Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4864cae4-4d7e-49cd-a1b7-7f688c226d94.roa
File:                     4864cae4-4d7e-49cd-a1b7-7f688c226d94.roa (raw, json)
Hash identifier:          QNLeoqYU2ezBWCfNV9S1jgYgmkSumbDk2+cxBQCsQp4=
Subject key identifier:   15:36:5B:DF:6C:7B:36:87:41:FE:8E:2C:91:96:ED:25:14:0E:05:BB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0DBFCB1BBC82B6FE7E53AC3B751150210E2C4B42
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4864cae4-4d7e-49cd-a1b7-7f688c226d94.roa
Signing time:             Wed 29 Oct 2025 07:24:57 +0000
ROA not before:           Wed 29 Oct 2025 07:24:57 +0000
ROA not after:            Wed 03 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fea:3480::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:bf:cb:1b:bc:82:b6:fe:7e:53:ac:3b:75:11:50:21:0e:2c:4b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 29 07:24:57 2025 GMT
            Not After : Dec  3 23:59:59 2025 GMT
        Subject: serialNumber=64cfd9a356eb34f6449059ca02d88b7b29a86388575ae0cbdd6491c5ac0d930e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0b:00:0c:1f:63:69:fb:4b:4f:3a:07:9e:cb:
                    66:ed:22:6b:3f:73:ed:e4:08:45:8f:cf:d4:dc:9e:
                    55:e2:1d:b8:06:5a:7b:fd:c9:d3:4a:25:c0:35:d9:
                    c5:d1:45:93:80:ae:4d:75:75:e5:65:6f:1a:cc:e6:
                    69:4b:d3:13:86:40:8d:b0:49:08:ad:0a:12:b6:59:
                    43:85:08:9d:e8:36:02:f6:49:48:9d:7b:52:94:cf:
                    41:55:c2:46:d4:ab:c6:5a:f8:a1:27:a1:45:43:7d:
                    5b:0e:5a:4c:f0:d2:b1:b8:ff:f8:9d:fb:bc:31:3e:
                    44:cc:3f:c9:ff:c6:9c:8e:ad:69:fc:96:78:6a:f1:
                    16:8c:80:50:97:2b:82:99:e3:d3:42:79:00:fb:8c:
                    52:2e:c9:50:95:3e:f7:8f:be:24:aa:8a:15:e3:d8:
                    e1:d8:27:de:2d:c3:4e:25:22:52:b4:66:d9:7b:74:
                    11:00:13:ed:6f:06:12:80:7b:19:78:8f:7f:99:f6:
                    27:e7:05:35:d7:b5:d1:d0:70:71:89:2f:eb:fc:0a:
                    c7:9f:f8:f6:e3:de:e9:e2:76:4b:30:8a:24:a3:41:
                    4d:36:3e:47:2b:4a:15:21:35:6b:56:6e:4f:a0:9b:
                    34:b0:98:c0:c3:2e:b6:b1:e6:9f:29:4b:4b:92:f4:
                    4b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:36:5B:DF:6C:7B:36:87:41:FE:8E:2C:91:96:ED:25:14:0E:05:BB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4864cae4-4d7e-49cd-a1b7-7f688c226d94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fea:3480::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:fe:a3:5b:87:04:d7:9b:ea:6d:cb:9b:d5:ae:ab:a2:fa:39:
         37:0b:6a:1d:4f:24:df:8c:d4:2d:e7:1e:66:62:a9:2d:a3:1a:
         5b:42:db:a5:68:07:fb:62:82:f0:21:5e:81:4b:da:4d:2a:a8:
         b5:cf:b2:0a:fc:a4:05:95:4a:d6:fd:b0:1f:1b:35:3b:9a:d8:
         18:7e:39:ae:55:31:39:31:96:46:2d:29:67:0b:64:da:b6:7d:
         ce:a2:40:3c:43:60:00:e5:55:bd:a0:b8:9e:63:bb:29:a1:f8:
         de:75:32:97:a9:8c:e2:fb:61:b4:bf:6d:c6:25:ca:48:d3:ef:
         33:79:fa:29:69:be:ad:0b:4e:4f:68:45:fe:ec:83:08:74:5f:
         95:63:3f:d8:e6:b1:31:fd:bd:f0:d7:b1:80:1d:09:c3:2a:64:
         bb:59:d9:a2:29:9e:94:f5:ae:1c:aa:58:9a:12:8a:b5:f2:a7:
         e5:9a:ab:5a:4b:02:90:c2:6a:f5:89:d4:7a:9d:a7:52:ff:9f:
         d2:df:14:10:0e:be:bf:79:9b:40:57:12:fc:31:8d:38:20:f3:
         f7:c1:61:41:86:84:87:ea:83:df:c0:a4:25:e1:a0:a3:1b:40:
         67:6e:15:46:9d:0b:34:cd:f2:8b:6f:bf:43:c9:83:93:c6:4d:
         81:ba:fd:3a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----