Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e53e42b-8598-4415-9367-0fdb09b37153.roa
File:                     5e53e42b-8598-4415-9367-0fdb09b37153.roa (raw, json)
Hash identifier:          /l0mXjnTBbAVvKhN+7LfBllw7gZoc1VtCI95QvZjfmM=
Subject key identifier:   5B:43:F0:E0:5D:63:50:03:D5:DB:FF:A4:CD:2B:55:30:C2:D7:4D:8B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       743C69AF837BDDB8450E8C2B5DE3C586627E01CC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e53e42b-8598-4415-9367-0fdb09b37153.roa
Signing time:             Sun 26 Oct 2025 00:11:24 +0000
ROA not before:           Sun 26 Oct 2025 00:11:24 +0000
ROA not after:            Sun 30 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ff8:8000::/39 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:3c:69:af:83:7b:dd:b8:45:0e:8c:2b:5d:e3:c5:86:62:7e:01:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 26 00:11:24 2025 GMT
            Not After : Nov 30 23:59:59 2025 GMT
        Subject: serialNumber=5c0bde79ebf27f603759334b7d73aa9764a2c549e6ead07c36c94dc3d1fd3aaa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:66:ca:19:00:0c:b0:c8:bd:ce:1b:13:3f:c1:
                    49:ec:aa:6b:e0:53:a7:52:d5:f9:ec:d0:67:c5:a9:
                    ab:de:d7:98:c5:ef:e5:cd:21:20:c6:a0:12:17:62:
                    33:0c:c7:1c:2c:ed:2b:67:93:4f:3b:c4:5e:b8:93:
                    40:e2:40:e5:c9:64:33:50:8f:5a:e0:a7:9b:95:07:
                    30:0c:16:bb:3f:5a:2a:dd:14:0c:10:b9:f2:4f:fb:
                    c0:8e:e9:da:55:fd:bc:ad:6e:9f:af:62:28:8c:98:
                    e2:17:e3:b0:f3:15:40:f1:59:de:94:e3:0f:fe:b2:
                    d0:41:5a:e3:9f:69:ed:3d:54:4a:fe:b9:35:83:b8:
                    c3:b9:af:9f:10:85:ed:f5:f2:0f:65:a9:57:45:c2:
                    02:ec:d6:95:ea:c6:57:4c:51:f2:ae:8c:84:2e:93:
                    cf:f9:b7:be:b5:0a:7d:9a:1e:18:c0:ff:7d:75:a0:
                    9c:52:f3:da:4d:7f:ad:bf:a9:ee:1a:0b:9a:fa:fd:
                    59:f0:e1:76:1b:21:b2:1a:f0:59:69:27:62:9c:11:
                    4d:ab:e0:d1:71:93:d7:2c:84:f0:06:53:5b:6c:24:
                    41:61:28:26:34:4f:55:48:ea:03:0c:84:3f:de:84:
                    4c:1b:a9:91:21:6f:ad:f9:fa:8a:89:32:69:10:2b:
                    18:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:43:F0:E0:5D:63:50:03:D5:DB:FF:A4:CD:2B:55:30:C2:D7:4D:8B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e53e42b-8598-4415-9367-0fdb09b37153.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff8:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         61:42:8f:7d:90:09:4e:01:9f:96:a9:7b:9c:5e:3d:cd:9f:d1:
         95:83:a1:ec:c5:e7:8f:d4:32:44:6f:94:80:90:d6:8a:e5:21:
         ae:a7:90:ca:43:c1:10:43:fa:72:5f:c8:78:a4:c1:44:76:e3:
         5f:b9:9d:35:43:36:3e:fd:80:95:2d:68:a0:38:5b:cc:c8:7e:
         ce:c4:49:19:b6:89:5d:4c:62:b3:7b:92:be:cb:5a:b6:56:4f:
         f9:e7:8f:b4:d6:31:44:82:34:5f:14:8a:77:b7:db:65:00:86:
         c5:f4:1e:89:45:8a:ba:83:1a:d1:87:38:60:33:ce:0c:ad:34:
         b0:66:2c:8b:2a:7b:7d:fc:97:cf:e0:bb:62:7e:1b:7b:a6:4a:
         33:07:39:0f:b0:be:66:9a:92:a2:4f:ea:66:56:ed:ff:d2:76:
         73:48:89:45:ea:1a:92:89:13:c3:8c:73:8c:a5:19:0a:9b:4e:
         06:18:17:ff:d8:42:d1:97:e6:d6:81:8b:7d:6e:88:0c:5b:1b:
         5d:c3:14:46:38:5e:8c:98:0c:64:07:e3:3c:af:59:5d:53:0d:
         21:78:92:81:1f:26:d9:32:a4:ab:bc:9a:64:e4:a0:46:38:5d:
         38:c2:38:e7:c5:84:2e:39:d3:54:d4:15:fe:8d:78:0b:da:36:
         84:49:c3:79
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----