Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/588a58f0-ec02-43de-bdf8-3b8c967a9d8d.roa
File:                     588a58f0-ec02-43de-bdf8-3b8c967a9d8d.roa (raw, json)
Hash identifier:          iK7EV04mGS9GNAToqm1+SGonOcitynY9FMYIE+UKVAc=
Subject key identifier:   01:D1:59:64:02:44:C9:D4:FC:1A:5D:89:06:B3:30:53:3C:01:E2:FE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2D2C37472CB31EA67B2F6E516C941509689F7FCB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/588a58f0-ec02-43de-bdf8-3b8c967a9d8d.roa
Signing time:             Sat 01 Nov 2025 00:30:57 +0000
ROA not before:           Sat 01 Nov 2025 00:30:57 +0000
ROA not after:            Sat 06 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff4:5000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:2c:37:47:2c:b3:1e:a6:7b:2f:6e:51:6c:94:15:09:68:9f:7f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:30:57 2025 GMT
            Not After : Dec  6 23:59:59 2025 GMT
        Subject: serialNumber=b462044bd4b5d305adc0fb2866ca32d5765571fe18980a6f721f6fb5120b559a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a1:6a:36:ea:93:c9:3c:3c:ee:5f:95:c9:8b:
                    0d:61:7e:7d:50:63:52:28:76:83:81:72:18:97:05:
                    c9:e5:2a:da:17:f9:1b:03:7d:ee:44:8e:bd:61:6e:
                    1b:8a:9a:99:f3:90:40:37:70:06:d0:6a:6b:d0:02:
                    1b:18:17:4a:a5:d6:9e:6a:86:09:9f:4d:82:92:6a:
                    10:b1:8d:df:97:cc:8e:d2:cd:ca:14:9e:da:52:aa:
                    9c:90:64:dd:5a:7b:ea:39:62:1e:c5:92:9b:80:30:
                    77:9b:57:59:30:2a:1d:fc:34:cc:00:13:5a:05:b7:
                    51:d9:b0:69:82:fb:d3:ae:86:a4:7a:5d:a6:81:25:
                    eb:66:25:08:a6:53:9f:28:e6:3c:15:a8:36:cc:eb:
                    ec:37:04:5b:eb:0d:dd:6d:cb:b3:0c:95:19:6b:09:
                    96:e3:e7:51:25:71:62:9e:be:2a:d4:9c:ab:ff:13:
                    02:ae:26:56:1e:1f:56:7e:ec:83:73:aa:79:42:3b:
                    4a:73:e1:9b:2e:83:75:09:f6:89:ce:fe:c4:e0:d9:
                    1c:2e:dd:0f:b7:80:b7:a2:5d:37:a5:1e:df:63:22:
                    c4:92:67:0d:5f:8c:db:4e:42:ae:2a:5a:94:0c:1c:
                    97:f0:55:73:2c:91:0a:65:97:a6:c8:5d:71:18:ce:
                    31:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D1:59:64:02:44:C9:D4:FC:1A:5D:89:06:B3:30:53:3C:01:E2:FE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/588a58f0-ec02-43de-bdf8-3b8c967a9d8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff4:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         2e:36:24:fb:df:76:37:85:a3:28:e8:f7:bc:51:cc:c6:dd:6e:
         7d:db:4d:f0:f9:fc:c5:24:00:d0:4d:6b:8e:af:10:06:19:fa:
         d3:eb:1e:cc:c9:03:bb:95:62:a7:3c:d1:21:0e:bd:ad:44:32:
         08:d4:6f:8c:57:70:2e:fc:17:52:0c:a0:0f:d5:e0:4f:6f:c5:
         59:f3:ce:db:f9:8d:66:7b:6c:47:45:dd:12:08:88:12:6c:44:
         77:8e:fc:47:91:17:0b:98:a0:80:c7:3d:49:5b:54:be:d3:71:
         ae:ad:6a:f5:e1:30:8c:d0:26:3b:a3:b4:95:f2:b1:0b:10:7a:
         d0:d3:23:b1:df:20:f5:a2:0d:01:44:ed:5a:53:cd:47:70:6f:
         ec:8c:d5:0a:aa:0f:52:06:af:de:32:72:1c:fd:b1:56:dd:b1:
         d1:83:76:a2:df:7f:42:89:d6:3e:d8:72:60:09:5d:28:5d:b8:
         9c:d4:52:83:17:b9:67:4d:db:1b:b3:1f:cf:34:85:c0:89:38:
         30:a5:93:40:2e:e4:27:17:63:8c:97:47:5a:a8:7c:0c:4a:9e:
         9f:e8:56:5e:71:16:3d:c8:86:8a:da:35:ee:c3:16:02:a1:5a:
         7d:4f:c8:3b:ed:c6:64:fb:93:e2:e2:7e:df:86:32:1d:82:00:
         3a:81:33:00
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----