Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64c4cac5-bd6c-4ca5-84cb-f235a46201cd.roa
File:                     64c4cac5-bd6c-4ca5-84cb-f235a46201cd.roa (raw, json)
Hash identifier:          c7ihBwDdlwdrKmqL2Pb99uiVyqQPFdWTCYInaW2lB7k=
Subject key identifier:   B7:1F:CD:1B:DB:43:FE:E0:53:AD:B9:56:2F:D6:DA:43:2C:FD:76:9E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       471CA51AF8CDD942C10AA5AF3389C4D58676E72F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64c4cac5-bd6c-4ca5-84cb-f235a46201cd.roa
Signing time:             Sun 02 Nov 2025 00:40:52 +0000
ROA not before:           Sun 02 Nov 2025 00:40:52 +0000
ROA not after:            Sun 07 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fb8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:1c:a5:1a:f8:cd:d9:42:c1:0a:a5:af:33:89:c4:d5:86:76:e7:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  2 00:40:52 2025 GMT
            Not After : Dec  7 23:59:59 2025 GMT
        Subject: serialNumber=68e5d7c1c14fc04fe9417c9e898b6dffee768c3cd5e1cc9cdd8d3a3bb08a782f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:3a:a8:15:1f:ff:c0:03:fb:20:c9:e1:7a:a3:
                    dc:35:1a:a0:07:55:3f:c5:7a:5d:84:7d:a2:c4:c5:
                    15:4e:3c:99:24:99:cf:6a:dc:45:e3:01:3f:53:ae:
                    a2:e2:84:c3:43:f9:cf:a7:59:84:47:9a:6a:70:cf:
                    b3:0a:4c:6f:2d:73:07:9a:12:bd:22:2d:61:7f:f5:
                    73:72:9c:7f:55:59:8b:4e:c4:12:44:f3:1a:86:ec:
                    e1:99:89:3c:da:b2:fc:55:10:69:52:72:6a:b7:70:
                    56:cc:4a:95:83:b8:45:b5:3d:7a:f1:a0:70:b9:4e:
                    7f:f8:2a:9b:9a:c1:0b:7a:27:5c:1d:ed:7a:5b:d8:
                    91:1a:58:fb:ee:0b:75:5d:94:47:af:6f:e0:02:29:
                    90:6b:c6:75:01:a3:6a:97:ce:1c:7f:ec:23:da:65:
                    16:e7:b0:36:4a:42:c9:9e:47:4e:5a:40:b8:ee:3e:
                    ac:c9:23:63:0b:10:8d:60:0f:20:73:83:8c:ed:93:
                    90:ce:3b:b8:45:d0:1c:47:1d:30:89:3f:b0:1a:8b:
                    ec:71:6d:d9:4b:d3:dc:10:05:9d:67:6e:dc:64:f9:
                    70:24:f9:1a:e5:87:7b:46:26:5f:32:91:7f:5d:1b:
                    f4:b7:d8:e3:8d:d8:b2:9f:70:7a:a0:51:70:89:a0:
                    ae:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:1F:CD:1B:DB:43:FE:E0:53:AD:B9:56:2F:D6:DA:43:2C:FD:76:9E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64c4cac5-bd6c-4ca5-84cb-f235a46201cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:f4:90:42:33:b5:c3:70:de:d9:79:56:d4:cc:32:55:61:24:
         f8:81:70:d2:a9:b5:93:fd:8f:24:c3:a9:0f:e2:ba:b7:78:83:
         2f:b7:de:04:ae:09:ec:77:d7:41:7c:c4:3a:cc:66:a3:63:03:
         49:64:54:8c:ac:73:0a:bb:61:72:b6:fd:b5:6e:81:69:0b:b6:
         54:10:2f:0a:9c:3c:1b:2b:db:4d:7a:3c:d6:51:99:ec:15:4d:
         59:e2:fb:5c:45:38:4b:cb:f7:4f:d1:79:b1:39:4c:42:66:7b:
         cd:0c:e5:01:40:7a:cc:46:01:64:3f:f6:c8:c2:65:08:11:b3:
         10:d9:66:bc:ab:14:1d:97:21:f4:71:9a:b9:8c:26:29:4f:b3:
         ae:53:f0:71:79:ef:be:27:08:6c:86:45:4a:48:2b:dd:b0:65:
         27:a0:cc:7a:68:73:06:fe:17:63:3b:a9:c5:d1:bc:ef:9a:5e:
         aa:f6:69:95:78:17:2d:c9:2e:26:3c:26:71:a6:08:cd:b3:18:
         77:96:e2:c4:e0:39:67:0d:18:dd:7c:0f:57:41:78:73:cf:6c:
         06:a9:77:e2:d7:40:b0:e5:5d:ce:2a:47:cc:15:9c:d6:ff:18:
         60:d4:b1:a1:f0:ab:36:d1:c5:25:e1:85:e1:e6:8c:9f:ae:62:
         fa:29:f4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----