Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89570917-e234-4dbb-8694-dc75eb220444.roa
File:                     89570917-e234-4dbb-8694-dc75eb220444.roa (raw, json)
Hash identifier:          qnrBXgKDtnNwkDdDu/RD9amLdH+TfnALCcngssLtYTk=
Subject key identifier:   11:AD:92:25:07:D9:6D:B3:A0:FF:B3:2D:DC:1D:EC:18:21:C6:94:66
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4010B498BC8063A04B804D6EAB3FD7525BD2E448
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89570917-e234-4dbb-8694-dc75eb220444.roa
Signing time:             Wed 29 Oct 2025 00:30:51 +0000
ROA not before:           Wed 29 Oct 2025 00:30:51 +0000
ROA not after:            Wed 03 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ff2:8000::/39 maxlen: 39
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:10:b4:98:bc:80:63:a0:4b:80:4d:6e:ab:3f:d7:52:5b:d2:e4:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 29 00:30:51 2025 GMT
            Not After : Dec  3 23:59:59 2025 GMT
        Subject: serialNumber=c340b09c3ae81194d2c6ac7c4f13400b3ae5058ecbf7482bb711e147f88384d6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ba:2f:55:5e:90:d7:a7:2d:e7:72:42:b1:90:
                    24:b0:1e:ad:6d:09:b0:7a:47:41:da:10:10:a1:67:
                    52:b7:41:34:81:ed:16:1b:c6:3a:e7:cb:83:9f:88:
                    10:e8:66:4e:e5:9d:c9:99:31:f3:b6:72:dd:89:30:
                    61:b6:c7:97:8f:5f:c8:0a:ee:17:79:d9:9e:8b:54:
                    b0:f9:91:58:1e:ec:41:b0:18:06:84:58:16:e6:84:
                    b4:33:67:cb:cc:88:54:75:31:45:ba:14:6a:48:07:
                    80:5b:39:6b:43:20:08:87:81:f1:4d:64:e9:11:24:
                    ce:be:71:09:47:60:fe:b6:d9:f4:28:77:c7:1b:c0:
                    c1:cc:d5:64:c3:cb:88:19:25:12:d5:91:2a:06:1f:
                    4c:5d:84:2f:ae:04:7f:ce:47:e9:b8:59:5a:6f:da:
                    fe:0e:5c:39:f2:12:d6:11:8a:f5:cb:db:8f:5b:cb:
                    7b:4c:43:2a:1a:48:fc:51:3c:3d:e6:89:dc:d0:87:
                    74:d5:4d:46:34:18:e1:5c:f0:2c:60:16:3c:9c:65:
                    75:de:00:8e:68:0c:7e:1d:a4:a7:99:0a:20:ed:63:
                    08:50:2c:58:d6:19:33:ce:b7:2f:f3:be:f5:77:1c:
                    20:2a:5a:c1:e4:22:58:ee:68:fd:00:6b:7b:21:c5:
                    c7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AD:92:25:07:D9:6D:B3:A0:FF:B3:2D:DC:1D:EC:18:21:C6:94:66
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89570917-e234-4dbb-8694-dc75eb220444.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         cd:f9:5f:31:98:26:09:60:8b:0d:9d:5d:6a:5a:8a:34:4b:29:
         2c:d9:01:0c:bd:a6:e8:45:7f:78:91:47:ce:6c:d5:06:3c:a2:
         b4:77:9c:cd:e0:7f:fc:1e:c7:a4:8c:2a:69:50:78:4b:41:22:
         fd:59:bf:ba:9f:fa:b5:ad:3d:13:48:cf:9c:9f:3d:d4:87:69:
         cd:fb:44:a3:55:b2:3f:4e:ee:16:7e:d5:88:50:72:a6:c5:e8:
         f7:a5:0b:5f:4b:86:d9:4d:c3:20:d2:4d:af:7d:76:ab:4e:f7:
         23:89:59:12:f4:5e:95:d2:76:48:83:ed:e2:21:f9:22:2f:bd:
         2c:08:64:b8:16:af:cb:73:20:6d:20:c6:34:dd:b8:33:32:a3:
         6c:a6:5b:2e:bc:ef:2f:c9:9b:3e:fd:d3:ca:dd:15:5a:b4:38:
         78:43:52:7a:4f:ec:dc:10:06:df:4d:1f:3a:32:43:3d:59:6f:
         d5:38:b6:f2:70:43:3c:0e:e6:12:30:35:ef:9a:31:13:d1:92:
         87:de:72:24:f1:85:94:9a:f0:74:7b:70:e1:e0:6b:c5:a4:29:
         1c:3d:c1:2a:c8:4a:b1:6a:45:e5:27:34:a0:62:b4:39:50:06:
         f4:f6:75:8f:ce:a1:62:a1:28:f4:cc:9c:92:94:bc:b7:b9:b6:
         e4:0a:9b:4f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----