea:6d:3e:8c:02:10:
                    7f:be:70:9a:82:be:a2:7b:ba:93:0b:2c:90:a6:d9:
                    a9:50:1d:1e:06:55:68:12:42:7b:ec:e5:a4:60:f0:
                    49:21:42:74:98:8b:29:d3:fd:85:85:8a:28:3a:fa:
                    81:8d:6b:30:a5:37:93:52:04:ed:64:c6:50:26:61:
                    ad:44:c4:2c:5f:11:50:78:cd:14:9f:73:6c:32:11:
                    e5:06:39:47:42:c4:f9:21:b4:91:c3:27:16:89:7d:
                    05:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FA:C4:B1:4D:72:D4:B1:05:C4:37:70:1A:15:4D:A7:A6:68:2B:9E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46d8ea93-1dc7-4f43-8179-8b6492e119a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fea:2040::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:95:b6:22:dd:4f:81:d3:94:60:26:25:a2:93:7f:7c:dc:de:
         a7:47:3c:6a:fe:08:a1:95:a2:1f:60:25:96:b6:d9:c8:04:dd:
         d2:f9:99:25:de:92:9d:05:e5:82:a6:a2:4d:2e:c0:93:56:e5:
         7f:0e:8e:a9:ae:9e:34:4d:3c:ac:d0:5b:7f:5e:b2:04:46:30:
         31:a5:0d:a1:09:85:30:d9:de:5d:c6:cd:16:18:cd:2a:c0:e6:
         4c:a1:14:e2:64:4e:2b:48:1e:89:1f:41:eb:bb:af:86:2c:4b:
         cc:23:1b:25:96:53:94:cd:a1:d1:c6:a4:b0:17:cf:e3:54:d7:
         57:74:41:cb:06:51:f9:5e:b3:b5:5b:63:6a:26:4a:15:ae:44:
         68:49:ac:f4:dd:fa:e3:14:50:b9:f1:43:d1:95:ed:d3:1d:24:
         39:3d:6f:1b:a2:89:30:8a:42:ad:0d:ab:59:a1:45:39:63:01:
         51:02:ac:56:0d:c9:22:5e:05:9b:e8:81:d3:e2:49:f9:6a:e0:
         ea:24:cf:9a:f1:3b:42:00:90:5a:1a:7a:35:a8:0b:ba:89:30:
         67:a0:20:48:64:48:94:67:c8:47:d3:19:07:d9:4f:15:fc:f9:
         f5:a9:43:59:48:4a:8a:21:0b:01:a7:49:47:7e:54:a1:e3:58:
         01:84:17:d0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----