Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b264a8c-788f-4473-b1b8-67e1173f8a94.roa
File:                     6b264a8c-788f-4473-b1b8-67e1173f8a94.roa (raw, json)
Hash identifier:          i5PRTO59438DL5io2Us4qCORNjiFjBaL68bAmNz9TuU=
Subject key identifier:   0A:09:EF:70:D8:54:C8:F7:8F:C3:D4:94:3A:5C:38:8F:D7:A6:08:BA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       51D820167A49B359317876BA617EC8C72EF95784
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b264a8c-788f-4473-b1b8-67e1173f8a94.roa
Signing time:             Tue 28 Oct 2025 00:00:09 +0000
ROA not before:           Tue 28 Oct 2025 00:00:09 +0000
ROA not after:            Tue 02 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f01:4850::/47 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:d8:20:16:7a:49:b3:59:31:78:76:ba:61:7e:c8:c7:2e:f9:57:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 28 00:00:09 2025 GMT
            Not After : Dec  2 23:59:59 2025 GMT
        Subject: serialNumber=d863c7d5e6b2b6530c97d7c0eb1e71f38d38a262683eb309ac06fd7c35329a20, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:70:04:66:be:df:98:60:21:e3:c7:d7:08:dc:
                    38:ee:f5:d0:dc:4a:9e:c5:af:d1:83:3b:90:91:ca:
                    d1:ed:f7:a9:f1:a5:04:6a:b8:99:3e:72:50:a4:38:
                    c6:78:31:f8:58:f0:eb:23:11:86:dd:b1:4b:76:68:
                    7e:cc:44:12:f0:f4:a1:88:f5:2b:02:76:98:6d:03:
                    36:f1:65:6a:5f:f3:08:84:14:3a:15:65:57:4e:30:
                    22:10:f8:c3:3d:81:95:a2:ca:c5:6c:ba:e5:13:d7:
                    f8:36:7f:44:fe:ae:ef:13:5e:f4:97:05:a1:d9:2a:
                    cc:c8:f1:55:e5:b0:0f:19:50:4b:2f:a6:21:e0:07:
                    7c:04:3f:c6:29:6f:e3:74:ad:82:1f:f1:77:b3:1e:
                    e0:03:01:d4:28:17:6b:75:ca:74:14:16:96:cc:8b:
                    98:f4:0e:b2:a0:45:d2:fd:3d:39:df:57:d4:64:09:
                    ff:60:2e:4d:2b:c8:19:d1:6e:fb:dd:8a:b1:27:56:
                    8c:90:7d:6f:70:d4:3a:8c:d7:f6:26:07:ba:7b:33:
                    8c:75:be:0c:67:6c:9f:15:bc:38:a6:48:2a:31:d9:
                    e5:de:56:f1:86:c5:2c:67:dd:94:2e:37:1b:75:ac:
                    25:2b:90:af:ee:9d:cc:41:06:4d:6b:45:37:03:60:
                    73:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:09:EF:70:D8:54:C8:F7:8F:C3:D4:94:3A:5C:38:8F:D7:A6:08:BA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b264a8c-788f-4473-b1b8-67e1173f8a94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f01:4850::/47

    Signature Algorithm: sha256WithRSAEncryption
         7e:c9:fc:ba:71:07:d3:a9:77:a8:5a:a9:63:63:c8:ae:e7:88:
         64:a4:92:2e:9b:9f:ba:9a:a6:cd:63:32:bd:64:79:73:fd:bb:
         a4:b2:6b:e6:aa:76:26:57:f1:d9:11:dd:2a:e4:d0:86:14:81:
         17:2c:8c:34:85:60:27:de:75:98:9d:cb:d2:8e:44:54:2e:d8:
         d9:e0:40:6a:98:6a:ef:58:a2:5e:16:2f:e2:26:09:ab:03:0d:
         5b:59:4f:59:7c:76:0c:b9:f3:b5:23:20:b8:ae:9a:d9:e7:c4:
         10:c1:1f:cd:ea:5c:c8:ae:eb:6d:75:c0:ce:07:37:4f:c1:e0:
         98:2c:f0:73:38:85:e2:a2:c9:14:10:9c:a6:e5:f9:da:ce:63:
         13:76:2a:b8:a0:a6:f6:f3:62:e8:44:cc:74:61:22:6a:98:98:
         f6:02:4d:d4:54:72:99:d0:01:85:42:c1:07:f7:70:63:94:6a:
         cd:dd:18:2c:c8:52:59:bd:df:1d:9d:a6:3b:a3:00:3b:91:8a:
         c2:d0:01:6c:b6:e5:47:3e:fe:3e:22:9b:c3:9b:f2:ef:f7:db:
         64:0a:6b:04:18:17:49:87:39:f7:03:3f:89:a9:ad:05:38:ea:
         8b:27:ef:8f:32:10:34:30:64:80:e2:29:38:ab:52:3d:89:ba:
         12:d1:69:de
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----