Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88fc7b11-27c5-436c-9c47-2bc31fd12223.roa
File:                     88fc7b11-27c5-436c-9c47-2bc31fd12223.roa (raw, json)
Hash identifier:          jyqH0alsuG6QY/3TKeZY+X8kcYfKemzq8pBKEdSNg0Q=
Subject key identifier:   42:9E:05:1C:54:71:9D:5C:0D:43:0F:42:3B:7A:FD:26:8F:03:6F:E6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5B50BDF7E81E9350741E2F433F38094FD21881E4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88fc7b11-27c5-436c-9c47-2bc31fd12223.roa
Signing time:             Tue 28 Oct 2025 00:50:47 +0000
ROA not before:           Tue 28 Oct 2025 00:50:47 +0000
ROA not after:            Tue 02 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f68:c000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:50:bd:f7:e8:1e:93:50:74:1e:2f:43:3f:38:09:4f:d2:18:81:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 28 00:50:47 2025 GMT
            Not After : Dec  2 23:59:59 2025 GMT
        Subject: serialNumber=589b94c4e1f02a1bc3c452cc6508e48b9f3ffe9c60842362db3ae40fb71824b6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:94:17:7d:e2:96:65:de:39:bb:a6:b9:72:df:
                    f5:2a:ef:39:a0:a0:0a:f1:52:21:69:5a:1c:d1:b6:
                    b2:85:9c:37:23:17:33:06:e6:f1:20:a0:97:3b:84:
                    20:03:19:e0:ad:12:df:af:97:13:05:be:29:f6:06:
                    74:3f:77:62:cb:a5:11:c2:79:a9:9f:56:d7:8a:1d:
                    cf:45:f7:dc:b9:8e:20:f5:4c:5d:61:d0:e8:1b:7c:
                    f9:55:81:ca:a3:e2:de:2f:8d:83:82:35:18:54:9a:
                    ee:bc:91:93:03:4d:0a:7a:b9:2b:61:86:82:56:6e:
                    d6:a7:8b:bd:08:31:3c:bd:e4:0f:74:a1:db:9f:20:
                    b7:3d:d9:2d:de:6b:25:b0:a0:3c:a6:09:95:47:d8:
                    76:03:cb:34:5b:a4:a7:eb:78:27:ec:60:88:91:6a:
                    fb:a4:f6:ee:6e:08:cb:3d:4f:38:f0:3c:d1:42:8f:
                    2e:d6:c4:6d:d9:50:d9:b0:c2:b0:7f:dd:ed:b1:ca:
                    14:0f:75:9e:01:f3:33:a4:0b:46:6b:4e:70:06:12:
                    94:90:f8:80:32:7e:e2:1b:cc:5f:cb:28:08:ac:25:
                    0a:04:c7:e9:6c:58:05:67:6f:c6:8f:c3:3e:92:d0:
                    89:ff:6a:0b:1e:bc:2d:ea:9d:23:b9:f1:19:36:fa:
                    2c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:9E:05:1C:54:71:9D:5C:0D:43:0F:42:3B:7A:FD:26:8F:03:6F:E6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88fc7b11-27c5-436c-9c47-2bc31fd12223.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f68:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         4f:d6:6d:b6:1f:7b:4f:f0:44:78:3d:60:13:15:8c:e7:29:47:
         a1:48:e5:cb:f1:8c:0a:61:da:3b:94:70:2c:fd:91:73:71:2a:
         a3:ad:86:09:ff:0f:fc:2d:1b:1a:7c:52:ae:67:d8:f4:39:ad:
         03:01:cc:6c:db:ce:fe:73:7e:50:b7:56:30:c4:35:c6:7b:1b:
         42:c8:08:94:1c:e7:d5:24:0c:51:37:84:d5:cc:76:0a:c8:79:
         5f:78:40:78:ef:7b:29:95:67:dd:ae:76:5e:27:70:72:0c:e5:
         3f:03:ec:9c:40:47:b0:b3:da:f3:b9:81:c2:74:21:a5:e0:89:
         f9:ac:7a:54:fc:b1:94:c4:fe:40:d3:b3:3b:8a:84:40:28:57:
         3a:6a:4b:b5:a8:ab:ee:31:41:1f:85:ee:0f:38:90:6d:a6:c4:
         91:58:d3:aa:f3:8e:8c:13:97:6d:c1:f7:8b:30:0a:9f:33:03:
         67:0b:a6:db:02:e3:64:70:dd:7e:64:8e:84:e1:70:df:f3:68:
         42:01:02:10:1d:35:ad:a9:58:73:0e:26:e8:7c:98:2a:5f:e4:
         1c:cf:f5:2d:ac:13:07:37:ca:b2:d3:47:8d:af:72:23:12:c8:
         59:0f:7d:e0:1c:85:f3:b4:67:68:f8:80:aa:01:5c:3a:4d:d7:
         f3:bb:90:a9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----