Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c191bee-9c14-4626-9b5b-5bd69befe93f.roa
File:                     5c191bee-9c14-4626-9b5b-5bd69befe93f.roa (raw, json)
Hash identifier:          02fT71j0f0Y8SRhyNP+ifab02HNIBaHT4oD58kCnqGY=
Subject key identifier:   EE:BF:03:06:A5:C3:5D:70:16:83:59:CC:18:A8:FD:06:57:49:FA:B1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       23C84417EDDD889CFB26BCF468CED50026C227D7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c191bee-9c14-4626-9b5b-5bd69befe93f.roa
Signing time:             Fri 31 Oct 2025 00:40:45 +0000
ROA not before:           Fri 31 Oct 2025 00:40:45 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f20::/28 maxlen: 28
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c8:44:17:ed:dd:88:9c:fb:26:bc:f4:68:ce:d5:00:26:c2:27:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 31 00:40:45 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=b4d20ec2ab361f8c55fc1347c7dc5f33a20a8fcb8aa0e1391441e5f4d12067e5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7d:a2:6c:8e:00:51:86:54:2e:6f:82:94:18:
                    63:b5:24:e3:9e:06:dc:07:4a:5e:f7:0a:f3:c9:8d:
                    86:c0:27:9c:16:ee:38:56:88:d8:50:bd:91:33:58:
                    90:55:5e:48:c1:3d:0f:e3:4c:2f:a4:92:6a:b6:a5:
                    9c:2a:d4:a1:fb:9f:dd:fd:37:5f:af:22:7c:1f:07:
                    32:12:bc:94:72:d0:65:de:c4:80:74:e7:3e:b6:f4:
                    07:af:cc:92:bd:4b:5c:a6:f0:90:31:e1:3f:10:5c:
                    0c:95:fe:d6:a8:62:f8:14:9b:d8:ab:b9:a6:a9:ea:
                    bc:b2:02:69:a5:a4:aa:63:f7:fb:07:7a:57:fa:f5:
                    b8:54:54:76:20:76:cc:95:cf:1f:94:b5:9b:a0:b7:
                    e1:14:5c:d0:f4:0e:df:2f:87:c2:41:3f:36:cc:06:
                    95:44:9a:cc:3c:51:55:f7:76:7f:a8:62:b1:59:d9:
                    99:14:fd:9c:8e:d1:47:b0:cd:d7:e8:25:b3:47:3c:
                    5c:82:96:a7:a5:fd:d5:d2:e5:70:23:d4:5a:b7:0b:
                    ff:ae:7e:d2:d5:fd:da:68:a7:59:2b:a3:84:7f:0e:
                    1f:fc:5f:30:19:07:0e:b8:4c:41:50:0a:b8:3d:cd:
                    0e:84:0f:73:f2:67:86:a7:1a:af:63:fb:78:65:2c:
                    58:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BF:03:06:A5:C3:5D:70:16:83:59:CC:18:A8:FD:06:57:49:FA:B1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c191bee-9c14-4626-9b5b-5bd69befe93f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f20::/28

    Signature Algorithm: sha256WithRSAEncryption
         d2:10:25:34:6b:52:71:bb:ba:b6:4d:91:cf:27:68:f1:61:13:
         3e:5a:17:19:b4:90:ee:da:b9:6f:61:36:fd:02:7a:ae:18:3f:
         d2:b9:6e:a1:f7:54:9c:d8:6d:a5:03:e2:1c:5d:3e:41:46:49:
         ce:73:3c:d2:72:2f:8a:a8:d6:bb:87:b7:c7:03:aa:5c:bf:b8:
         44:49:0f:2c:e6:a2:31:5c:08:3b:7b:c9:1a:06:3f:2d:81:fa:
         00:73:16:c4:7a:d8:07:e1:1f:b6:94:8e:97:ab:e4:09:2a:cd:
         8b:35:30:28:de:67:b2:b9:04:95:26:f0:93:15:61:84:23:6e:
         ee:4f:f1:54:b3:ee:75:d0:1b:3c:a2:57:a3:67:96:c1:f3:10:
         0e:70:4e:c1:d5:72:9e:08:dc:b9:eb:16:5a:84:30:1c:a1:7d:
         c0:33:4d:73:24:95:53:1a:3c:c2:79:c3:3e:79:1c:96:75:04:
         81:e4:e7:5b:0a:c7:bd:8a:62:2b:b9:80:13:5a:b9:4f:af:3c:
         1e:fa:8e:df:f6:31:d7:7f:6e:44:e8:2c:5f:73:36:83:4a:a7:
         5c:53:5d:d6:b9:ee:7f:63:88:44:22:40:ec:3b:65:e9:5b:b6:
         db:95:cd:b2:f4:8b:98:c1:4a:4d:41:68:eb:4c:e0:4e:1b:db:
         43:50:a7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----