Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/712df843-0f79-4044-bae3-174bd1f87fce.roa
File:                     712df843-0f79-4044-bae3-174bd1f87fce.roa (raw, json)
Hash identifier:          bDIoFRX3zVNEN3cLGN+m/bzKg719CCLrqtMoNexPsXs=
Subject key identifier:   B6:D5:25:80:D4:EE:B3:3E:BD:35:5E:1F:77:40:2F:A2:DD:07:B2:64
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3412E34431994382DB9549D0F7E0EBAD5BFDB8F1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/712df843-0f79-4044-bae3-174bd1f87fce.roa
Signing time:             Sun 02 Nov 2025 00:41:17 +0000
ROA not before:           Sun 02 Nov 2025 00:41:17 +0000
ROA not after:            Sun 07 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff5:e000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:12:e3:44:31:99:43:82:db:95:49:d0:f7:e0:eb:ad:5b:fd:b8:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  2 00:41:17 2025 GMT
            Not After : Dec  7 23:59:59 2025 GMT
        Subject: serialNumber=fce7dd671ac4583a2c1d70b86c4721ab149e1fedb4352f14fbd6270bc62e32b5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:be:05:96:df:6d:72:22:96:79:ae:6f:92:10:
                    8c:e7:34:e2:4f:c8:78:61:85:55:52:46:0d:c6:ff:
                    0c:08:94:f9:44:d4:86:c0:1d:24:14:3d:a1:3e:39:
                    d7:87:4c:ab:88:50:b0:d4:29:3a:ce:cc:66:3c:cc:
                    d3:2b:c5:c2:cb:9e:88:ed:a4:15:2a:55:15:bb:80:
                    f4:2d:cc:a3:fe:71:c6:95:14:64:31:9b:19:ac:8f:
                    84:fc:42:ea:ec:5b:91:ad:80:81:50:73:cd:5c:5a:
                    c6:56:63:80:59:46:9a:33:b7:a2:0d:97:2a:e6:20:
                    52:3c:a8:56:24:c8:bd:36:c1:5f:2a:8d:8b:17:df:
                    e5:98:57:45:cd:1a:71:75:86:13:5e:56:34:fc:ab:
                    e3:48:05:df:0c:65:10:80:66:14:1a:ab:86:cb:85:
                    2d:19:74:fa:d3:28:63:dd:0d:b9:cc:0f:29:92:78:
                    a1:0b:cf:fd:13:f8:35:bb:47:dd:c8:05:19:a1:c6:
                    8a:3b:1e:09:95:fb:c5:9e:f4:34:88:0d:89:5e:ce:
                    4c:e7:d2:be:de:4e:b1:15:46:d2:c5:fd:64:84:2d:
                    92:77:a8:27:ea:03:80:0f:bd:e3:c4:a7:e0:4a:34:
                    cc:ed:3a:a1:29:2c:68:4a:21:a2:71:0b:76:20:7f:
                    53:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D5:25:80:D4:EE:B3:3E:BD:35:5E:1F:77:40:2F:A2:DD:07:B2:64
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/712df843-0f79-4044-bae3-174bd1f87fce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff5:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         8c:d6:07:03:a5:4b:55:61:f3:e6:51:0e:bd:04:66:62:8c:5e:
         ad:24:4a:88:9d:b8:fe:61:d2:6f:2e:3b:eb:0b:a8:bb:3d:98:
         56:3e:8d:71:c0:6a:bd:c2:8c:4f:c1:f8:fc:9d:f3:d1:e2:b8:
         76:5f:4c:17:51:8e:a8:64:e8:53:e3:d7:b2:36:dd:7e:08:b7:
         c6:c5:9b:9e:8d:73:96:da:b0:78:55:d2:03:b1:44:54:6c:45:
         f3:7a:f5:f6:55:3c:eb:b4:d4:dc:36:1f:4f:69:6e:d8:40:7f:
         7e:22:e4:58:cd:3a:96:87:d2:fb:3b:f8:61:df:12:67:26:d9:
         b9:2c:b6:c9:10:45:1d:f7:b1:e5:80:70:35:ef:80:0a:12:ca:
         a1:b0:b3:af:72:08:ea:48:8b:00:69:17:07:17:3f:e6:1a:13:
         e8:6f:eb:5d:25:81:d0:32:97:bd:31:87:e9:ba:ff:2f:47:f4:
         2e:ca:59:12:05:d4:48:1d:39:5f:92:a2:50:64:e3:26:f0:72:
         5c:ed:dc:7d:5f:7c:51:37:55:8c:c4:cb:d9:94:60:66:12:a6:
         9b:2e:16:41:84:df:18:1b:26:c7:bf:fe:d0:5f:92:e0:a7:21:
         a6:1b:c5:74:0f:ff:06:f2:31:82:6b:8c:f3:92:e0:37:05:87:
         14:28:4b:8c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----