Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d04681e-2458-4f39-84be-dcccbbcbdab0.roa
File:                     6d04681e-2458-4f39-84be-dcccbbcbdab0.roa (raw, json)
Hash identifier:          YP5HlMw16eLWes+aTSkloqw/qza6QKTKi4+0rys/ajU=
Subject key identifier:   B6:04:D9:9D:8D:BE:77:9D:A6:00:A5:AF:30:AD:93:F4:A4:61:D3:17
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       71104C61AB9F82EF0101A3136329F9F2F1826B50
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d04681e-2458-4f39-84be-dcccbbcbdab0.roa
Signing time:             Sun 02 Nov 2025 00:10:33 +0000
ROA not before:           Sun 02 Nov 2025 00:10:33 +0000
ROA not after:            Sun 07 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f60:c000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:10:4c:61:ab:9f:82:ef:01:01:a3:13:63:29:f9:f2:f1:82:6b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  2 00:10:33 2025 GMT
            Not After : Dec  7 23:59:59 2025 GMT
        Subject: serialNumber=9b4bd1cf6ccf562e7d096b4d2e3ba418e1b68acf3df954858ff45b27f3ae5bbb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ac:27:19:72:87:8f:df:09:5f:6e:9f:3d:f3:
                    84:be:9e:6f:dd:73:aa:c9:2b:a1:d5:e4:9d:f8:64:
                    83:0e:02:ce:7c:01:50:e8:fe:fd:fb:d2:10:44:42:
                    de:72:b5:6d:cf:84:01:f5:fa:f0:b0:7e:37:8f:5f:
                    5d:f0:a2:d1:e5:41:80:db:ff:93:36:84:63:fd:40:
                    35:ed:f9:c1:c1:95:0a:f1:66:d8:45:9c:04:13:a8:
                    d9:b4:31:aa:65:71:ac:9e:71:e8:37:a9:c9:c1:25:
                    0f:2f:04:c1:94:4c:64:8f:c2:c4:85:26:93:8b:d6:
                    38:cb:ab:06:c8:0a:42:cd:8f:70:87:05:c4:a6:5a:
                    98:db:c5:68:e9:78:17:b4:ae:f1:cb:fe:bf:b3:a5:
                    13:4d:b0:9a:01:22:e9:98:bc:3e:b1:01:d3:72:a3:
                    5e:e3:f9:16:38:2e:7c:23:a3:3f:fd:d9:3a:e9:13:
                    54:ab:25:dc:9d:e3:cf:3c:ba:71:8b:c7:d6:51:4c:
                    b9:50:89:e8:d6:29:24:13:62:33:e7:f0:93:60:32:
                    95:1b:e2:de:e2:72:21:94:49:05:78:5b:da:2b:2f:
                    3c:c0:09:9c:29:cc:2b:28:d1:dd:86:8e:de:48:b2:
                    29:db:1a:57:59:90:33:4a:08:6a:c8:1a:b0:43:8f:
                    d0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:04:D9:9D:8D:BE:77:9D:A6:00:A5:AF:30:AD:93:F4:A4:61:D3:17
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d04681e-2458-4f39-84be-dcccbbcbdab0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f60:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         05:84:80:fe:d5:a3:41:79:6b:ca:7a:38:db:bf:30:6e:72:32:
         1c:0b:6b:ec:fa:e3:b8:78:ea:f6:d4:1f:27:43:a2:7c:73:43:
         28:62:25:9c:5c:e7:fa:06:56:63:ab:03:ad:28:9a:c9:c0:a7:
         e9:fa:7a:73:bd:91:da:aa:10:12:45:64:89:98:48:3d:ed:d5:
         2f:00:b8:4d:4b:00:5a:2f:43:1e:5b:94:ed:32:90:07:1a:90:
         ea:9a:f7:21:cb:fc:1f:39:ae:dc:62:70:48:86:92:63:49:cb:
         f1:a6:41:f8:e4:f7:03:84:e9:84:2b:32:ae:82:7a:54:18:fc:
         39:d3:af:bb:59:d4:e1:33:70:79:8b:d3:f3:a1:1b:ec:3e:4f:
         75:a8:b8:fc:49:5c:31:08:79:d5:30:cd:51:c5:58:31:b6:4a:
         7e:60:84:91:d8:3b:ab:1c:d8:47:83:97:c0:8a:06:ed:9c:55:
         fe:2e:43:f5:29:cf:8b:36:84:aa:f2:c6:3c:e7:2b:19:18:76:
         5c:97:d3:5a:9d:24:0b:d0:70:0c:e2:25:31:0e:d9:06:f4:38:
         b5:52:58:35:3f:38:b3:c0:4e:96:31:64:b5:02:a5:79:24:e5:
         95:d5:b9:d3:64:b5:3f:1b:a5:80:5a:8e:b8:88:66:b7:98:a9:
         ca:ce:91:98
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----